Last updated: October 2026
This Privacy Policy explains how Memo Torres Photography collects and processes personal data in connection with photography services, client galleries, bookings and related services.
1. Data Controller
The Data Controller is:
Memo Torres Photography
Malta
Email: memotorresphoto1@gmail.com
2. Personal data collected
Depending on the service used, information may include:
Name
Email address
Contact information
Booking and session information
Photographs and video containing identifiable individuals
Gallery activity, favourites and image selections
Order and transaction information
Communications relating to photography services
Technical information generated when accessing online galleries
3. Why personal data is processed
Personal data may be processed to:
Provide photography services
Manage bookings and client communication
Deliver photographs and galleries
Process image selections and downloads
Fulfil print or digital orders
Maintain business and financial records
Respond to enquiries and customer support requests
Protect galleries and prevent unauthorised access
Comply with legal and regulatory obligations
Under GDPR, processing must have a lawful basis. Depending on the situation, this can include contractual necessity, legal obligations, consent or legitimate interests. European Commission
4. Photography and images
Photographs in which an individual can be identified may constitute personal data.
Photographs created as part of a commissioned photography service may be processed where necessary to perform the photography agreement and deliver the requested service.
Use of photographs for portfolio, website, social media, advertising or promotional purposes may require separate permission or another applicable lawful basis, depending on the circumstances.
5. Pixieset
Client galleries, bookings and certain related services may be provided using Pixieset Media Inc.
When client information is processed through Pixieset on behalf of Memo Torres Photography, Pixieset acts as a data processor under its Data Processing Addendum. Pixieset Help Center
Pixieset may use subprocessors and infrastructure necessary to provide its services.
6. Payment information
Where payments are handled through external payment providers, payment card details may be processed directly by those providers rather than by Memo Torres Photography.
Only information necessary to identify, manage and record the transaction may be retained.
7. Data retention
Personal data is retained only for as long as reasonably necessary for the purposes for which it was collected, including service delivery, accounting, legal obligations, dispute resolution and legitimate business records.
Client galleries and delivered photographs may be removed after a reasonable period and are not intended to serve as permanent backup storage. Clients are responsible for downloading and securely storing their final delivered files.
8. Sharing personal data
Personal information may be shared with service providers where necessary to operate the photography business, such as gallery hosting, payment processing, printing, delivery or IT services.
Personal data will not be sold to third parties.
9. Your rights
Under GDPR, individuals may have rights including:
Access to their personal data
Correction of inaccurate data
Erasure in certain circumstances
Restriction of processing
Data portability
Objection to certain processing
Withdrawal of consent where consent is the lawful basis
These rights are subject to the conditions and exceptions established by applicable data-protection law. European Commission
Requests can be made using the contact email listed above.
Individuals also have the right to lodge a complaint with the relevant data-protection authority. In Malta, this is the Information and Data Protection Commissioner (IDPC). IDPC
10. Security
Reasonable technical and organisational measures are used to protect personal data. However, no online storage or transmission system can guarantee absolute security.
11. Updates
This Privacy Policy may be updated when services, technology or legal requirements change. The latest version will be displayed through the relevant gallery or website.