Privacy policy

Last updated: 2026-05-18

Data controller

KL Photography

Operated by Karl L.

Dublin D13, Ireland

Email: klphotography.ie@gmail.com

What data we collect

Field Personal data? Required
Name Yes Required
Email address Yes Required
Wedding date No Optional
Venue No Optional
Message Potentially Required

We do not collect anything else. The contact form does not write cookies and we use no third-party tracking scripts beyond Cloudflare Turnstile (spam protection) and Cloudflare Web Analytics (cookieless page performance metrics — see Cookies and analytics below).

Why we process this data (purpose and legal basis)

Purpose: To respond to your enquiry about wedding photography services.

Legal basis: Pre-contractual measures (GDPR Article 6(1)(b)) — your enquiry is a step toward a possible photography contract.

Data processors

Processor Role Location Privacy policy
Cloudflare, Inc. Website hosting, form infrastructure, spam protection (Turnstile), cookieless analytics USA (SCCs apply) cloudflare.com/privacypolicy
Resend, Inc. Email delivery of your enquiry to the photographer USA (SCCs apply) resend.com/legal/privacy-policy
Google LLC (Gmail) Storage of the received email in the photographer's mailbox USA (SCCs apply) policies.google.com/privacy

How long we keep your data (retention)

We retain your enquiry data in our email inbox for up to 12 months, or until a booking is confirmed or declined — whichever comes first. After that, we delete it from active correspondence. You may request earlier deletion at any time by emailing klphotography.ie@gmail.com.

Your rights under GDPR

Under the General Data Protection Regulation you have the right to:

To exercise any of these rights, email klphotography.ie@gmail.com.

Cookies and analytics

This website sets zero cookies and uses no local storage. We use Cloudflare Web Analytics for cookieless page performance metrics — this beacon does not set cookies, does not use localStorage, does not log your IP address, and does not track you across sites. For details see developers.cloudflare.com/web-analytics.

International data transfers

Our processors (Cloudflare, Resend, Google) are based in the United States. These transfers rely on Standard Contractual Clauses under GDPR Article 46. Each processor publishes its data transfer documentation at the links in the Processors section above.

Automated decision-making

We do not use automated profiling or automated decision-making (GDPR Article 13(2)(f)).

Supervisory authority

If you have concerns about how we handle your personal data, you may contact the Irish Data Protection Commission:

Data Protection Commission (DPC)

21 Fitzwilliam Square South

Dublin 2, D02 RD28

Ireland

Phone: +353 (0)761 104 800

Web: www.dataprotection.ie

Complaint form: forms.dataprotection.ie/raise-a-concern

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.