9 Meses Fotografia

GDPR

Privacy Policy


What personal data this website and the studio collect, what for, how long we keep it and how you can ask to see or delete it.

Version
2.1
In force
27 Sep 2026
Law
GDPR

Who we are

The website 9mesesfotografia.com and the studio 9 Meses Fotografia belong to photographer Tânia Pires, whose studio is at Avenida 25 de Abril, Edif. Space Beautiful, Loja G, 8200-559 Ferreiras, Albufeira, Portugal. She is the controller of the personal data described in this policy.

We ask for no more data than we need to reply and to photograph your session, and we never sell it or pass it on for advertising.

What we collect and why

Where
Contact form
What data
Name, email, phone (optional), chosen session and package, preferred date, due date or birth date, number of family members and your message.
What for
Replying, checking availability and booking the session.
Legal basis (GDPR)
Steps taken at your request before a contract, and consent (form checkbox)
Where
WhatsApp, phone and email
What data
Your number or address and whatever you write or tell us.
What for
Replying and arranging the session.
Legal basis (GDPR)
Steps taken at your request before a contract
Where
Session and delivery
What data
Contact details, answers to the session questionnaire (newborn), session photographs and invoicing details.
What for
Preparing and photographing the session, delivering the gallery and products, and invoicing.
Legal basis (GDPR)
Performance of the contract and legal obligation (invoicing)
Where
Server logs
What data
IP address, page requested, date and browser, recorded automatically by the host.
What for
Running the website securely.
Legal basis (GDPR)
Legitimate interest (security)

The website has no user accounts, comments, advertising, visitor statistics or third-party tracking, and it does not store form enquiries: they are sent by email to the studio.

How long we keep it

  • Enquiries that do not lead to a session: up to 24 months after the last contact.
  • Clients: invoicing details for the period required by Portuguese law (10 years); everything else for as long as we work together and up to 24 months afterwards.
  • Photographs: archived so you can order prints later, and deleted when you ask.
  • Technical log of the form (refused sends and daily counts, with no name, email or message): up to 120 days. To stop automated sends, the server keeps an irreversible fingerprint of the IP address for a few minutes.
  • Server logs: for the period set by the host (DreamHost).

Who we share it with

  • We never sell or give your data to anyone.
  • DreamHost: hosting for the website and the studio email, on servers in the European Union (Amsterdam). The site's own server sends the form messages to the studio mailbox and the confirmation to your email.
  • Google (Gmail): receives a copy of each enquiry in the studio mailbox.
  • Zoom and the online gallery service: used after the session to present the photographs and deliver the gallery.
  • WhatsApp, Instagram, Facebook, Google Maps and the Complaints Book: the links only send data to those services when you click them, and their own rules apply from then on.

Some of these services (Google, Zoom) may process data outside the European Union. Where they do, the safeguards set out in the GDPR apply, such as the European Commission's standard contractual clauses.

Photographs and children

Photographs from your session, including those of babies and children, are never published on the website, on social media or in promotional material without your written permission. That permission is separate and optional: saying no changes nothing about your session, and you can withdraw it later and ask us to remove images already published.

The images are protected by copyright and are for the family's personal use; commercial or advertising use needs the photographer's approval.

Security

The website always uses an encrypted connection (HTTPS) and has no database: it stores no enquiries, accounts or passwords. Technical access to the server uses an encryption key, and only the studio team can access the mailboxes that receive enquiries.

Your rights

You can ask us at any time to see your data, correct it, delete it, restrict its use, object to it being processed or receive a copy. Where processing is based on your consent, you can withdraw it whenever you like, without affecting what was done before. We reply within one month.

If you think your data has not been handled properly, you can complain to the Portuguese data protection authority, CNPD (www.cnpd.pt).


For what is stored in your browser, read the cookie policy.