Privacy Policy

Effective Date: 18 August 2025
Full Legal Terms |
In Simple Terms |
|---|---|
| 1. Introduction | |
| This Privacy Policy explains how Brandon Schuster Photography ("the Photographer") collects, uses, stores, and protects personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"). | This page explains how I use and protect your personal data, following GDPR rules. |
| 2. Data Controller | |
| The Photographer, Brandon Schuster, is the Data Controller for all personal data processed in the course of providing photography services. Contact: brandon@schusterphoto.ie | I (Brandon) am responsible for your data. You can contact me at my email. |
| 3. Data Collected | |
| Personal data may include: name, email address, phone number, company details, billing information, and images where individuals are identifiable. | I collect basic details (name, email, phone, billing info) and sometimes photos of people. |
| 4. Purpose of Processing | |
| Personal data is processed for: fulfilling contracts, communicating with clients, invoicing and accounting, and complying with legal obligations. | I use your data to do the job, talk to you, send invoices, and meet legal requirements. |
| 5. Lawful Basis | |
| Processing is based on: performance of a contract; legal obligations; and legitimate interests in managing the business. | The reasons I use your data: to deliver services you booked, follow the law, and run my business. |
| 6. Data Retention | |
| Data is retained as long as necessary to fulfil the contract and six years thereafter for tax/accounting. Images retained 30 days unless storage is purchased. | I keep your data for the job and up to six years for tax. Photos are stored 30 days unless you pay for longer. |
| 7. Data Sharing | |
| Data not shared except with service providers (e.g. hosting, cloud storage) or legal authorities if required. | I don’t sell your data. Only trusted providers (like hosting) or the law might get access. |
| 8. Data Security | |
| Technical and organisational measures are taken to protect personal data, including encryption, secure passwords, and restricted access. | I keep your data safe with passwords, secure storage, and limited access. |
| 9. Data Subject Rights | |
| Clients may: access, correct, delete, restrict, object, request portability, or complain to the Data Protection Commission (DPC). | You can see, correct, delete, or ask me to stop using your data. You can also complain to the Data Protection Commission. |
| 10. International Transfers | |
| Data transfers outside the EEA only occur with adequate safeguards (e.g. EU standard contractual clauses). | If data leaves Europe (like cloud storage), I make sure it’s protected under EU rules. |
| 11. Updates to Policy | |
| This Privacy Policy may be updated from time to time. The current version is always at schusterphoto.ie/legal/privacy. | I may update this page as needed. The latest version is always on my website. |
Please Note: The "In Simple Terms" column is provided as a courtesy to aid in understanding the key points of this agreement. It is not legally binding. In the event of any discrepancy or dispute, the language in the "Full Legal Terms" column is the sole governing text.