Legal
Privacy & Cookie Policy
Last updated 2026
This policy explains how Photoshoot Italy collects, uses and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR).
Data controller
Photoshoot Italy, VAT no. 05690750657. Contact: info@photoshootitaly.com.
What we collect
Contact details (name, email, phone), booking details (date, location, preferences), and payment status. Payments are processed by our payment provider; we do not store full card details.
How we use it
To manage your booking, deliver your photos, communicate with you about your session, and — where you have consented — to send occasional updates. The legal bases are performance of a contract and, for marketing, your consent.
Sharing
We share the minimum necessary with the photographer assigned to your shoot, our payment provider, and our email provider. We do not sell your personal data.
Retention
We keep booking and delivery data for as long as needed to provide the service and to meet legal and accounting obligations, after which it is deleted or anonymised.
Your rights
You may request access, correction, deletion, or portability of your data, and object to or restrict certain processing. To exercise these rights, email info@photoshootitaly.com.
Cookies we use
We use only strictly-necessary cookies to run the site — no advertising or cross-site tracking cookies. Our analytics are cookieless (privacy-first, aggregate only), so no consent is required. These cookies are:
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| lumen_customer | Keeps you signed in to your account | 30 days | Essential |
| lumen_guest | Remembers your email during guest checkout | 7 days | Essential |
| currency | Remembers your selected currency | 1 year | Functional |
| lumen_staff | Staff/photographer portal sign-in | 7 days | Essential |
| payload-token / payload-tenant | Admin (CMS) sign-in — staff only | Session | Essential |
| __stripe_mid / __stripe_sid | Stripe fraud prevention at payment | Up to 1 year / 30 min | Essential (security) |
| _clck | Microsoft Clarity — links your visits so a session can be replayed | 1 year | Analytics (consent required) |
| _clsk | Microsoft Clarity — groups the pages of a single visit | 1 day | Analytics (consent required) |
| lumen_consent_analytics | Remembers whether you accepted or declined Clarity. Stored in your browser’s local storage, not a cookie, and never sent to us | Until you clear your browser data | Essential (records your choice) |
You can block or delete cookies through your browser settings, though the site may not work correctly without the essential ones.