We only process data needed to deliver the service or required by law.

• Bookings and orders — name, e-mail, phone (performance of contract).
• Billing data — tax documents are kept for 10 years (legal obligation).
• Photos uploaded for printing — deleted automatically within 30 days of completing the order.
• Reviews — name and text published only after approval.
• Marketing — only with your explicit consent (revocable at any time).

Only vetted processors handle the data, under data-processing agreements:

• Postmark (ActiveCampaign, USA) — transactional e-mail; Standard Contractual Clauses (SCC).
• Google — Tag Manager / Analytics only with your consent; reCAPTCHA as form protection.
• GoPay — payment gateway (online payments launching soon).
• Hosting — operated in the EU (details added at launch).

Essential cookies keep the site working (sign-in, bookings) and always run. Analytics cookies start only after your consent — change your choice via the “Cookie settings” link in the footer.

• cf_customer — customer sign-in (essential, max. 30 days).
• cf_consent — stores your cookie choice (180 days).
• _ga, _ga_* — Google Analytics (only after consent, up to 2 years).

Contact us any time at info@creativefotostudio.cz. You have the right to:

• access your data and get a copy (the My account section offers an export too),
• rectification of inaccurate data,
• erasure (anonymisation) — tax documents must be retained by law,
• data portability,
• object to processing and withdraw consent,
• lodge a complaint with the Czech DPA (uoou.gov.cz).