Privacy

Clear choices, limited data.

This notice explains what Davide Solla Studios collects through this website, why it is needed, who supports the service, and the choices available to you.

Ask a privacy question

Last updated 14 July 2026.

Who is responsible

Davide Solla Studios is the controller.

Davide Solla, trading as Davide Solla Studios and Davide Solla Photography in London, decides how the personal data described here is used. Contact davidesolla@outlook.it for privacy requests.

Information and purpose

Data is collected for a defined studio task.

Commission enquiries: Name, email, project type, message, a retry identifier, and limited acquisition context such as landing path, referrer host, campaign tags and analytics choice. This is used to answer and manage your request, prevent duplicate notifications and understand which studio activity creates genuine enquiries. The basis is taking steps at your request before a contract and the studio's legitimate interest in running an efficient enquiry process. Unconverted enquiries are reviewed for deletion after two years.
Bookings and client galleries: Contact, project, contract, delivery and gallery-access information is used to plan and deliver commissioned work, protect private galleries and manage the client relationship. The basis is contract, legal obligations and legitimate interests in secure delivery. Gallery access is removed when no longer needed; contractual and financial records follow the applicable legal and accounting retention period.
Field Notes: Email, optional first name, consent evidence and subscription preferences are used only to deliver the requested editorial email and manage opt-outs. Resend remains the subscriber system of record. Resend sends signed lifecycle events to the private Radar endpoint; Radar verifies them, immediately discards recipient-level fields, and retains only anonymous confirmation, opt-out and delivery-health facts. It does not retain names, email addresses, contact or provider IDs, IP addresses, user agents, email subjects, full links, opens or clicks. The website's own lifecycle facts contain no recipient-level fields. The basis is consent. Active details are retained while subscribed; limited consent or suppression evidence may be kept afterwards to demonstrate and respect your choice.
Print orders: Contact, delivery address, order and payment-reference information is used to quote, take payment, fulfil and support a print order. Stripe handles payment-card data; it is not sent to this website. The basis is contract and legal obligations. Transaction records needed for tax are kept for the statutory business-record period.
Optional website analytics: If you allow it, Google Analytics receives page URLs, first-party analytics identifiers, general browser or device context, and limited studio event data for contact intent, Instagram visits and completed enquiries. The site does not send enquiry IDs, names, email addresses or message text to Google Analytics. The basis is consent. Event-level retention is determined by the GA4 property setting and the need to compare studio performance over time; that setting is reviewed at least annually and shortened when the data is no longer needed.
Security and service logs: Hosting and API providers may process IP addresses, request times and technical logs to deliver and protect the service, prevent abuse and diagnose failures. The basis is legitimate interests in operating a secure website. Retention follows short operational and provider security schedules unless a longer period is needed to investigate an incident.

Cookies and browser storage

Analytics is off until you choose it.

The website uses basic consent mode: no Google tag is requested and no analytics data is sent before an affirmative choice. Advertising storage, advertising user data, personalisation and Google Signals remain disabled even when analytics is allowed.

Storage	Purpose	Duration
`davide-studios-privacy-v1`	Remembers the analytics choice and notice version. Essential for respecting that choice.	Until the notice changes, you change the choice, or browser storage is cleared.
Enquiry and client session storage	Prevents duplicate form sends and, after login, maintains private gallery access in the current browser session.	Until successful completion, logout, or the browser session ends.
`_ga` and `_ga_*`	Google Analytics audience and session measurement. Created only after analytics consent.	Controlled by Google Analytics and removed from this domain when consent is withdrawn; you can also clear them in browser settings.

Service providers

Only the providers needed for the relevant task receive data: Vercel for hosting, Resend or the configured mail service for enquiry and Field Notes email, Google Analytics when consented, Stripe for payment, Creativehub and theprintspace for print fulfilment, Adobe Lightroom for assigned client galleries, GitHub for encrypted or operational site records, and the studio's private Business Radar for enquiry management and anonymous Field Notes lifecycle facts.

Some providers may process information outside the UK. Where that occurs, the studio relies on the provider's applicable UK adequacy route or contractual transfer safeguards. You can request more information about the safeguards used for a specific service.

Your rights

You remain in control.

Depending on the processing, you may ask for access, correction, deletion, restriction or portability of your personal data. You can withdraw analytics consent through Privacy settings and Field Notes consent through the unsubscribe or email preferences link.

Your right to object

You may object at any time to processing based on legitimate interests, including acquisition analysis attached to an enquiry. The studio will stop unless there is a compelling lawful reason to continue.

There is no solely automated decision-making with legal or similarly significant effects. To exercise a right, email davidesolla@outlook.it. If a concern is not resolved, you may complain to the Information Commissioner's Office.

Changes

This notice is reviewed as the studio system evolves.