Privacy Policy
Last updated: 24/09/2026
gaelduclos.com is a static website. It doesn't store any data directly — the quote request form simply pre-fills an email in your browser, and nothing is sent to the site itself.
That said, this policy explains the personal data processing that can happen as part of Gaël Duclos Studio's business, whenever there's an exchange with a client.
Data controller
Legal name: Gaël Duclos EI
Trading name: Gaël Duclos Studio
SIRET: 10978985900013
Email: contact@gaelduclos.com
What personal data may be processed
The contact channels shown on the site (email, Instagram, WhatsApp) and the quote request form let you start a conversation with Gaël Duclos Studio yourself. Any data you send is then handled as part of that professional exchange.
Depending on the situation, Gaël Duclos Studio may end up handling the following kinds of data:
Contact details:name, email address, phone number, postal address, professional details, and whatever you tell us that's needed to handle your request.
Service-related information:whatever's needed to organise and carry out a photo or video service, and to deliver the files afterwards.
Images:photographs and videos of people, when they're taken as part of a service. How they're used — for communication or promotion, say — is governed by the contract terms and, where needed, by a separate image rights authorisation.
Why we process it, and on what legal basis
Handling enquiries and drawing up quotes:responding to your message, discussing the project and putting together a proposal — legal basis: pre-contractual steps taken at your request (GDPR Article 6(1)(b)).
Delivering the service:organising and carrying out the shoot, staying in touch with you, delivering the files and following the project through — legal basis: performance of the contract (GDPR Article 6(1)(b)).
Invoicing and accounting:preparing, sending and keeping quotes, invoices, proof of payment and anything else required to meet legal obligations — legal basis: performance of the contract and compliance with legal obligations (GDPR Article 6(1)(b) and (c)).
Defending our rights in case of a dispute:keeping what's needed to exercise or defend legal rights, where relevant — legal basis: legitimate interest.
Who else sees it
Your data is mainly handled directly by Gaël Duclos Studio. It may occasionally be shared with technical or professional service providers acting on the Studio's behalf, when that's necessary for the purposes above.
That can include hosting, email, invoicing and management tools, e-signature services, file storage or delivery platforms for photos and videos, and other services the business relies on to run.
Where these providers act as data processors under the GDPR, Gaël Duclos makes sure they offer appropriate data-protection safeguards and that processing stays within the bounds set by the regulations.
How long we keep it
Prospects:if an enquiry doesn't turn into a booking, the data is kept for no more than 3 years from your last contact — unless there's a specific dispute or legal reason to keep it longer.
Clients:data needed to deliver the service is kept for as long as the working relationship lasts, then for whatever period applies afterwards under legal, contractual or dispute-related obligations.
Accounting records:invoices, receipts and accounting documents are kept for the legally required period — 10 years from the end of the financial year, for accounting supporting documents.
Photo and video archives:files may be kept for as long as needed to deliver and follow up on the service, plus any archiving period agreed in the contract. Where images are used for communication or promotion, how long they're kept and used follows the relevant authorisation or contract terms.
Cookies and trackers
gaelduclos.com currently doesn't use advertising cookies or any audience-tracking tools. As of this policy's last update, there's no user account system or behavioural tracking either.
If that changes — say, a third-party service that sets cookies or uses trackers gets added — this policy will be updated, along with a consent mechanism where one's required.
Your rights
Under the GDPR and French data protection law, and subject to the conditions that apply to each type of processing, you have the right to:
Access your personal data.
Correct inaccurate or incomplete data.
Have it deleted, where the regulations allow.
Restrict processing, in the cases set out in the GDPR.
Receive a portable copy of your data, where the legal conditions are met.
Object to certain processing — in particular where it's based on legitimate interest, or done for marketing purposes.
Where processing relies on your consent, you can withdraw it at any time — this won't affect the lawfulness of anything done before the withdrawal.
To exercise any of these rights, or for more information, get in touch at contact@gaelduclos.com.
You can also lodge a complaint with the French data protection authority (CNIL): www.cnil.fr.
Security
Gaël Duclos uses appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or improper disclosure.
The site runs over HTTPS. Exchanges tied to the business — by email, messaging, storage or delivery platforms, for instance — may also be handled by the relevant technical providers, according to their own security measures and within the purposes set out in this policy.
Changes to this policy
This policy may be updated to reflect changes in the business, the tools used, applicable regulations, or how data is actually processed in practice.
The "last updated" date at the top of this page tells you which version currently applies.