Privacy Policy

Last updated: 29 September 2026. This page explains what we do with your personal data when you contact us, book a photoshoot in Milan or on Lake Como, or simply read this site.

Who we are

This site is run by Milan Photographer, part of the tripotographer family of city photographers. We are the data controller for everything described here.

You can reach us at info@milanphotographer.com or on WhatsApp at +39 334 870 5839. Our address in Milan is Via Giuseppe Mazzini 7, 20123 Milano, Italy.

What we collect

When you send an enquiry through a form on this site or on WhatsApp, we collect what you give us: your name, your email address, your phone or WhatsApp number, how you prefer to be contacted, your dates, the kind of photoshoot you want and anything you write in the message. The wedding form also asks about your venue, guest count and plans.

When you book, we also process what is needed to run the session and take payment: a meeting point and time, and the payment reference. Card numbers never reach us; payments are handled by the payment provider.

When you ask for our free guide, we use your email address to send it to you.

When you simply read the site, we do not use analytics or advertising cookies. Our forms use Google reCAPTCHA to stop spam, and our hosting provider keeps standard server logs, including IP addresses, for security and troubleshooting.

Why we use it, and on what legal basis

To answer your enquiry and run your photoshoot: because it is necessary to take steps at your request and to perform our agreement with you (Art. 6(1)(b) GDPR).
To send you your gallery and talk to you about your booking: same basis.
To keep accounting records: because the law requires it (Art. 6(1)(c)).
To protect our forms from spam with reCAPTCHA: our legitimate interest in a working, secure site (Art. 6(1)(f)).
To send the free guide you asked for: your request (Art. 6(1)(b)). We only send further emails if you agree to them.
To show our work: photographs from sessions appear on this site and on our social media only where you have agreed to it (Art. 6(1)(a)). See the section on photographs below.

Photographs from your session

Your photographs are personal data, and we treat them that way. We only show photographs from your session on this website, on Instagram or on Facebook if you have agreed to it. You can say no when you book and it changes nothing about the session, the price or the gallery you receive.

If you agreed earlier and change your mind, write to us and we will take the photographs down, or remove your name from a published gallery. That removal is permanent going forward, although we cannot recall copies other people have already saved or reshared.

Proposal and surprise sessions are never published before the surprise has happened.

Who else sees your data

We keep the circle small. Your data is handled by:

our web host, who runs this site and its email;
Kommo, the CRM service where enquiries from our forms are stored so we can reply and keep track of your booking, together with the connector that passes the form to it;
Google, which provides reCAPTCHA on our forms;
Cloudspot, the online gallery service where your photographs are delivered;
Meta, if you choose to write to us on WhatsApp, under their own terms;
our payment provider, for the deposit and any balance paid in advance;
our accountant, for the records we are legally required to keep.

We do not sell your data, and we do not pass it to anyone for their own marketing.

Where your data goes

Some of the providers above are based outside the European Economic Area, for example in the United States. Where your data leaves the EEA, we rely on an adequacy decision (such as the EU–US Data Privacy Framework) or on the EU Standard Contractual Clauses, depending on the provider. You can ask us for details of the safeguards that apply to you.

How long we keep it

Enquiries that do not become bookings: up to 12 months, then deleted.
Booking correspondence: up to 24 months after the session.
Your gallery: available for at least 12 months after delivery. Download and back up your photographs; do not treat the gallery as permanent storage.
Accounting records: as long as tax law requires, up to ten years.
Server logs: a few weeks, as set by our host.

Your rights

Under the GDPR you can ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to processing we base on our legitimate interests, and ask for your data in a portable form. Where we rely on your consent, for example to publish your photographs, you can withdraw it at any time; this does not affect anything we did before you withdrew it.

Write to info@milanphotographer.com and we will answer within one month.

If you think we have got it wrong, you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the supervisory authority in the country where you live. We would rather you told us first, so we can fix it.

Cookies

We only use the cookies this site needs to work, plus any you accept in the cookie banner. You can change your choice at any time through the “Cookie settings” link in the footer. The full list is in our Cookie Policy.

Changes to this page

If we change how we handle your data, we will update this page and the date at the top.