Privacy Policy

This Privacy Policy explains how Light Story processes personal data when you contact us, request a quote, book a studio session, review proofs, or receive edited files. It also describes the main categories of data we use, the purposes of processing, and the rights available to you under applicable data protection law.

Effective DateAs stated in policy
ScopeAll users of our services
QuestionsContact

Contact Information

Contact Page
Privacy email
Privacy phone
+34 610 26 33 39
Postal address
Calle Oslo, 53, 28922 Alcorcón
Privacy contact

Use the contact details below for privacy questions, rights requests, or policy-related correspondence.

GDPR

EU data protection framework

GDPR Overview

Under the GDPR, we process personal data only when we have a lawful basis, such as performance of a contract, compliance with legal obligations, legitimate interests, or consent where required. We keep processing limited to what is relevant for the photography service, website operation, communication, and recordkeeping.

Where the GDPR applies, it governs our processing of personal data for users in the European Economic Area and, in some cases, related cross-border activity.
This section is intended for GDPR-covered users.

Protected individual rights

GDPR Rights

If the GDPR applies to your data, you may have the right to access, rectify, erase, restrict, object to certain processing, and request data portability. Where processing is based on consent, you may withdraw consent at any time without affecting prior processing. You may also lodge a complaint with the competent supervisory authority.

GDPR rights are handled after identity and scope checks where needed.
01

Data We Collect

We may process identification and contact details, inquiry content, booking and session information, product counts, shot-list details, reference materials, payment-related records, gallery access activity, and technical data such as device and browser information. Where you submit images or business materials for a photography project, we also process the content you choose to provide for planning, production, review, and delivery.

The data we collect depends on the inquiry, booking, and delivery steps used.
02

Sources of Data

We receive personal data from contact forms, email, phone calls, consultation appointments, booking communications, shot-list exchanges, proof-gallery review, and delivery interactions. We may also generate limited operational data during the handling of a project, such as service records, access logs, and internal notes needed to manage the session and file delivery.

Most information comes directly from the person making the inquiry or booking.
03

Cookie Types

The site may use strictly necessary cookies to support core functions, preference cookies to remember basic settings, and limited analytics cookies to understand how the site is used. Cookies may be session-based or persistent, depending on their purpose and the time needed to keep them active.

We use only the cookie categories needed for site operation and basic measurement.
04

Cookie Control

You can block or delete cookies through your browser settings, and you may need to repeat your preferences on each device or browser. If certain cookies are disabled, some parts of the site may not function as intended, especially features linked to form submission, session continuity, or gallery access.

Cookie choices can be adjusted through browser settings and, where available, site controls.
01

Purposes of Processing

We process personal data to respond to inquiries, assess project scope, prepare quotes, manage bookings, review shot lists and reference materials, coordinate product delivery, obtain sample setup approval, carry out photography production, provide proof galleries, edit and deliver files, handle payments and accounting, maintain records, secure our systems, and comply with legal obligations. We may also use limited technical data to operate the website, prevent misuse, and improve basic functionality.

We use data only for purposes connected to the website and photography service.
02

Service Providers

We may share personal data with trusted service providers that support website hosting, communication handling, file storage, gallery delivery, technical maintenance, and similar operational tasks. These parties act on our instructions and are expected to use the data only for the services they provide to us.

Service providers receive only the data needed to perform their assigned functions.
03

Legal Disclosures

We may disclose personal data when required to comply with applicable law, a lawful request from a public authority, or a binding legal process. We may also share information where necessary to establish, exercise, or defend legal claims, or to protect our rights and the security of our services.

Legal disclosures are limited to what is necessary for compliance or defense of claims.
User Rights

Your Rights

Subject to applicable law, you may request access to your personal data, correction of inaccurate information, deletion where appropriate, restriction of processing, objection to certain processing, and portability of data you provided to us. Some requests may be limited where we must retain information for legal, contractual, or security reasons.

Available rights may vary depending on the legal basis and the type of data involved.
Requests

How to Make a Request

To exercise your rights, send a clear request using the contact details in this policy and describe the data or processing activity concerned. We may ask for information needed to confirm your identity and to locate the relevant records. If a request is complex or numerous, we may respond within the period allowed by law.

Requests are reviewed in a reasonable manner and may require additional information to verify identity.
Data Retention

Data Retention

We keep personal data only for as long as needed for the relevant inquiry, booking, project management, delivery, accounting, dispute handling, or legal compliance purpose. When data is no longer required, we delete it or anonymize it unless a longer retention period is necessary under applicable law.

Retention periods depend on the purpose of the record and any legal duty to keep it.
Policy Updates

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our processing practices, legal requirements, or the services we provide. The revised version will apply from the date it is published unless a different effective date is stated.

We review this notice when our practices or legal obligations change.