Privacy statement

LOU STUDIO (Pieter Aertszlaan 11, 2102 CH Heemstede, the Netherlands, Chamber of Commerce 99749793, VAT number NL869117464B01) is the controller for the processing of your personal data as described in this privacy statement. We handle your data with care and comply with the General Data Protection Regulation (GDPR).

What data we process

• When you request a booking: your name, email address, phone number, company name if provided, type of shoot, chosen date and time, number of people and your notes.
• For quotes and invoices: your name, email address, (company) address and VAT number if applicable, plus amounts and payment status.
• When you email or call us: the information you share with us.

Why and on what legal basis

• To handle and confirm your booking and contact you about your shoot (performance of a contract).
• To prepare and send quotes and invoices and keep track of payments (performance of a contract and legal obligation).
• To keep our accounts and meet tax retention requirements (legal obligation).
• To protect the website and booking form against spam and abuse (legitimate interest).

We never use your data for newsletters or marketing without your consent, never sell it, and do not make decisions based on automated processing.

Who we share data with

We use a few service providers that process data on our behalf, bound by agreements on security and confidentiality:

• Supabase – storage of bookings, quotes and invoices (servers in the EU, Frankfurt).
• Resend – sending confirmation emails, quotes and invoices.
• Vercel – hosting of this website.
• Cloudflare Turnstile – protecting the booking form against spam and fake bookings.

Some of these are US companies. Where data is processed outside the European Economic Area, this only happens with appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. Otherwise we only share data when legally required, for example with the Dutch Tax Administration.

How long we keep data

• Invoices, quotes and data required for tax purposes: 7 years (Dutch legal requirement).
• Requests that did not go ahead and other contact details: no longer than 12 months after the last contact.

Security

We take appropriate measures to protect your data against loss and unauthorised use. The website and all connections are encrypted (https), and only LOU Studio has access to bookings and invoices through a secure login.

Cookies and third parties

This website does not use tracking or advertising cookies. Google Maps only loads when you click "Show map"; Google may then set cookies. Fonts are served by Google Fonts, which passes your IP address to Google. On the booking page we use Cloudflare Turnstile; it checks technical browser signals but does not set advertising cookies.

Your rights

You have the right to access, correct or delete your data, to restrict or object to its processing, and to data portability. Data we are legally required to keep (such as invoices) can only be deleted once the retention period has ended. Send your request to info@loustudio.nl; we will respond within one month.

Not happy with how we handle your data? Let us know and we will work it out together. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

We may update this privacy statement. The latest version is always on this page.

Last updated: 12 October 2026