This Privacy Policy explains how Cayenne Lens processes personal data in connection with its website and photography services for small brands. It covers information collected during inquiries, bookings, product intake, studio production, proof review, file delivery, and related communications.
Subject to applicable law, you may request access to your data, correction of inaccurate information, deletion in appropriate cases, restriction of processing, objection to certain processing, and portability where the right applies. If we rely on consent, you may withdraw it for future processing. We may need to retain limited information where required for legal, accounting, or security reasons.
To exercise your rights, send a clear request using the privacy contact details in this policy and describe the data or processing activity involved. We may ask for information needed to verify your identity and to locate the relevant records. If a request is not fully granted, we will explain the reason where the law requires us to do so.
We keep personal data only for as long as needed for the relevant purpose, including booking administration, project completion, accounting, dispute handling, and legal compliance. When data is no longer needed, we delete it or anonymize it where feasible. Some records may be retained longer if required by law or if they are needed to establish, exercise, or defend legal claims.
We may update this Privacy Policy from time to time to reflect changes in our processing practices, legal requirements, or service features. The revised version will apply from the date it is posted unless a different effective date is stated. For material changes, we may provide a notice through the website or by another reasonable method.
We may process identification and contact details, project details such as product counts, shot lists, reference materials, delivery instructions, booking and payment records, communication content, and technical data such as device and usage information. Where a private selection gallery or written usage notes are used, we also process the information needed to manage access, review selections, and record agreed image-use terms.
We collect data when you submit an inquiry, request a quote, arrange product drop-off or courier delivery, approve sample setups, review proofs, make payment, or communicate with us by email, form, or planning call. Some technical data is generated automatically when you visit the website or use the gallery and related service tools.
We may use essential cookies to support site security and core functions, preference cookies to remember basic settings, and analytics cookies to understand how the site is used. If a private gallery or similar feature relies on cookies or comparable technologies, those tools are used only to support access, session management, and service delivery.
You can usually refuse or delete cookies through your browser settings. Some cookies are necessary for basic site functions and may not be disabled without affecting the operation of the website. Where required, we present cookie choices through the site interface or similar controls.
We use personal data to respond to inquiries, review product counts and style requirements, prepare quotes and delivery plans, schedule sessions, manage product intake, conduct photography production, share proof galleries, deliver edited files, process payments, maintain records, support security, and comply with legal obligations. We may also use limited data to manage image-use notes and to communicate about project scope, approvals, and delivery status.
We may share personal data with trusted service providers that help us operate the website, manage communications, process payments, support file delivery, or maintain technical systems. We may also share information with delivery or logistics providers when product intake or return handling requires it. These parties are expected to use the data only for the services they provide to us.
We may disclose personal data to public authorities, courts, or other parties where we are required to do so by law, regulation, or a binding order. We may also share information when necessary to protect our rights, prevent fraud, or respond to lawful claims.
Under the GDPR, we act as a controller for the personal data we determine the purposes and means of processing. We rely on lawful bases such as performance of a contract, steps taken before entering into a contract, legal obligations, legitimate interests, and consent where consent is required. The same data may be used for more than one lawful basis depending on the context.
Where the GDPR applies, you may have rights to access, rectify, erase, restrict, or object to processing, and to data portability in appropriate cases. If processing is based on consent, you may withdraw consent for future processing. You also have the right to lodge a complaint with the competent supervisory authority, subject to the rules that apply in your location.
