Who is responsible
Lens & Vows is responsible for the personal data described here (the “controller”). For anything about your data, write to info@lensandvows.com.
What we collect
When you use the concierge
The place, the date (or month), the number of guests and the style you choose. Your email only if you give it to us — for example, to be sent a shortlist or to hear when someone is free.
When you sign in
Your email address and, if you give it, your name. Sign-in codes are stored only in scrambled (hashed) form and stop working after 10 minutes. We keep a record of your sessions, with the browser they came from, so you stay signed in and can be signed out.
When you book
The wedding date, place, number of guests and names you give, the package, your messages with the photographer, and the record of each booking and payment. Card details are entered on Stripe’s payment page: we receive confirmation of the payment, never your full card number.
When you write to us
Your name, email address and message.
If you are a photographer
Your profile (name, where you work, languages, prices, biography, links), the weddings and photographs you upload, your phone number (for our team only, never shown to couples), and what Stripe tells us about your payout account (whether it is ready). Identity and bank details for payouts are given to Stripe directly.
Automatically
The country your connection comes from (to show prices in your currency), your language and currency choices (see cookies), and technical logs — including IP addresses — that our servers and Cloudflare keep for security. If you accept analytics cookies, Google Analytics records how the site is used (the pages, the kind of device, roughly the country); without your yes it does not run. We use no advertising trackers.
Why we use it
- To provide the service you ask for — showing who fits, booking, payments, messages, delivery (a contract with you, or steps you ask for before one).
- To answer you when you write to us or ask the concierge (steps you ask for; our legitimate interest in replying).
- To keep the site safe — preventing fraud, spam and misuse (our legitimate interest).
- To meet legal obligations — accounting, tax and requests from authorities.
- With your consent, where the law requires it. You can withdraw it at any time.
Who sees it
- The photographers you contact or book see what you send them: your name, the date and place, the details of your wedding and your messages. Your email and phone are shared only after the deposit is paid.
- Stripe processes card payments and photographers’ payouts.
- Cloudflare carries the site’s traffic, protects it from attacks and stores the photographs photographers upload.
- Hetzner hosts our servers and database, in Germany.
- Our email provider (Migadu) sends and receives our email.
- Telegram — our team is notified of new requests and messages in a private group.
- Google — Google Analytics, only if you accept analytics cookies.
- Authorities, only when the law requires it.
These providers act on our instructions. We do not sell or rent your data, and we do not share it for advertising.
Outside the European Union
Some of these providers may process data outside the European Economic Area (for example in the United States). Where they do, it is under the safeguards the GDPR provides for, such as the European Commission’s standard contractual clauses or an adequacy decision.
How long we keep it
- Sign-in codes: 10 minutes. Sessions: until you sign out, or 30 days.
- Concierge requests and messages to us: as long as we need them to help you, and then they are deleted or made anonymous.
- Accounts: until you ask us to close yours.
- Bookings and payment records: as long as accounting and tax law requires.
- Security logs: a short time, unless we need them to deal with an incident.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to limit how we use it, to object to a use based on our legitimate interest, or to receive it in a portable form. Write to info@lensandvows.com; we answer within the time the law sets. Some records (a paid booking, for instance) we must keep for a while by law, and we will tell you if that applies.
If you think we have got something wrong, please tell us first. You can also complain to the Portuguese data-protection authority, the Comissão Nacional de Proteção de Dados (CNPD), or to the authority in the country where you live.
Children
Lens & Vows is for adults. We do not knowingly collect data from anyone under 18.
Changes
When this notice changes, we publish the new version here with its date, and tell signed-in users about any important change.