top of page

Privacy Policy​

Last updated: 11 November 2026

​

At 21's Light Spot, we value your privacy and take the protection of your personal information seriously.

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, contact us or book a photography service. We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch privacy laws.

 

1. Who We Are

21's Light Spot is a photography business based in Amsterdam, the Netherlands.

We are responsible for the processing of personal data described in this policy.

For privacy-related questions or requests, please contact us using the email address above.

 

2. Personal Data We Collect

Depending on how you interact with us, we may collect the following information:

Booking and contact information

  • Name, email address and phone number

  • Booking date, time, location and selected photography package

  • Number of participants and relevant booking preferences

  • Billing details and payment status

  • Special requests and information you choose to share

Photography and video material

  • Photographs and videos captured during your session

  • Original and edited images

  • Information needed to organise, edit and deliver your photographs

Communication information

  • Emails, WhatsApp messages and contact form submissions

  • Customer enquiries, feedback and service-related correspondence

Website information

  • IP address, device and browser information

  • Website usage and interaction data

  • Cookie preferences and analytics information, where applicable

We only collect information relevant to providing our services, managing our business or fulfilling legal obligations.

 

3. How and Why We Use Your Data

We process personal information for the following purposes and legal bases:

PurposeLegal BasisManaging enquiries, bookings and paymentsContract or steps requested before entering a contractPlanning and providing photography servicesContractual necessityEditing, storing and delivering photographsContractual necessityMaintaining financial and tax recordsLegal obligationResponding to customer enquiries and managing service-related recordsContractual necessity or legitimate interests, depending on the circumstancesProtecting our website and preventing misuseLegitimate interestsImproving website performance and understanding visitor activityLegitimate interests where permitted, or consent where requiredUsing identifiable client photographs for promotional purposesConsentSending optional promotional marketing communicationsConsent, or another lawful basis where permitted

Where we rely on legitimate interests, we consider the impact on your privacy and your rights.

 

4. Photography and Use of Your Images

Your photography session

During your session, we capture and process photographs as part of the photography services you have booked.

Your photographs are edited and delivered according to your selected package and the agreed service conditions.

Use of photographs for marketing

We may wish to feature selected photographs in our portfolio, website, social media, online advertisements or other promotional materials.

We will only use identifiable client photographs for these purposes when we have obtained the necessary permission.

During checkout, you may choose to give us permission through an optional checkbox. This choice is voluntary and does not affect your booking, package or the quality of your service.

You can withdraw your permission at any time by contacting us. We will stop further promotional use based on that consent and remove the relevant photographs from channels under our control where applicable.

Previously distributed printed materials or content shared independently by third parties may not always be fully retrievable.

Group and family photographs

For photographs featuring multiple identifiable participants, we may need permission from the individuals concerned.

For children, appropriate permission must be obtained from a parent or legal guardian in accordance with applicable law.

Permission given by the person making the booking does not automatically cover every other participant.

 

5. How Long We Keep Your Data

We keep personal information only for as long as necessary for the purposes described in this policy or as required by law.

  • Financial and tax records: Generally retained for seven years in accordance with Dutch tax requirements.

  • Booking and communication records: Retained for [insert period or specific retention criteria], unless longer storage is necessary for legal obligations or disputes.

  • Original photographs: Retained for [insert retention period] after the session or delivery.

  • Edited photographs: Retained for [insert retention period] after delivery.

  • Promotional photographs: Retained while we have a valid purpose and lawful basis for using them, subject to periodic review and applicable withdrawal or deletion requests.

  • Website analytics and cookie data: Retained according to the applicable service settings and periods disclosed in our cookie information.

After the relevant retention period, personal data is securely deleted or anonymised unless continued retention is legally justified.

 

6. Who We Share Your Data With

We do not sell your personal data.

To operate our business and deliver photography services, we may share relevant information with trusted service providers, including:

  • Photographers and editing partners: To carry out photography sessions and prepare your images.

  • Wix: For website hosting, booking management, forms and related website functions.

  • Payment service providers: To securely process payments and transactions.

  • Communication providers: Including WhatsApp Business and email services for customer communication.

  • Cloud storage and business software providers: To organise bookings, manage records, store photographs and deliver services.

  • Analytics and website service providers: To measure website performance and support our online services, where enabled.

We share only the information reasonably necessary for each purpose.

Where required, we use appropriate contractual arrangements and data protection safeguards with service providers.

We may also disclose information to public authorities when legally required.

If you book through an external booking platform, that platform may process your information under its own privacy policy.

 

7. International Data Transfers

Some of our service providers may process or store personal information outside the European Economic Area (EEA).

Where personal data is transferred internationally, we take steps to ensure that appropriate safeguards are in place, as required by GDPR.

These may include European Commission adequacy decisions, Standard Contractual Clauses or other recognised legal transfer mechanisms.

You may contact us for further information about the safeguards relevant to your personal data.

 

8. Cookies and Website Analytics

Our website is built using Wix Studio and may use cookies and similar technologies.

These technologies help us operate the website, manage bookings, understand website performance and improve the visitor experience.

We distinguish between:

Essential cookies

These are necessary for website functionality, security, booking processes and remembering privacy preferences. They generally do not require consent.

Analytics cookies

These help us understand website traffic, visitor behaviour and website performance. We use analytics technologies only in accordance with applicable privacy and cookie requirements.

Marketing cookies

Where enabled, these may help measure advertising performance or support marketing activities. We request consent before using non-essential marketing tracking technologies.

We use a cookie consent management system to allow visitors to accept, reject or manage non-essential cookies.

You can change or withdraw your cookie preferences through the cookie settings available on our website.

Further details about the cookies and services currently used are available through our cookie settings or cookie information.

 

9. Your Privacy Rights

Under GDPR, you may have the right to:

  • Access the personal data we hold about you.

  • Request correction of inaccurate or incomplete information.

  • Request deletion of your personal data, where applicable.

  • Restrict certain types of data processing.

  • Object to processing based on legitimate interests.

  • Request a portable copy of certain personal data.

  • Withdraw consent at any time where processing is based on consent.

Withdrawal of consent does not affect processing that was lawful before withdrawal.

To exercise your rights, contact us using the details in Section 1.

We normally respond within one month, subject to any legally permitted extension. We may request reasonable information to verify your identity.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

https://autoriteitpersoonsgegevens.nl

 

10. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure.

These measures include access controls, secure storage, account protection and limiting access to authorised team members and service providers.

Although we take data protection seriously, no electronic storage or transmission method can be guaranteed to be completely secure.

 

11. Information Required for Bookings

Certain personal information, such as your name, contact details and booking information, is necessary to arrange and provide our photography services.

Without this information, we may be unable to confirm or complete your booking.

Providing optional information, such as special requests or permission for promotional image use, is voluntary.

 

12. Automated Decision-Making

We do not use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.

 

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, website technologies or legal requirements.

The latest version will always be available on our website, with the most recent update date shown at the top.

Where required, we will provide additional notice of significant changes.

 

14. Contact Us

If you have questions about this Privacy Policy, your personal information or the use of your photographs, please contact:

21's Light Spot

Amsterdam, the Netherlands

Email: info@21slightspot.com

Website: https://www.21slightspot.com

KvK: 96007788

bottom of page