Privacy Policy
Effective Date:
1. Who We Are
Shirak Photography (”we”,”us”,”our”) is a photography business based in Sweden. This website, shirakphotography.se, showcases my portfolio and provides information about my photography services.
For any privacy‑related questions, you can contact me at:
📧 shirak@shirakphotography.se
2. What Data We Collect and Why
We collect minimal personal data, strictly for running our photography business.
a) Contact Form (WPForms)
When you fill out the contact form on our website, we collect:
- Your name
- Your email address
- Your phone number (if provided)
- Any message you write
How we use it: The information is sent to us via email so we can respond to your inquiry about photography services.
Do we store it on the website? No. WPForms does not save your information in the website’s database – it is only emailed to us.
Legal basis: Legitimate interests (responding to potential clients) and taking steps at your request before entering a contract.
b) Invoice Data (Offline Storage)
If you hire me for photography services and I need to send you an invoice, I will save:
- Your name, address, and tax information (if required)
- The services provided and the invoice amount
How we use it: To comply with tax/accounting legal obligations and for warranty/service follow‑up.
Do we store it on the website? No. This data is stored securely offline (on my computer or accounting software), not on the WordPress website.
Legal basis: Legal obligation (tax laws) and contract performance.
c) Analytics (Burst Statistics Plugin)
We use the Burst Statistics plugin to understand how visitors use our website. Burst is a privacy‑focused analytics tool that collects only anonymous data, such as:
- Which pages are visited
- How long you stay on the site
- Device and browser type
- Approximate geographic region (country level)
No personal data: Burst does not use cookies, does not track you across other websites, and does not collect your IP address (or anonymises it immediately). We cannot identify you personally.
Legal basis: Legitimate interests (improving our website) – and because no personal data is collected, GDPR compliance is straightforward.
d) Website Hosting & Server Logs
Our website is hosted by a GDPR‑compliant provider Hostinger. Standard server logs (IP address, browser type, timestamps) may be collected for security and troubleshooting. These logs are retained briefly and not used for marketing or profiling.
3. Cookies
Our website does not use marketing or tracking cookies. Burst Statistics is cookieless. WordPress may place a few essential cookies only for logged‑in users (which we don’t require) or comment functionality (if enabled).
We do not display a cookie banner because no non‑essential cookies are used. If this changes, we will update this policy and add a cookie consent banner.
4. Who We Share Your Data With
We do not sell, rent, or trade your personal data. We only share data with:
- Email service provider (to receive form submissions – your data travels via email).
- Accounting/tax software (if you become a client and we issue an invoice).
- Web hosting provider (server logs, security).
All these third parties are GDPR‑compliant or operate in countries with adequate data protection laws.
5. How Long We Keep Your Data
- Contact form emails: We keep inquiry emails until we have responded. If you do not become a client, we delete your email within 30–90 days.
- Client invoice data: Retained for the legally required period for tax purposes (typically 7–10 years in Sweden).
- Analytics data: Burst keeps aggregated, anonymous statistics indefinitely (no personal data).
6. Your GDPR Rights
Under GDPR, you have the following rights:
- Right to access – Ask for a copy of data we hold about you.
- Right to rectification – Correct inaccurate data.
- Right to erasure (“right to be forgotten”) – Request deletion of your data, unless we need to keep it for legal/tax reasons.
To exercise any of these rights, email us at shirak@shirakphotography.se. We will respond within one month.
7. Data Security
We take security seriously: our WordPress site uses HTTPS (SSL encryption); emails containing your personal data are stored in a password‑protected email account; and client invoice data is stored offline on an encrypted device or secure accounting software.
8. Children’s Privacy
Our website is not intended for children under 16. We do not knowingly collect data from minors.
9. Changes to This Policy
If we change how we handle personal data, we will update this Privacy Policy and change the “Effective Date” above.
