Last updated: January 15, 2026
1. Data Controller
EastLabsPhoto.com ("we", "us", or "our") is the data controller responsible for your personal data collected through this website.
Contact: info@eastlabsphoto.com
2. Personal Data We Collect
When you place an order, we collect:
- Name (first and last name) - to identify your order
- Email address - to send order confirmations and delivery links
We also automatically collect:
- IP address - for security and fraud prevention
- Browser/device information - for technical support
3. How We Use Your Data
We use your personal data to:
- Process and fulfill your photo/video orders
- Send order confirmations and delivery notifications
- Provide customer support
- Prevent fraud and abuse
- Comply with legal obligations
4. Legal Basis
We process your personal data based on:
- Contract performance (GDPR Art. 6(1)(b)) - processing orders you place with us
- Legitimate interests (GDPR Art. 6(1)(f)) - fraud prevention and security
- Legal obligation (GDPR Art. 6(1)(c)) - tax and accounting records
5. Data Retention
We retain your personal data for:
- Order data: 7 years (for tax and accounting purposes)
- Email delivery logs: 1 year
- Security logs (IP addresses): 90 days
6. Third-Party Services
We share data with the following categories of service providers:
- Payment processors - to process your payments securely (they have their own privacy policies)
- Email delivery services - to send order confirmations and delivery links
- Cloud hosting providers - to host our website and database
- Error monitoring services - to identify and fix technical issues (with PII masking enabled)
All service providers are GDPR-compliant and process data on our behalf.
7. Your Rights (GDPR)
Under GDPR, you have the right to:
- Access - request a copy of your personal data
- Rectification - correct inaccurate data
- Erasure - request deletion of your data ("right to be forgotten")
- Data portability - receive your data in a portable format
- Object - object to certain processing
- Complaint - lodge a complaint with a supervisory authority
How to Exercise Your Rights
To request data export or deletion, please email us at info@eastlabsphoto.com with the subject "GDPR Request". Include the email address associated with your order(s).
We will respond to your request within 30 days. Some data may be retained for legal obligations (e.g., tax records).
8. Cookies
We use cookies for:
- Essential cookies - required for the website to function
- Analytics cookies - to understand how visitors use our site (only with your consent)
You can manage cookie preferences through the cookie banner or your browser settings.
9. Security
We protect your data with:
- HTTPS encryption for all data transmission
- Industry-standard password hashing
- Rate limiting to prevent abuse
- Regular security audits
10. Changes to This Policy
We may update this privacy policy from time to time. Significant changes will be communicated via email or website notice. The "last updated" date at the top indicates the latest revision.