Privacy Policy

Effective Date: February 18, 2026

Rachel Cuesta Photography (“we,” “us,” or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).


1. Information We Collect

We may collect the following personal data:

  • Name
  • Email address
  • Phone number
  • Session details
  • Payment information (processed securely via third-party providers)
  • Website usage data (via cookies and analytics tools)

This information is collected when you:

  • Submit an inquiry
  • Book a session
  • Subscribe to updates
  • Browse this website

2. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

  • Consent (when you submit a form or opt in)
  • Contractual necessity (to fulfill photography services)
  • Legitimate interest (to improve services and website performance)
  • Legal obligation (for tax and accounting purposes)

3. How Your Data Is Used

Your information may be used to:

  • Respond to inquiries
  • Deliver contracted photography services
  • Process payments
  • Improve website performance
  • Send session-related communications

We do not sell or share your personal data for marketing purposes.


4. Data Storage & Retention

Personal data is stored securely and retained only as long as necessary to:

  • Fulfill contractual obligations
  • Comply with legal requirements
  • Maintain business records

You may request deletion of your data at any time (see Section 7).


5. Third-Party Services

We may use third-party services, including:

  • Website hosting (Pixieset)
  • Payment processors
  • Email providers
  • Google Analytics

These providers process data in accordance with their own privacy policies.


6. International Data Transfers

As Rachel Cuesta Photography operates in both the United States and Spain, your data may be transferred internationally. Appropriate safeguards are implemented to ensure data protection in accordance with GDPR standards.


7. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion (“right to be forgotten”)
  • Restrict processing
  • Object to processing
  • Request data portability

To exercise these rights, contact:

[Insert your business email]

8. Security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, disclosure, or misuse.


9. Contact

If you have questions about this Privacy Policy or your personal data, please contact:

Rachel Cuesta Photography

rachel@rachelcuesta.com