Naqash Studio

Privacy Policy

All rights reserved. • Updated: 2026-10-11
Legal Notice Privacy Policy Cookie Policy

1. Data Controller

In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), the controller responsible for the processing of personal data through this website is:

Trade name: Naqash Studio
Legal name / Company name: [LEGAL NAME OR COMPANY NAME]
NIF / NIE / CIF: [TAX IDENTIFICATION NUMBER]
Registered / Fiscal address: [FULL ADDRESS, POSTAL CODE, CITY, PROVINCE, SPAIN]
Privacy contact email: info@naqashstudio.com
Website: https://naqashstudio.com

2. Personal Data We Process

Depending on how you use the website and the services provided by Naqash Studio, we may process the following categories of personal data:

  • Contact and inquiry data: name, email address, optional telephone number, subject, message content and selected website language.
  • Review and testimonial data: client or display name, rating, review text, language and, where applicable, contact details associated with a review invitation.
  • Private client gallery data: client reference or label, access credentials stored in protected or hashed form, photo selections, comments or notes relating to selections, and access events.
  • Photography and audiovisual data: photographs, videos and other audiovisual material in which clients or other identifiable persons may appear, where processed as part of the services provided by the studio.
  • Technical and security data: session identifiers, browser/User-Agent information, timestamps, access events and cryptographically hashed IP addresses used for security, abuse prevention and rate limiting.

We do not intentionally collect special categories of personal data through the ordinary public contact form unless such information is voluntarily included by the user and is necessary for the relevant request.

3. Purposes and Legal Bases of Processing

  • Responding to inquiries, service requests and quotations: processing may be necessary to take steps at your request prior to entering into a contract (GDPR Art. 6.1.b) or, for general communications, based on our legitimate interest in responding to messages addressed to the studio (GDPR Art. 6.1.f).
  • Providing photography, audiovisual and related client services: processing is necessary for the performance of a contract or for steps requested prior to entering into a contract (GDPR Art. 6.1.b).
  • Private client galleries, delivery and photo selections: processing is necessary for the performance and management of the contracted service (GDPR Art. 6.1.b).
  • Reviews and testimonials: publication is based on the client's consent or express authorization (GDPR Art. 6.1.a). Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.
  • Website security, access control, prevention of abuse and rate limiting: processing is based on our legitimate interest in protecting the website, its users, client materials and technical infrastructure against unauthorized access, fraud, spam and misuse (GDPR Art. 6.1.f).
  • Compliance with legal obligations: personal data may be processed where necessary to comply with applicable legal, tax, accounting or regulatory obligations (GDPR Art. 6.1.c).

4. Photographs, Videos and Client Material

As part of its professional activity, Naqash Studio may process photographs, videos and other audiovisual material containing identifiable persons. The legal basis and permitted uses of such material depend on the relevant service, contractual arrangements, authorizations and circumstances of each project.

Portfolio publication, promotional use and other public uses of identifiable images will be carried out only where an appropriate legal basis or authorization exists.

Private client galleries are intended solely for the clients or authorized persons for whom access has been granted. Access credentials and technical security records may be processed to protect these materials from unauthorized access.

5. Recipients and Service Providers

Naqash Studio does not sell or rent personal data.

Personal data may be accessible to technical service providers that act on behalf of Naqash Studio, such as web hosting, infrastructure, maintenance or other providers strictly necessary for the operation and security of the website. Where applicable, such providers will process personal data under the corresponding contractual and data protection obligations.

Data may also be disclosed to public authorities, courts or other competent bodies where required by law.

Where a service provider processes personal data outside the European Economic Area, any international transfer will be carried out in accordance with the safeguards required by the GDPR, where applicable, such as an adequacy decision, Standard Contractual Clauses or another legally recognized transfer mechanism.

6. Retention of Personal Data

Personal data will be retained only for as long as necessary for the purposes for which it was collected and, where applicable, for the additional period required to comply with legal obligations or to establish, exercise or defend legal claims.

  • Contact and inquiry messages: retained while the inquiry is being handled and afterwards only for as long as reasonably necessary for follow-up, contractual matters, legal obligations or possible responsibilities.
  • Client service and private gallery data: retained for the duration of the client relationship and for as long as necessary to manage deliverables, selections, access security, contractual responsibilities and applicable legal obligations.
  • Reviews and testimonials: may remain published while the authorization or consent remains valid, unless they are removed earlier or their continued publication is no longer necessary or appropriate.
  • Security and access records: retained only for as long as reasonably necessary to protect the website, investigate abuse or unauthorized access, and address related responsibilities.

Where data is no longer required, it will be deleted or otherwise handled in accordance with applicable data protection requirements.

7. Your Data Protection Rights

Depending on the circumstances and the applicable legal requirements, you may exercise the following rights:

  • Right of access to your personal data.
  • Right to rectification of inaccurate or incomplete data.
  • Right to erasure of your personal data.
  • Right to restriction of processing.
  • Right to data portability where applicable.
  • Right to object to processing based on legitimate interests.
  • Right to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, you may contact Naqash Studio at info@naqashstudio.com. We may request information reasonably necessary to verify your identity before processing a rights request.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) if you consider that the processing of your personal data infringes applicable data protection law.

8. Automated Decisions and Profiling

Naqash Studio does not currently carry out automated decision-making or profiling that produces legal effects or similarly significant effects concerning website users.

9. Marketing Communications

Submitting a contact form or requesting information does not automatically subscribe you to advertising or marketing communications. The website currently does not operate a general newsletter or marketing subscription system.

10. Cookies and Similar Technologies

The website uses technical and functional technologies necessary for website security, session management and user-requested preferences. Naqash Studio does not currently use third-party analytics, advertising or profiling trackers on the initial page load.

Further information about the technologies used and how preferences can be managed is available in the Cookie Policy and through the Cookie Settings control available on the website.

11. Security

Naqash Studio applies reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, loss or misuse. However, no Internet-based system can guarantee absolute security.

12. Changes to this Privacy Policy

This Privacy Policy may be updated when necessary to reflect changes in legal requirements, website functionality or the way personal data is processed. The current version and its latest update date will remain available on this website.

13. Contact

For any question regarding this Privacy Policy or the processing of your personal data, please contact Naqash Studio at info@naqashstudio.com.