MS PHOTOGRAPHY
Privacy policy
Updated:
Who is responsible for your data?
The controller of personal data processed through MS Photography is Mateusz Stepniak Leadforge Marketing, Polish tax number (NIP) 7282721888, VAT PL7282721888. Correspondence address: ul. Tuwima 86/24, 90-026 Łódź, Polska. Contact info@ms.photography about your personal data.
Shoot locations are agreed individually. Meetings are by appointment only. We agree on the location, availability and cost before booking.
What information do we use, and why?
The enquiry form collects your name, email address and session type, plus optional location, preferred date, message and selected photograph identifiers. Providing information is voluntary, but a name and email are required to use the form and receive a reply. Please do not include health information or other particularly sensitive details.
We handle session enquiries and quotations to take steps at your request before entering a contract, and bookings to perform that contract (GDPR Article 6(1)(b)). Other correspondence, website security and establishing, exercising or defending legal claims rely on legitimate interests in communicating with interested people and protecting our services and rights (Article 6(1)(f)). Records required by law, such as accounting documents, are processed to meet legal obligations (Article 6(1)(c)).
An enquiry does not subscribe you to marketing or grant permission to publish your photographs. Shoot terms and permission to use your image are agreed separately.
The form and our service providers
The production form sends your enquiry to a server function hosted by Vercel. Resend then sends an email to the controller’s inbox. Enquiries are not saved in a separate website database. Message copies and technical information may be processed by email delivery, mailbox and hosting services.
Recipients may include Vercel for hosting, Resend for email delivery, our mailbox provider and authorised people providing technical or business support, where necessary for their work. Information may also be disclosed to authorities where legally required.
A sending confirmation means the email delivery service has accepted the message for processing. Sending an enquiry does not reserve a shoot date.
Retention
We retain enquiries that do not lead to a booking for up to 12 months after the last contact, unless specific information needs to be retained to establish, exercise or defend legal claims. Contract information is retained to perform the contract and subsequently for applicable legal obligations or limitation periods. Technical logs and backups follow the retention cycles of the relevant services.
Browser storage, statistics and fonts
The site uses localStorage to remember your language, gallery view and saved photograph identifiers. These preferences stay in that browser and can be deleted through its settings. Selected photographs are sent to us only when you submit an enquiry.
This version does not run Google Analytics, Google Ads or external behavioural analytics. Technical click events are not transmitted to an analytics provider. Fonts are served from this website rather than loaded from Google Fonts. Hosting services may process connection information such as IP address, time, requested resource and browser details to operate and secure the site.
External sites and international transfers
Instagram and Google Business Profile links take you to external services governed by their own privacy policies. The Instagram widget uses local photographs rather than an embedded feed. If you contact us on Instagram, we use the conversation to handle your enquiry.
International providers may process data outside the European Economic Area, including in the USA. Transfers require an appropriate basis, such as an adequacy decision or standard contractual clauses with any required safeguards. You can contact the controller for details of applicable safeguards and how to obtain a copy.
Your rights
Subject to the GDPR, you may request access, correction, erasure or restriction of your personal data. Data portability applies in the circumstances provided by law. You may object to processing based on legitimate interests on grounds relating to your particular situation. Where consent is the basis, you may withdraw it without affecting the lawfulness of earlier processing.
You may complain to the Polish supervisory authority, the President of the Personal Data Protection Office (uodo.gov.pl), or your competent supervisory authority. Contact the controller to exercise your rights. We may need information to verify your identity and respond within the time limits set by the GDPR.
We do not make decisions with legal effects about you solely by automated processing, including profiling.
Changes
We update this policy when the site or our processing changes. Before enabling new analytics or advertising tools, we will update the information and provide any required consent controls.