Privacy Policy
This Privacy Policy describes how Pearl Lens Studio collects, uses, and discloses your personal data when you use our online platform and services. We are committed to protecting your privacy and handling your data in an open and transparent manner, in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
Who We Are
We are Pearl Lens Studio, a creative services business specializing in photography. We are the data controller responsible for processing your personal data collected through our site and services.
Personal Data We Collect
We collect personal data that you provide to us directly, as well as data collected automatically when you use our services.
Data You Provide Directly: This includes information you give us when you contact us, book a service, make a purchase, or communicate with us. This may include your name, contact details (such as physical address for printing/delivery, email, and phone number - though we only collect the phone number you provide, we do not list it here), payment information, and details about the services you are interested in or have booked. When providing photography services, we also process visual data (photographs) which may contain personal information.
Data Collected Automatically: When you visit our site, we may automatically collect certain information from your device. This may include your IP address, browser type, operating system, referring URLs, pages viewed, and the dates and times of your visits. We collect this data using cookies and similar tracking technologies.
How We Use Your Personal Data
We use your personal data for various purposes, including:
To provide and deliver the services you request, including scheduling sessions, conducting shoots, processing images, providing printing services, and managing studio rentals.
To process your payments and fulfil your orders.
To communicate with you about your bookings, inquiries, and our services.
To improve our online platform and services, understand how users interact with our site, and develop new features.
To send you marketing communications, such as newsletters and promotional offers, where you have consented or where we have a legitimate interest and are permitted to do so by law.
To comply with legal obligations and protect our legal rights.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
Performance of a Contract: When processing is necessary to fulfil a contract with you or take steps at your request before entering a contract (e.g., booking a session, providing requested services).
Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these interests are not overridden by your data protection rights (e.g., improving services, marketing to existing customers, fraud prevention).
Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., sending marketing emails, placing certain types of cookies).
Legal Obligation: Where processing is necessary to comply with a legal or regulatory obligation.
Sharing Your Personal Data
We may share your personal data with trusted third parties in certain circumstances:
Service Providers: We work with third-party service providers who perform services on our behalf, such as payment processing, website hosting, printing labs, cloud storage, and marketing services. These providers are contractually required to process your data only according to our instructions and applicable laws.
Legal Compliance: We may disclose your data when required by law, court order, or other governmental or law enforcement authorities.
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction.
We do not sell your personal data.
International Data Transfers
Your personal data may be processed in countries outside of your own, where data protection laws may be different. We take steps to ensure that any international transfers of personal data comply with applicable legal requirements, such as using standard contractual clauses or relying on adequate protection mechanisms.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention period will vary depending on the type of data and the purpose of processing.
Your Data Protection Rights
Under applicable data protection laws, including the GDPR, you have rights regarding your personal data. These rights may include:
The Right to Access: Request a copy of the personal data we hold about you.
The Right to Rectification: Request that we correct any inaccurate or incomplete data we hold about you.
The Right to Erasure: Request that we delete your personal data under certain conditions.
The Right to Restrict Processing: Request that we limit the way we process your data under certain conditions.
The Right to Data Portability: Request to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
The Right to Object: Object to our processing of your personal data under certain conditions, particularly where we are processing based on legitimate interests or for direct marketing purposes.
Rights in relation to automated decision making and profiling: The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
The Right to Withdraw Consent: If we are relying on your consent to process your personal data, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us in writing using the address provided below. We may need to verify your identity before processing your request.
You also have the right to lodge a complaint with a supervisory authority responsible for data protection in your relevant jurisdiction.
Data Security
We implement technical and organizational measures designed to protect your personal data from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect and use personal information about you, including to serve interest-based advertising. You can manage your cookie preferences through your browser settings or potentially through a cookie consent banner on our site.
Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children without parental consent. If we become aware that we have collected personal data from a child without appropriate legal basis, we will take steps to delete that information.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new policy on our online platform or by other means.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us in writing at:
Pearl Lens Studio
Building 35,
Al Maha Street,
Doha, 2713,
Qatar