Privacy Policy

01. Data Controller

Lemark Ltd is responsible for processing personal data collected through this website.

02. Personal Data We Collect

Depending on how you interact with us, we may process the following categories of information:

• Identification and contact details: your name, email address, telephone number and any other information you voluntarily provide.
• Enquiries and bookings: the photography service requested, your preferences, availability and information required to arrange a session.
• Communications: messages submitted through contact forms, email or other communication channels.
• Technical information: IP addresses, browser and device details, security logs and website usage data.
• Privacy preferences: choices relating to cookies and technologies requiring consent.

We do not intentionally request personal information that is unnecessary for handling your enquiry or providing the agreed service.

03. Purposes and Lawful Bases for Processing

We process personal data for the following purposes:

Responding to enquiries. We use the information you provide to answer questions, explain our services and prepare quotations. The lawful basis is taking steps at your request before entering into a contract or, where appropriate, our legitimate interest in managing professional communications.

Managing bookings and photography sessions. When you book a service, we process the information necessary to organise the session and fulfil our contractual commitments. The lawful basis is the performance of a contract.

Complying with legal obligations. Certain information may be processed and retained to meet applicable accounting, taxation and other legal requirements.

Protecting website security. We may process technical information necessary to prevent unauthorised access, misuse and security incidents, based on our legitimate interests.

Managing optional cookies. Where consent is legally required, these technologies will only be used in accordance with your choices.

We will not use your contact details for unsolicited marketing communications without a valid lawful basis.

04. Privacy of Photography Sessions

We understand that booking an artistic, boudoir or erotic photography session may require an especially high level of discretion.

For this reason:

• Enquiries and communications are handled confidentially.
• Booking a photography session does not automatically authorise us to publish, distribute or commercially use your photographs.
• Any permission to use identifiable images in our portfolio, on our website, on social media or in promotional material will be obtained separately and must be specific.
• Arrangements relating to image selection, delivery, storage and potential deletion will be set out in the photography service agreement.
• Appropriate security measures will be used to reduce the risk of unauthorised access or disclosure.

Certain images or information may reveal particularly sensitive aspects of an individual's private life. Where processing involves special categories of personal data under Article 9 of the GDPR, an applicable legal condition will be required, such as explicit consent where appropriate.

Permission to use someone's likeness and consent to process personal data are separate matters and will be documented appropriately.

05. Adults Only

My Erotic Shoot services are intended exclusively for people aged 18 or over.

We do not knowingly offer our photography services to minors or intentionally collect their personal information for booking purposes.

We may request proportionate age verification where necessary before confirming a photography session.

06. Recipients and Service Providers

Certain technology providers may need access to personal information to operate the website and support our services, solely where necessary and subject to appropriate contractual safeguards.

These may include providers of web hosting, email, contact forms, security, storage and administrative services.

We do not sell personal data to third parties.

Information will only be disclosed to public authorities where required or otherwise permitted by law.

07. International Data Transfers

Where possible, we prioritise processing personal data within the European Economic Area.

If a service provider transfers personal data outside the European Economic Area, we will verify that an appropriate transfer mechanism exists under the GDPR, such as an adequacy decision or the European Commission's Standard Contractual Clauses, together with any additional safeguards required.

08. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected.

• Enquiries: for the period necessary to respond and manage any reasonably justified follow-up.
• Contracts and invoicing: for the periods required by applicable legislation.
• Technical records: according to justified security needs.
• Photographs and original files: for the periods specified in the photography service agreement.
• Consent-based processing: information will no longer be used for the relevant purpose once consent is withdrawn, subject to any other applicable legal obligations.

Once the applicable retention periods have expired, information will be securely deleted or appropriately anonymised unless there is a legitimate reason for retaining it.

09. Your Data Protection Rights

Under the General Data Protection Regulation, you may exercise the following rights where the relevant legal requirements are met:

• Access your personal data.
• Request correction of inaccurate information.
• Request deletion of your personal data.
• Request restriction of certain processing activities.
• Object to processing based on legitimate interests.
• Request data portability where applicable.
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, please contact:

We may request reasonable additional information where necessary to verify your identity.

You also have the right to lodge a complaint with a data protection supervisory authority, particularly in the country of your habitual residence, place of work or the alleged infringement.

Bulgarian supervisory authority: Commission for Personal Data Protection (CPDP). cpdp.bg

Spanish supervisory authority: Spanish Data Protection Agency (AEPD). aepd.es

10. Security and Confidentiality

We implement technical and organisational measures appropriate to the level of risk to protect personal data from unauthorised access, loss, alteration or improper disclosure.

However, no electronic transmission or storage system can guarantee absolute security.

11. Cookies

This website may use cookies and similar technologies to support its functionality and, where applicable, for other purposes requiring consent.

Further information is available in our Cookie Policy .

12. External Links

Our website may contain links to websites or services operated by third parties.

We are not responsible for their privacy practices and recommend reviewing their respective policies before providing personal information.

13. Changes to This Policy

We may update this Privacy Policy to reflect legal, technical or operational changes.

The current version will remain available on this page and will include its latest revision date.

Where changes require specific notification or renewed consent, we will take the appropriate steps.