Legal
Privacy & Cookie Policy
Last updated: 4 October 2026
This policy explains what personal data Kamil Salameh Photography ("we", "us") collects through kamilsalamehphotography.com (the "Website"), why, and the choices and rights you have. We collect as little as possible and never sell your data.
1. Who is responsible for your data
The data controller is Kamil Salameh, trading as Kamil Salameh Photography, based in Lebanon. You can reach us about any privacy matter through the contact form or via direct message on Instagram.
2. What we collect
Information you give us
When you use the contact form or the print and commission request form, we receive the details you enter:
- your name and email address;
- your phone number, if you choose to provide it;
- your message, the products or services you are interested in, and any details you include (for example a delivery city or event date).
Please do not include sensitive information (such as health or financial details) in your message.
Information collected automatically
The Website does not use analytics, advertising or tracking tools. Like any website, the hosting provider automatically processes technical data needed to deliver pages to your browser, such as your IP address, browser type and the time of the request, in short-lived server logs used for security and reliability.
3. How and why we use it
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Replying to your inquiry | Name, email, phone, message | Your consent and steps taken at your request before a contract (Art. 6(1)(a) and (b)) |
| Quoting, producing and delivering an order or commission | Name, contact details, order details, delivery address | Performance of a contract (Art. 6(1)(b)) |
| Keeping business and tax records | Order and payment records | Legal obligation (Art. 6(1)(c)) |
| Keeping the Website secure and available | Technical server log data | Legitimate interests (Art. 6(1)(f)) |
We do not use your data for automated decision-making or profiling, and we will only send you marketing messages if you have asked us to.
4. Who we share it with
We only share personal data with service providers that help us run the Website, under their own data protection terms:
- Formspree (Formspree, Inc., USA) receives form submissions and forwards them to us by email. See the Formspree privacy policy.
- GitHub Pages (GitHub, Inc., USA) hosts the Website and processes server log data. See the GitHub privacy statement.
- Delivery partners, only when you order a physical product, receive the name, phone number and address needed to deliver it.
We may disclose data where required by law or to protect our legal rights. We never sell or rent personal data.
5. International transfers
Our service providers may process data outside your country, including in the United States. Where the GDPR applies, such transfers rely on safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework, as offered by those providers.
6. How long we keep it
- Inquiries that do not lead to an order: up to 12 months after our last exchange.
- Orders and commissions: for as long as required by applicable tax and accounting laws.
- Server logs: kept by the hosting provider for a limited period according to its own policy.
7. Your rights
Depending on where you live, including under the EU/UK General Data Protection Regulation and Lebanese Law No. 81 of 2018 on Electronic Transactions and Personal Data, you may have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw your consent at any time, without affecting processing that already took place.
To exercise any of these rights, contact us through the contact form. We will respond within one month. You also have the right to complain to your local data protection authority.
8. Cookies and local storage
The Website does not set any cookies and does not use analytics, advertising pixels, social media plugins or other tracking technologies. Fonts and scripts are served from our own domain, so loading a page does not send your data to third-party content networks.
We use one item of your browser's local storage, which stays on your device and is never sent to us:
| Name | Purpose | Type | Duration |
|---|---|---|---|
ks-privacy-notice-v1 | Remembers that you dismissed the privacy notice so it is not shown again | Strictly necessary, first-party | Until you clear your browser data |
Because it is strictly necessary for a feature you use, this item does not require consent. You can delete it at any time through your browser settings. External sites we link to, such as Instagram, LinkedIn and Adobe Lightroom, set their own cookies only once you visit them, under their own policies.
If we ever add non-essential cookies or analytics, we will update this policy and ask for your consent before they are used.
9. Security
The Website is served exclusively over encrypted HTTPS connections, and forms are protected against spam submissions. No method of transmission over the internet is completely secure, but we take reasonable measures to protect your data.
10. Children
The Website is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has sent us personal data, please contact us so we can delete it.
11. Links to other websites
The Website links to external services such as Instagram, LinkedIn and Adobe Lightroom. We are not responsible for their privacy practices; please read their policies when you visit them.
12. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows when it was last revised. Significant changes will be highlighted on the Website.