Privacy Policy
Last updated: 15 October 2026
This privacy policy explains what personal data I collect through this website, why, and what your rights are. It is short, because I collect very little.
Who I am
Mais Shourbaji Photography, run by Mais Shourbaji in Ouderkerk aan de Amstel, the Netherlands (Chamber of Commerce no. 90988663). I am responsible for the processing described here. Questions? Email Me@maisshourbaji.com or call +31 6 13612261.
When you contact me
When you send the contact form, I receive the details you fill in: your name, email address and message, and – if you add them – your phone number, the type of event, the date, the location and any extra information. I also see which language you used.
I use these details only to answer your question, check my availability and prepare a quotation. The legal basis is taking steps at your request before a possible agreement. I never use them for newsletters or advertising, and I never sell them or share them with others for their own purposes.
The same applies when you email, call or message me directly.
How long I keep it
- Inquiries that do not lead to an assignment are deleted automatically 2 years after the last contact.
- If you book me, I keep the details of the assignment for 7 years, because Dutch tax law requires this for business records.
Photos of people
Many photos on this website show people at events and in portraits. If you appear in a photo and would like it removed, email me and I will take it down.
Cookies and statistics
This website does not use advertising cookies.
To count visits I use Cloudflare Web Analytics. It works without cookies, stores nothing on your device and does not collect personal data: I only see totals, such as the number of page views and the countries visitors come from.
If you allow it in the cookie banner, I also use Google Analytics, to see which pages visitors find useful and how they find the website. It then places two cookies (ga and ga_…) that recognise your browser on later visits, for up to 2 years. Google does not store your IP address, the data is not used for advertising, and I only see statistics, never who you are. Without your permission Google Analytics does not run at all. The legal basis is your consent.
Your choice is stored in your own browser only. You can change it at any time via “Cookie settings” at the bottom of every page; if you withdraw your permission, the cookies are removed.
Who else processes data
To run this website I use a few service providers. They process data only on my behalf, under a data processing agreement:
- Cloudflare – hosts the website and protects it against abuse. Like any web server, it briefly processes your IP address to deliver the pages.
- Supabase – stores the website content and the messages from the contact form, on servers in Frankfurt, Germany (EU).
- Google (Google Ireland Ltd.) – Google Analytics, only if you allow it (see above).
- My email provider – for messages you send me by email, and my replies.
Cloudflare, Supabase and Google are American companies. Any transfer of data outside the EU is covered by the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses.
Security
Only I can read the messages from the contact form: access is protected by a login, and the database accepts new messages only through the website’s secure form. The connection to this website is always encrypted (HTTPS).
Your rights
You can ask me to see, correct or delete your personal data, to limit or object to its use, or to receive a copy in a common format. Email Me@maisshourbaji.com and I will respond within one month.
If you think I am not handling your data properly, please let me know. You also have the right to file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
Changes
If this policy changes, the new version will be published on this page with a new date.