Privacy Policy
How we collect, use and protect the information you share with us.
Last updated: September 2026
What data we collect
When you fill in the contact form or a booking request, we collect only the data you provide voluntarily: name, email address, phone number, and the content of your message.
What we use it for
We use this data to respond to your enquiry and to arrange the photo or video session you requested — including confirming a date, time and location. We do not use it for any other purpose and do not share it with third parties for marketing purposes.
Retention period
We keep enquiry and booking data for up to 2 years after our last contact with you, unless you request earlier deletion or the law requires a longer period (for example, accounting records for completed bookings).
Your rights
Under the General Data Protection Regulation (GDPR) you have the right to: access your personal data; correct inaccurate data; request deletion of your data; restrict processing; data portability; and withdraw any consent given at any time, without affecting the lawfulness of processing before the withdrawal.
Visit analytics (Umami)
We use Umami — a self-hosted analytics tool running on our own server, with no third parties involved. Umami does not use cookies, does not collect personally identifying information, and does not track visitors across different sites. We only see aggregated, anonymous figures — visit counts and most-viewed pages — with no way to identify a specific individual.
Your photo gallery
When you open your private gallery we record that it was opened, whether any files were downloaded, and whether a wrong access code was entered. We do not keep your IP address or your browser's identity — only a one-way fingerprint derived from them, valid for this one gallery, which cannot be turned back into an address and cannot be matched against any other gallery. Its only purpose is to tell us whether your delivery reached you. This record is deleted together with your photographs when the gallery expires. Our email provider, Resend, also tells us what became of the message that carried your link: whether it was delivered, whether it was opened, and whether it bounced. That tells us whether to get in touch again, not who you are — we are not given the address you opened it from. This record is deleted along with the photographs too.
Contact
For questions about how we handle your personal data, write to us at hello@vislumia.com.