Privacy Policy

Isabel Lenis Photography is a photography business based in the Netherlands. I am responsible for the personal information described in this policy, in accordance with the General Data Protection Regulation (GDPR / AVG).

For any privacy question or request, you can reach me at info@isabel-lenis.com.

Full legal business information is available under Business Details.

I only collect the information you choose to share with me, such as:

• your name and email address;
• your telephone number, if you give it to me;
• the type of session you are interested in;
• anything you voluntarily include in your message or later correspondence;
• if you become a client, details needed to arrange and invoice your session (for example date, location and billing details).

The inquiry form on this website does not store your information on the website itself. When you press "Send inquiry", your own email program opens with a pre-filled message addressed to info@isabel-lenis.com. Nothing is sent until you send that email yourself.

Once received, your inquiry is kept in my business mailbox so I can reply and follow up with you.

• to respond to your inquiry and answer your questions;
• to arrange, prepare and deliver your photography session;
• to communicate with you before, during and after our work together;
• to meet my legal obligations, such as bookkeeping and tax requirements.

I will not send you marketing messages unless you have separately asked to receive them. Sending an inquiry does not sign you up for anything.

• Steps towards a contract / performance of a contract — replying to your inquiry and providing the services you book.
• Legal obligation — keeping financial records as required by Dutch law.
• Legitimate interest — keeping ordinary business correspondence and keeping this website secure and working.
• Consent — where specifically asked for, for example to publish identifiable photographs. You may withdraw consent at any time.

Photographs in which a person can be recognised may constitute personal data. I treat the images I create with care and use or publish them only in accordance with applicable privacy and portrait law, and on an appropriate legal basis, such as your clear permission.

Booking a session or contacting me never, by itself, grants permission to publish photographs of you or your family — whether in my portfolio, on this website or on social media. Where permission is required, it is requested and given separately, and any permission you have given for future use can be withdrawn at any time.

I take particular care with photographs of children and handle their images with extra restraint and consideration.

I never sell, rent or trade your personal information. I share it only when needed to provide my services or when required by law.

Some trusted providers process information on my behalf, only as needed for their service:

• Website hosting — this website is hosted by Lovable. As with any website, the hosting infrastructure may briefly process technical data such as your IP address and browser type to deliver pages and keep the site secure.
• Google Fonts — the website's typefaces are loaded from Google's servers, which means your browser shares your IP address with Google when a page loads.
• Email provider — used to receive and answer your messages.
• Client gallery and image-delivery providers — used to deliver your photographs to you; these may process client photographs and related information, such as your name and email address.
• Accountant / bookkeeping tools — for clients, as required for invoicing and tax purposes.

Some of these providers may process data outside the European Economic Area. Where that happens, they rely on appropriate safeguards recognised under the GDPR, such as the EU–US Data Privacy Framework or Standard Contractual Clauses.

I keep personal information only as long as it is needed for the purpose it was collected for:

• inquiries and correspondence are retained only as long as reasonably necessary for their purpose — including responding to your inquiry, keeping appropriate business records and handling follow-up matters;
• invoices and financial records are kept for the period required by Dutch tax law (currently seven years).

I take reasonable technical and organisational measures to protect your information, such as secure (HTTPS) connections, password-protected accounts and limiting access to what is necessary.

This website does not use analytics, advertising or tracking cookies, and it does not use tracking tools such as Google Analytics or the Meta Pixel. If this ever changes, this policy will be updated and, where required, your consent will be asked first.

This website links to external services such as Instagram, LinkedIn, WhatsApp and Airbnb. When you follow those links, the privacy policies of those services apply. I recommend reading them.

Under the GDPR you have the right to:

• access the personal information I hold about you;
• have inaccurate information corrected;
• have your information deleted, where applicable;
• restrict or object to certain processing;
• receive your information in a portable format;
• withdraw consent at any time, where processing is based on consent.

To make a request, simply email info@isabel-lenis.com. I will respond within one month. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

I may update this policy from time to time. The most recent version will always be on this page. Questions? Get in touch.