Last updated: 20 September 2026
Who operates this website
The controller for this website is Flavia Grandi, trading as Flavia Grandi Photography. The business is based in Portugal. For privacy questions or requests, contact flavia@flaviagrandi.com.
Information you provide
When you contact us about photography, you may provide your name, email address, wedding date, venue, requested service, guest count, planner details and message. We may also receive information that you choose to send directly by email.
How we use your information
We use enquiry information to answer you, discuss your requirements and take steps you request before a possible booking. The legal basis for these activities is taking steps at your request before entering into a contract.
If an enquiry does not lead to a booking, we keep only relevant correspondence for up to three years from your last meaningful contact. We may remove or anonymise information sooner when it is no longer needed. This limited retention supports enquiry continuity and the establishment, exercise or defence of legal claims, and is based on our legitimate interests after assessing the purpose and its impact on your privacy.
This three-year period is our operating policy, not a statutory maximum. Booking, accounting and dispute records, and individual questionnaire details, are considered separately according to their purposes and applicable requirements. The unsuccessful-enquiry period does not automatically apply to them. A documented legal obligation or active claim may require a record to be kept longer.
Optional email marketing
We may send occasional photography news and offers only when you make a separate, optional choice. The checkbox is initially unticked, and declining it does not affect your enquiry. The wording is:
I’d like occasional photography news and offers by email from Flavia Grandi Photography. I can unsubscribe at any time.
When you opt in, we retain an auditable record of that choice with the relevant submission. No existing contact is subscribed automatically. You can withdraw at any time using the unsubscribe method in a message or by contacting flavia@flaviagrandi.com. Email-marketing consent is separate from cookie consent.
Service providers and international processing
Hostinger hosts this website, and Google Workspace provides business email. These providers and their subprocessors may process information in countries outside the European Economic Area. Where applicable, transfers use safeguards required by data-protection law, which may include an adequacy decision or contractual safeguards. The exact processing locations and safeguards depend on the provider services and account in use.
Access to enquiries is limited to the business owner and authorised people who need it to operate the business. We take reasonable steps to protect information against unauthorised access, alteration or loss.
Analytics and advertising
Optional statistics and advertising measurement are available as separate, optional integrations. Google Analytics 4 runs after statistics consent. Meta measurement runs after advertising consent. Global Privacy Control is treated as a refusal for both categories. Measurement is limited to the homepage, About, Featured Weddings, Love Stories, Contact and Portugal Wedding Photographer pages.
You can reject or withdraw either choice through the website’s cookie-preferences control. Google Analytics 4 uses 14 months for user-level and event-level data retention; the user-data period resets when the user has new activity. This setting does not affect standard aggregated reports. Google Signals, user-provided data and advertising personalization are disabled.
We do not intentionally send enquiry content or direct contact details to analytics or advertising services. After advertising consent, Meta may process technical information such as an IP address, browser or device information and a clean page URL without query parameters or fragments. Automatic matching and automatic events are disabled. Referrer information is restricted, and the integration stays off when these checks fail.
Your rights
Subject to applicable conditions, you may ask for access to your personal information, correction, erasure, restriction of processing or portability. You may object to processing based on legitimate interests and withdraw consent where processing relies on consent. Withdrawal does not affect processing that was lawful before withdrawal.
Contact flavia@flaviagrandi.com to exercise a right. We may ask for information needed to verify your identity. You may also complain to the Portuguese data-protection authority, the CNPD.
Updates
We may update this policy when our processing changes. The date at the top shows when this version was last updated.
For information about browser storage and consent choices, see the cookie policy.