PRIVACY POLICY
Last updated: 26 September 2026
This page explains what personal data I collect through this website and in the course of my photography services, why I collect it, and what rights you have.
1. Who is responsible for your data
Abbie Smith, sole proprietor (EI), trading as Abbie Smith Photography, 6 rue d'Entraigues, 37000 Tours, France.
Contact: abbiesmithphotos@gmail.com
I am the data controller for the personal data described below.
2. What data I collect, why, and for how long
Contact form and email messages
Data: name, email address, your message, and details you share about a session (date, location, number of people)
Purpose: reply to your inquiry, prepare a quote or booking
Legal basis: steps taken at your request before a contract
Retention: 12 months after our last contact if no booking is made
Booking and payment information
Data: names, contact details, session details, invoices
Purpose: provide the photography service, issue invoices, keep accounts
Legal basis: performance of a contract; legal obligation
Retention: invoices and accounting records are kept for 10 years
Photographs taken during a session and online galleries
Data: photographs taken during a session (which may include children) and the online gallery used to deliver them
Purpose: deliver your photographs
Legal basis: performance of a contract
Retention: 1 year after delivery. Please download and back up your photos before then.
Use of photographs in my portfolio, website, social media, or promotion
Purpose: show my work
Legal basis: your consent, given in writing (for example in my session contract)
Retention: until you withdraw your consent
Browsing data and cookies
Data: IP address, device and browser information, pages visited
Purpose: operate the site, measure audience, display embedded content
Legal basis: your consent for non-essential cookies; my legitimate interest in running a secure website for strictly necessary ones
Retention: see section 6
For photographs of children, permission is given by a parent or legal guardian.
3. Is providing your data mandatory?
Your name and email address are necessary for me to answer your inquiry or take a booking. Without them, I cannot do so. Everything else you share is optional.
4. Who receives your data
Your data is accessible to me and to the service providers who help me run my business, acting on my instructions:
Squarespace (website hosting, contact form, payment processing, and cookie management)
Gmail (email)
Fotostudio (gallery delivery platform)
Stripe (payment processing)
I do not currently work with an outside accountant. I may share data with public authorities if the law requires it. I do not sell your personal data.
5. Transfers outside the European Union
Some of my providers — including Squarespace, Stripe, and Google (Gmail) — are based in the United States or may process data there. Where data is transferred outside the European Union, this relies on safeguards recognized by European law, primarily the European Commission's Standard Contractual Clauses.
6. Cookies
When you first visit this website, a banner lets you accept or refuse non-essential cookies. Nothing that requires your consent is placed until you accept, and continuing to browse is not consent. You can change your choice at any time via the cookie settings link in the site footer.
Strictly necessary cookies: Squarespace sets its own functional cookies (sometimes called "crumbs") needed for the site to work and stay secure. They do not require consent.
Audience measurement
I use Squarespace's built-in analytics to understand how visitors use this site (pages viewed, general location, device type). This requires your consent, given via the cookie banner.
Social media content
This site embeds content from Instagram. When you view an embedded Instagram post or feed, Meta (Instagram's parent company) may set cookies and collect data about your visit, even if you don't have an Instagram account or don't interact with the embed. This is governed by Meta's own privacy policy, available at facebook.com/privacy/policy. These cookies are only set if you accept non-essential cookies via the banner.
7. Your rights
You have the right to access your data, correct it, have it erased, restrict or object to its use, receive a copy in a portable format, and withdraw your consent at any time. Under French law, you can also set instructions for what happens to your data after your death.
To exercise your rights, write to me at abbiesmithphotos@gmail.com. I will answer within one month.
If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL: www.cnil.fr.
8. Security
I take reasonable measures to protect your data, and I choose providers that do the same.
I do not use automated decision-making or profiling in relation to your personal data.
9. Changes to this page
I may update this policy. The date at the top shows the latest version.
