Privacy Policy

1. Who we are

Tales by Andy is a photography business operated by Andy, based in the Netherlands. If you have any questions about this policy or your personal data, please contact us:

Email: talesbyandyphotography@gmail.com
Website: www.talesbyandy.nl

2. What data we collect

We collect and process the following personal data:

–      Name, email address, and phone number

–      Wedding date, time, and location

–      Payment and invoicing details

–      Photographs containing identifiable images of you and your guests

–      Communication history (emails, messages)

3. Why we collect it

We process your personal data for the following purposes:

–      To execute the photography services agreement with you

–      To communicate with you before, during, and after your wedding

–      To deliver your photos via online gallery platforms

–      To fulfil legal obligations such as invoicing and tax records

–      For promotional purposes, including our portfolio, website, and social media — only with your consent as described in our agreement (Article 9.9)

4. Who we share it with

We do not sell your personal data. We may share it with the following third-party service providers strictly for the purposes described above:

–      Pic-Time / Pixieset — online gallery delivery and storage platforms, operating under their own privacy policies

–      Payment processors — for secure handling of invoices and payments

These parties act as data processors and are bound by applicable data protection laws.

5. How long we keep it

We retain your contact and invoicing data for as long as required by Dutch legal and tax obligations (generally 7 years). Photographs are retained as long as operationally needed for delivery and portfolio purposes. Data stored on third-party platforms is subject to their own retention policies.

6. Your rights

Under the General Data Protection Regulation (GDPR), you have the right to:

–      Access the personal data we hold about you

–      Request correction of inaccurate data

–      Request deletion of your data, where legally permitted

–      Object to or restrict certain types of processing

–      Lodge a complaint with the Dutch data protection authority: Autoriteit Persoonsgegevens (www.autoriteitpersoonsgegevens.nl)

To exercise any of these rights, please contact us in writing at the email address above.

7. Cookies

Our website may use cookies for basic functionality and analytics. You can manage cookie preferences through your browser settings.

8. Changes to this policy

We may update this privacy policy from time to time. The most current version will always be available on this page, with the date