Privacy Policy
Last updated: March 16, 2026
This privacy notice for TASPHO ("we", "us", or "our") explains how and why we collect, store, use, and share ("process") personal information when you use our services ("Services"), including when you:
- Visit our website at https://www.taspho.com
- Contact us regarding photography services
- Engage with us in relation to photography projects, events, or marketing
- Interact with us in other related ways, including sales, marketing, or events
If you have any questions about this privacy notice or our data practices, please contact us at standout@taspho.com.
1. Data Controller
For the purposes of the General Data Protection Regulation (GDPR), the data controller is:
TASPHO
Professional Photography Services
Based in Cyprus, European Union
Contact: standout@taspho.com
2. What Information We Collect
We collect personal information that you voluntarily provide to us and certain technical information automatically when you interact with our website or services.
Personal Information You Provide
Depending on your interaction with us, this may include:
- Names
- Email addresses
- Phone numbers
- Billing addresses
- Company or organisation details
- Project or event information
All personal information you provide must be accurate and up to date.
Payment Information
Payments for services may be processed through Stripe or other secure payment processors. Payment card information is processed directly by the payment provider and is not stored on our systems.
Stripe’s privacy policy can be found here:
https://stripe.com/privacy
Photographic Images
As part of providing photography services, we may capture and process photographic images of identifiable individuals.
These images may constitute personal data under applicable data protection laws.
Photographs are processed solely for purposes including:
- delivering contracted photography services
- editing and post-production
- delivering image files to clients
- maintaining professional archives
- portfolio or promotional use where permitted
Automatically Collected Information
When you visit our website we may automatically collect certain technical information such as:
- IP address
- browser type and version
- device characteristics
- operating system
- referring URLs
- website usage data
- approximate geographic location inferred from IP address
This information is used for:
- maintaining website security
- performance monitoring
- analytics and service improvements
3. Cookies and Tracking Technologies
Our website may use cookies and similar technologies to improve functionality and understand website usage.
You can control cookie preferences through your browser settings.
For more information please refer to our Cookie Notice on our website.
4. How We Process Your Information
We process personal information for purposes including:
- providing and delivering photography services
- communicating with clients and responding to enquiries
- managing contracts, bookings, and payments
- delivering image galleries or files
- improving website functionality and service quality
- complying with legal or regulatory obligations
- protecting our legal rights or preventing fraud
5. Legal Bases for Processing
Under GDPR we rely on the following legal bases:
Contractual Necessity
Processing necessary to perform photography services requested by clients.
Legitimate Interests
Processing required to operate and improve our business, including maintaining professional archives and portfolio materials.
Consent
Where required, such as for certain marketing activities.
Legal Obligations
Processing necessary to comply with tax, accounting, or regulatory obligations.
Vital Interests
Processing necessary to protect the safety of individuals in rare circumstances.
6. Processing Personal Data on Behalf of Clients
In many cases, TASPHO provides photography services on behalf of corporate or organisational clients.
In such cases:
- The client organisation acts as the Data Controller
- TASPHO acts as a Data Processor, processing personal data only as necessary to provide the photography services
Individuals appearing in photographs taken during corporate assignments should contact the commissioning organisation regarding the exercise of data protection rights relating to those images.
7. When We Share Personal Information
We may share personal data only when necessary, including with:
- payment processors (e.g., Stripe)
- cloud storage providers
- online gallery platforms used to deliver images
- website hosting or analytics providers
- professional advisors such as accountants or legal advisors
These service providers process personal data only as necessary to perform services on our behalf.
We may also disclose information if required by law or to protect our legal rights.
8. International Data Transfers
Some third-party service providers may process data outside the European Economic Area (EEA).
Where this occurs, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the European Commission
- equivalent data protection safeguards
9. How Long We Keep Your Information
We retain personal data only as long as necessary for the purposes outlined in this policy.
Typical retention periods include:
Client communications and project records
Up to 7 years for accounting and legal compliance.
Photographic image files
Typically up to 10 years for archival and professional purposes unless otherwise agreed with the client.
Website logs and analytics data
Typically up to 12 months.
Data may be retained longer where required for legal obligations or the establishment, exercise, or defence of legal claims.
10. Use of Images for Portfolio and Promotion
Unless otherwise agreed in writing with the client, TASPHO may use selected photographs for portfolio, website, or promotional purposes as part of legitimate professional activities.
Clients may request restrictions on such usage as part of their service agreement.
11. How We Keep Your Information Safe
We implement appropriate technical and organisational measures to protect personal data, including:
- password-protected systems
- restricted access to data
- secure file storage
- encrypted storage where appropriate
- regular data backups
While we take reasonable steps to protect personal data, no internet transmission or storage system can be guaranteed to be completely secure.
12. Children's Data
Our services are not directed toward individuals under the age of 18.
We do not knowingly collect personal data from children. If we become aware that such data has been collected without appropriate consent, we will take steps to delete it.
13. Your Privacy Rights
Under GDPR and applicable data protection laws, individuals may have rights including:
- the right to access personal data
- the right to request correction
- the right to request deletion
- the right to restrict processing
- the right to object to certain processing
- the right to data portability
Requests can be made by contacting standout@taspho.com.
Where photographs were taken as part of a corporate assignment, requests may need to be directed to the commissioning organisation acting as the data controller.
14. Updates to This Privacy Notice
We may update this privacy notice from time to time to reflect legal, operational, or technological changes.
The updated version will be indicated by a revised "Last updated" date.
15. Contact Us
If you have questions about this privacy notice or wish to exercise your data protection rights, please contact:
TASPHO
Email: standout@taspho.com