Privacy policy (GDPR)

Controller: DP Photography, Village-Neuf. Contact: info@dpdigitalsolutions.com We process identity, contact details, session preferences (theme, allergies, outfits), bookings, limited payment data (amount, date, status and Stripe payment reference; card details are entered only on Stripe's secure page and never reach the studio), messages, security logs, and audience stats if you consent. Legal bases: contract (booking), legal obligation (invoices 10 years), legitimate interest (security), consent (marketing, analytics cookies, portfolio image rights). Processors: host, Stripe (payment provider for online deposits), Pic-Time (client galleries). No sale of lists. Retention: leads 3 years; clients 5 years after last session + 10 years for accounts; security logs 12 months. Rights: access, rectification, erasure, restriction, portability, objection — email the studio. Complaint: CNIL (France). Allergy notes are health data used only for session safety.