Privacy Policy

Who I Am (Data Controller)

Katie De Forest Photography is the data controller responsible for personal data collected via this website and related services.

Personal Data I Collect

• Contact details: name, email, and any message you submit via the contact form.
• Booking information: session preferences, location, and availability details you provide.
• Technical data: basic usage information (e.g., pages visited) used to ensure site functionality. I do not use invasive tracking.
• Favorites data: a random browser identifier, the photos saved with it, and an approximate country and region supplied by Cloudflare, but only after you give consent. The favorites record does not store your IP address.

How I Use Your Data

• Respond to inquiries and provide quotes or service information.
• Perform and manage bookings including pre-shoot communications and delivery of agreed materials.
• Maintain site security and troubleshoot functionality.

I do not sell or share your personal data with third parties for marketing.

Legal Bases

• Consent: when you contact me, opt to provide personal details, or enable the optional favorites system.
• Contract: when processing is necessary to perform a booking or deliver agreed services.
• Legitimate interests: site security and necessary communications.

Data Retention

I retain personal data only as long as necessary to fulfill the purposes above and meet legal obligations. Inquiry emails may be kept for up to 12 months; booking-related records may be retained longer to comply with accounting and tax requirements. Favorites remain stored while you keep the feature enabled so they are available when you return. They are deleted when you remove them or withdraw consent, when technically possible.

Your Rights

• Access your personal data.
• Rectification of inaccurate or incomplete data.
• Erasure (right to be forgotten) where applicable.
• Restriction/Objection to certain processing.
• Data portability for data you provided.

To exercise any rights, contact me via the contact page. If you believe your rights have been infringed, you may also contact your local data protection authority.

Cookies & Favorites

This site does not use the favorites identifier until you actively allow it. The first-party cookie kdf_favorites_consent remembers your allow or deny choice for up to one year, after which the site can ask again. It is necessary to respect your preference and does not identify you.

If you allow favorites, the first-party cookie kdf_favorites_visitor stores a random identifier for up to 10 years, subject to browser limits. The same identifier is backed up in this browser’s local site storage so it can remain available until you clear site data. Strapi stores a protected hash of that identifier, the photos you favorite, and the approximate country and region Cloudflare derives from your IP address. The favorites record does not store the IP address itself. Location may be missing or inaccurate and is refreshed when you use favorites. Favorites have no automatic expiry while the feature remains enabled. The identifier and approximate location are not used for advertising, third-party sharing, or tracking across websites. If the favorites cookies are cleared while local site storage remains, the site uses the backup identifier on the next visit to remove the old Strapi favorites record. Clearing cookies and local site storage together removes every copy of the identifier, so the site can no longer identify that server record.

Consent is optional and can be withdrawn at any time. Declining or withdrawing disables favorites without limiting the rest of the site. When you withdraw, the site attempts to delete the favorites linked to this browser before removing its identifier.

What Is Strapi?

Strapi is the tool used to organize and provide much of this website’s content. It manages published photos and their details, collections, tags, homepage slideshow choices, translations, page text, services, FAQs, selected Instagram posts, navigation, banners, backgrounds, and visual theme settings. Most of this is public content used to build the pages you see.

Strapi also keeps the favorites list for this browser. When you enable favorites, the website sends a random identifier to Strapi. Strapi saves a one-way scrambled version of that identifier, records which photos are connected to it, and saves the approximate country and region supplied by Cloudflare. The favorites record does not include your name, email address, IP address, precise location, or an advertising profile.

What the technical words mean

• Backend: the part of the website that works behind the scenes to store information and provide it to the pages you visit.
• API: the agreed route the visible website uses to request or send information to Strapi.
• Encrypted connection: information is scrambled while travelling between your browser and the website’s Strapi system, helping prevent others from reading it in transit.
• Protected hash: a one-way scrambled version of the random identifier. It can be matched when you return, but it cannot normally be turned back into the original identifier.

Third-Party Services

I may use trusted third-party tools (e.g., image hosting or email services) strictly to deliver my services. These providers process data on my behalf under appropriate safeguards.

Contact

Questions about this policy or your data? Please reach out via the contact page .