Privacy Policy

Your Privacy Matters

At Mirelle Studio Ltd (operating as Tivadar Orosz), we understand the sensitive nature of our industry and the paramount importance of discretion. This Privacy Policy explains how we collect, use, and protect your information with the utmost care.

We are committed to maintaining your privacy and confidentiality in all aspects of our relationship, from initial inquiry through service delivery and beyond.

Information We Collect

Through Our Contact Form

When you inquire about our services, we may collect:

• Your preferred name (first name, stage name, or alias)
• Email address
• Services you're interested in
• Current location or travel plans
• Your vision for the project
• Comfort level preferences (for photography)
• Preferred communication methods
• Public profile links (if voluntarily shared)

Newsletter Subscription

If you subscribe to our insights newsletter, we collect:

• Email address
• First name (optional)

Automatically Collected Information

When you visit our website, we may collect:

• General location (country/city level only)
• Browser type and device information
• Pages visited and time spent
• Referring website

How We Use Your Information

Service Delivery

We use your information to:

• Respond to your inquiries
• Plan and deliver photography sessions
• Create and manage your website project
• Provide secure galleries for image delivery
• Send project updates and communications

Marketing & Communication

With your consent, we may:

• Send newsletter updates (opt-in only)
• Share relevant service information
• Notify you of special offers or new services

You can unsubscribe at any time through the link in any email.

Data Protection & Security

Technical Measures

We implement robust security measures:

• SSL encryption for all data transmission
• Secure, privacy-focused hosting infrastructure
• Rate limiting on all forms to prevent abuse
• Cloudflare Turnstile for bot protection (no personal data collected)
• Regular security audits and updates

Operational Security

• Limited access to client information (need-to-know basis)
• Encrypted communication options available
• Secure deletion of data upon request
• No storage of sensitive payment information

Third-Party Services

We carefully select privacy-conscious partners:

Analytics

Fathom Analytics: Privacy-focused analytics that doesn't use cookies or track personal information. GDPR compliant without requiring consent banners.

Email Services

• SendLayer: For transactional emails (contact form responses)
• ConvertKit: For newsletter management (opt-in only)

Infrastructure

• Cloudflare: CDN and security services
• BunnyCDN: Image delivery and optimization

All third parties are vetted for privacy compliance and data protection standards.

Photography Privacy

Image Handling

• All images stored in secure, access-controlled locations
• Private galleries with unique, non-guessable URLs
• Option for password-protected galleries
• Metadata stripped from all published images
• Face-out and anonymous options respected

Portfolio Usage

• Images used in portfolio only with explicit consent
• Anonymous presentation options available
• Right to request removal at any time
• No automatic social media sharing

Your Rights

Under GDPR and UK data protection law, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data
• Portability: Receive your data in a portable format
• Object: Opt out of certain data processing
• Restrict: Limit how we use your data

To exercise any of these rights, contact us at studio@tivadar.com.

Data Retention

We retain information only as long as necessary:

• Inquiries: 6 months if no booking made
• Client records: 7 years for tax/legal requirements
• Images: Indefinitely unless deletion requested
• Newsletter: Until unsubscribe

You may request earlier deletion except where legal obligations require retention.

Cookies & Tracking

Our Approach

We prioritise your privacy:

• No tracking cookies used
• No Facebook Pixel or Google Analytics
• Fathom Analytics doesn't use cookies
• No consent banners needed

Essential Functions

We may use temporary session storage for:

• Form security tokens
• User preferences (not tracked)

For more details, see our Cookie Policy.

International Transfers

Your data may be processed in:

• United Kingdom (primary)
• European Union (some services)
• United States (with appropriate safeguards)

All transfers comply with GDPR requirements for international data movement.

Children's Privacy

Our services are for adults only. We do not knowingly collect information from anyone under 18. If we discover such data, we will delete it immediately.

Secure Communication

We offer multiple secure contact methods:

• Standard email (TLS encrypted in transit)
• ProtonMail for end-to-end encryption
• Signal or similar upon request
• Secure forms with Cloudflare protection

Choose the method that gives you the most comfort and confidence.

Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will:

• Note the update date at the top
• Notify active clients of significant changes
• Maintain archived versions upon request

Contact Our Privacy Team

For privacy questions, requests, or concerns:

Mirelle Studio Ltd
Email: studio@tivadar.com
Website: www.tivadar.com

Data Protection Registration: Pending ICO registration

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.