This privacy policy explains how Mahon Moments processes personal data for website inquiries, event photography bookings, and related service administration. It follows the data lifecycle from collection through use, disclosure, retention, and deletion.
This section outlines how information handling, individual rights, and support channels are addressed within this notice.
Depending on how you interact with Mahon Moments, we may process your name, email address, phone number if you provide it, inquiry message, shoot requirements, preferred date, session details, and limited technical data such as server request metadata and browser or device information.
We receive personal data when you contact us through the website form, by email, or by phone, and we may also generate technical data through normal website operation and security controls.
Confirmed cookies are used for essential site operation and to remember privacy preferences. These cookies support basic functionality, such as keeping the site usable and storing your selected settings. No other cookie purpose is confirmed in this policy.
We use essential cookies needed for site operation and cookies that remember privacy preferences. We do not state that analytics or marketing cookies are active. You can manage cookies through your browser settings, and any preference controls we provide will apply to the categories described in this policy.
We use personal data to answer inquiries, review event details, prepare coverage plans and quotes, confirm bookings and access arrangements, provide on-location photography services, curate and edit images, deliver private galleries, maintain website security, and keep records needed for administration and legal compliance.
We may share personal data with service providers that support website hosting, technical delivery, security, or communication handling, but only to the extent needed for those functions. Any such recipient is expected to process the data under appropriate confidentiality and security obligations.
We may disclose personal data to public authorities, courts, or other parties when required by law, when necessary to establish or defend legal claims, or when needed to protect the security and integrity of our services.
You may have rights to access your data, correct inaccurate information, request deletion, object to certain processing, or ask for restriction or portability where those rights apply. We assess each request in context and may retain limited information where the law or a legitimate operational need requires it.
To exercise a privacy right, send a request through one of the contact channels listed in this policy and describe the data or processing activity involved. We may ask for information needed to verify your identity and to locate the relevant records before we respond.
We keep personal data only for as long as it is needed to respond to an inquiry, manage a booking, provide the agreed service, maintain security, resolve disputes, or meet legal obligations. When the relevant purpose ends, the data is deleted, anonymized, or archived only where a lawful reason requires continued storage.
If we make material changes to this privacy policy, we will update the published version and use reasonable means to draw attention to the change when appropriate. The revised notice applies from its effective date and replaces earlier versions for future processing.
Under the GDPR, we process personal data only where we have a lawful basis and only for the purposes described in this policy. The data lifecycle includes collection, use, limited disclosure, retention for the time needed to complete the relevant purpose, and deletion or anonymization when the data is no longer required.
Where GDPR applies, it governs our processing of personal data for individuals in the European Economic Area and, in relevant cases, other users whose data is handled from Spain.
Where the GDPR applies, you may request access, rectification, erasure, restriction, portability, or objection, subject to legal limits and the nature of the processing. If we rely on consent for a specific activity, you may withdraw it for future processing without affecting prior lawful processing.
