Privacy Policy

Privacy Policy

This Privacy Policy explains how Elbow Lens Studio processes personal data in connection with its website, inquiries, bookings, and product photography services for small brands.

Data collected only as described in this policy
Your rights and options are detailed below
Questions handled via our contact channel
GDPR
EU framework

GDPR Overview

Where GDPR applies, we process personal data on a lawful basis such as consent, contract performance, legal obligation, or legitimate interests, depending on the context. We limit processing to what is necessary for inquiry handling, studio operations, delivery of edited files, recordkeeping, and compliance.

Because the studio is established in Portugal, GDPR applies to our processing of personal data in the circumstances covered by EU law.

This section is intended for individuals whose data is processed under the GDPR.
GDPR-aware

Your GDPR Rights

Where applicable, individuals may request access, rectification, erasure, restriction, objection, and data portability, and may withdraw consent when processing is based on consent. A complaint may also be raised with the competent supervisory authority if a person considers that their rights have been affected.

GDPR rights are assessed against the nature of the request and any legal exceptions.
01 · Purpose

How We Use Data

We use personal data to answer inquiries, review product counts and style requirements, prepare quotes and delivery plans, manage bookings, coordinate product intake, obtain sample setup approval, produce and edit images, deliver proof galleries and final files, handle payments, maintain records, communicate about the project, and meet legal or accounting obligations. We may also use limited technical data to secure and improve the website.

Processing is tied to the studio workflow and related administration.
02 · Sharing

Service Providers

We may share personal data with service providers that support website hosting, communications, file delivery, storage, payment processing, or administrative functions. These parties act under instructions or contractual terms appropriate to their role and should process the data only for the services they provide to us.

Operational partners receive only the data needed for their role.
User Rights

Your Rights

Subject to applicable law, individuals may have rights to access their data, correct inaccurate information, request deletion, object to certain processing, and ask for restriction or portability in appropriate cases. We may need to verify identity before acting on a request and may decline requests where the law allows us to do so.

Available rights may vary according to the legal basis and the type of data involved.
Requests

How to Make a Request

To exercise a privacy right, a person should provide enough information to identify the relevant record and describe the request clearly. We may ask for additional details to confirm identity or to understand the scope of the request. If a request is complex or repetitive, we may respond within a longer period permitted by law.

Requests are handled through the contact details listed in this policy.
Data Retention

Data Retention

We keep personal data only for as long as needed for the relevant inquiry, project, accounting, legal, or operational purpose. After that, data is deleted, anonymized, or archived where retention is required or reasonably necessary. Image delivery records and project notes may be retained for a limited period to support service history and dispute handling.

Retention periods depend on the purpose for which the data was collected.
Policy Updates

Policy Updates

We may update this Privacy Policy from time to time. When changes are material, we will take reasonable steps to make the revised version available and indicate the effective date where appropriate. Continued use of the website after an update does not remove any rights that apply under law.

The policy may be revised to reflect legal, operational, or technical changes.
01 · Collection

Data We Collect

We may process identification and contact details, inquiry content, booking information, product and shot-list details, reference materials, delivery preferences, payment-related records, communication history, and technical data such as device and usage information. Where relevant, we also process image files and related project notes needed to complete the service.

The data collected depends on the inquiry, booking, and delivery steps used.
02 · Sources

How We Collect Data

We receive data from contact forms, email messages, planning calls, booking discussions, product drop-off or courier arrangements, proof-gallery review, and file-delivery interactions. We may also generate internal records from session planning, production, editing, and administrative handling.

Most information is provided directly by the user during the project process.
03 · Cookies

Cookies We Use

We may use essential cookies, preference cookies, and basic analytics or performance cookies. These help the site operate, remember limited settings, understand how pages are used, and support technical stability. We do not rely on cookies for purposes beyond those described in this policy without a lawful basis where required.

Cookie use is limited to practical website and service functions.
04 · Controls

Cookie Controls

Users may manage cookies through browser preferences and, where available, site-level controls. Essential cookies may remain active where they are needed for basic operation, security, or form handling. Disabling certain cookies can affect performance, remembering preferences, or access to some features.

Browser settings can limit non-essential cookies, but some site functions may be affected.
Privacy Office

Contact Information

Email contact
Telephone contact
+351 915 486 848
Postal address
Rua Belmiro Ferreira 140, 4610 Felgueiras
Privacy contact