Privacy Policy

Xirude.com – Photography Services for Events, Weddings, Anniversaries and Other Celebrations

1. Introduction

Welcome to Xirude.com. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.

This privacy policy applies to all personal information we collect through our website, during photography sessions, and through other means such as email, telephone, or in-person interactions.

2. Data We Collect

We may collect, use, store, and transfer different kinds of personal data about you as follows:

  • Identity Data: includes first name, last name, username or similar identifier, title, date of birth.
  • Contact Data: includes billing address, delivery address, email address, and telephone numbers.
  • Photography Data: includes photographs and videos taken during events and sessions.
  • Financial Data: includes bank account and payment card details for processing payments.
  • Transaction Data: includes details about payments to and from you and other details of services you have purchased from us.
  • Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
  • Usage Data: includes information about how you use our website and services.
  • Marketing and Communications Data: includes your preferences in receiving marketing from us and our third parties and your communication preferences.

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • To register you as a new customer.
  • To process and deliver your order including managing payments, fees, and charges.
  • To create and deliver photographic albums and other products you have ordered.
  • To manage our relationship with you, including notifying you about changes to our terms or privacy policy.
  • To administer and protect our business and this website.
  • To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you.
  • To use data analytics to improve our website, products/services, marketing, customer relationships, and experiences.
  • To make suggestions and recommendations to you about goods or services that may be of interest to you.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Contractual necessity: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
  • Legitimate interests: Processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your interests or fundamental rights and freedoms.
  • Legal obligation: Processing is necessary for compliance with a legal obligation to which we are subject.
  • Consent: You have given consent to the processing of your personal data for one or more specific purposes.

5. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

For photography data, we typically retain images for a period of 1 year after delivery of final products, unless otherwise specified in our contract with you. This allows us to respond to any additional requests for prints or digital files.

For customer account information, we retain this data for as long as you maintain an active account with us, plus a reasonable period thereafter for legal and accounting purposes.

6. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

  • Request access to your personal data.
  • Request correction of your personal data.
  • Request erasure of your personal data.
  • Object to processing of your personal data.
  • Request restriction of processing your personal data.
  • Request transfer of your personal data.
  • Right to withdraw consent where we are relying on consent to process your personal data.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

7. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

8. Cookies and Similar Technologies

Our website uses cookies and similar technologies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

Types of cookies we use:

  • Strictly necessary cookies: Required for the operation of our website.
  • Analytical/performance cookies: Allow us to recognize and count the number of visitors and see how visitors move around our website.
  • Functionality cookies: Used to recognize you when you return to our website.
  • Targeting cookies: Record your visit to our website, the pages you have visited, and the links you have followed.

9. GDPR Compliance

As a business operating within the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). This means we adhere to principles of data minimization, purpose limitation, storage limitation, integrity, and confidentiality in our data processing activities.

If you are located in the EEA, you have enhanced rights regarding your personal data, which we fully respect and implement in our business practices.

10. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting the new privacy policy on this page and, where appropriate, sending you a notification.

This Privacy Policy was last updated on May 15, 2023.