Privacy policy

Last updated: 28 September 2026. This page explains what we do with your personal data when you contact us, book a photoshoot, or simply read this site.

Who we are

This site is run by The Lisbon Photographer, Anatoly and Julia, part of the tripotographer family of city photographers. We are the data controller for everything described here.

You can reach us by email at [email protected], on WhatsApp at +351 913 663 676, through the contact form or on Instagram at @lisboa.photographer.

What we collect

When you send an enquiry through the contact form, on WhatsApp or on Instagram, we collect what you give us: your name, your email address, your phone or WhatsApp number, your dates in Lisbon, the kind of session you want, and anything you write in the message.

When you book, we also process the details needed to run the session and take payment: a meeting point and time, and the payment reference for the deposit. Card numbers never reach us; payments are handled by the payment provider.

When you simply read the site, we measure visits with Google Analytics only if you accept statistics cookies in the cookie banner. Nothing is measured before you choose, and the site uses no advertising cookies. Our web host and Cloudflare, which delivers the site, keep standard server logs, including IP addresses, for security and troubleshooting.

Why we use it, and on what legal basis

  • To answer your enquiry and run your session, because it is necessary to take steps at your request and to perform our agreement with you.
  • To send you your gallery and talk to you about your booking, on the same basis.
  • To keep accounting records, because we have a legal obligation to.
  • To measure how the site is used, only with your consent, which you give or refuse in the cookie banner and can change at any time through “Cookie settings” at the bottom of every page.
  • To show our work, as described in the section on photographs below.

Photographs from your session

Your photographs are personal data, and we treat them that way. We never publish client names, and we never publish the folder or file names that carry them.

We sometimes share favourite frames from sessions on this site and on Instagram, because showing real sessions is how new clients find us. If you would rather your photographs did not appear anywhere, tell us before or after the session and we will not publish them, or we will take them down within a few days. We cannot recall copies other people have already saved or reshared.

Proposal and surprise sessions are never published before the surprise has happened.

Who else sees your data

We keep the circle small. Your data is handled by:

  • our web host, who runs this site and its email;
  • Cloudflare, which delivers this site and protects it from attacks;
  • Kommo, the CRM where we keep track of enquiries and bookings;
  • Google, which provides Google Analytics if you have accepted statistics cookies, and Google Drive, where session galleries are stored and shared with you;
  • Meta, if you choose to write to us on WhatsApp or Instagram, under their own terms;
  • our payment provider, for the deposit and any balance paid in advance;
  • our accountant, for the records we are legally required to keep.

We do not sell your data, and we do not pass it to anyone for their own marketing.

Where your data goes

Some of the providers above are based outside the European Economic Area, so data you send us may be processed outside the EEA. Where EU law requires a safeguard for that transfer, we rely on the EU Standard Contractual Clauses or an adequacy decision, depending on the provider. You can ask us for details.

How long we keep it

  • Enquiries that do not become bookings: up to 12 months, then deleted.
  • Booking correspondence: up to 24 months after the session.
  • Your gallery: online for two months after delivery. Download and back up your photographs; the gallery is not permanent storage.
  • Accounting records: as long as tax law requires.
  • Analytics data: kept by Google for 14 months, and only if you accepted statistics cookies.

Your rights

Under the GDPR you can ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to processing we base on our legitimate interests, and ask for your data in a portable form. Where we rely on your consent, you can withdraw it at any time; this does not affect anything we did before.

Write to us at [email protected] and we will answer within one month.

If you think we have got it wrong, you can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (cnpd.pt), or to the supervisory authority in the country you live in. We would rather you told us first, so we can fix it.

Cookies

We use statistics cookies from Google Analytics only after you accept them, and no advertising cookies. You can change your choice at any time through “Cookie settings” at the bottom of every page. The full list is in our cookie policy.

Changes to this page

If we change how we handle your data, we will update this page and the date at the top.