Privacy
Policy
This Privacy Policy of Lukfoto ("we", "us" or "our") describes how and why we may access, collect, store, use and/or share ("process") your personal data when you use our services, including when you visit lukfoto.com or any other of our sites that links to this Policy.
How do we protect your data? We have appropriate organisational and technical measures in place to protect personal data. However, no transmission over the internet or storage technology can guarantee 100% security.
What are your rights? Depending on your location, applicable law may grant you certain rights regarding your personal data. The simplest way to exercise them is to contact us at team@lukfoto.com.
What information do we collect?
We collect personal data that you voluntarily provide to us when you enquire about a photo session, make a booking, or otherwise contact us. We may collect the following data:
- first and last names
- email addresses
- phone numbers and messaging handles (WhatsApp, LINE, Telegram, Messenger, Instagram)
- session details you choose to share — preferred dates, locations, session type, group size and any notes about your shoot
- accommodation or meeting address, where you ask us to meet you there
- Transaction data: booking reference, transaction value and payment status — card details are processed directly by our payment providers and are not stored by us
Sensitive data. We do not process sensitive data.
We automatically collect certain information when you visit our sites: IP address, browser and device characteristics, operating system, language preferences, referring URLs, country, approximate location and other technical data.
- Log and usage data — service-related, diagnostic and performance information recorded by the servers
- Device data — hardware model, operating system, internet provider, system configuration
- Location data — approximate geolocation data based on your IP address or device settings
Our use of data obtained through Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements.
How do we process your information?
We process your personal data for various reasons, depending on how you use our services:
- Providing services — responding to enquiries, confirming availability, operating our online booking system, planning routes and locations, and carrying out photo sessions
- Delivering your photographs — preparing your edited gallery and sharing the link with you
- Communication — replying to you by email or through the messaging channels you choose to use
- Coordinating partners — arranging optional services you request, such as hair and makeup, styling, studio rental, or vehicle rental
- Measurement and advertising — understanding how visitors find us and measuring our advertising, where you have consented
- Legal and accounting obligations — issuing invoices and keeping records where required
- Protecting vital interests — where necessary for a person's safety
Which legal bases do we rely on?
Where the GDPR or Thailand's Personal Data Protection Act (PDPA) applies, we are required to explain the legal bases for processing. We rely on the following bases:
- Consent — we may process your data if you have given consent for a specific purpose, such as analytics and advertising cookies; you can withdraw it at any time
- Performance of a contract — where processing is necessary to arrange and deliver a photo session you have booked
- Legal obligations — where processing is necessary to fulfil legal, tax or accounting obligations
- Legitimate interests — for example, keeping records of enquiries and securing our website
- Vital interests — where processing is necessary to protect your vital interests or those of a third party
When and with whom do we share data?
We may share data with external vendors, service providers or partners who perform services on our behalf. We have agreements requiring them to protect your data and not to use it for their own purposes beyond what is described here.
- Hosting service providers — to the extent necessary to operate the website
- Payment providers — your booking and transaction data is shared in order to process deposits and payments; payment providers act as independent data controllers for the card data they handle
- Booking system — our online booking software processes the name, email, date and session details you enter when reserving a slot
- Google — Google Analytics, Google Ads and Google Maps Platform, where you have consented to analytics and advertising cookies
- Google Drive — your edited photographs are stored and delivered via a private gallery link
- Messaging platforms — where you choose to contact us via WhatsApp, LINE, Telegram, Messenger or Instagram, your message is processed by that platform under its own privacy policy
- Session partners — where you request them, we share only the details needed with hair and makeup artists, stylists, studios, drivers, or rental providers
- Business transactions — in connection with a possible merger, sale of assets or acquisition of the business
Do we use cookies?
We use cookies and similar technologies (web beacons, pixels) to collect information when you use our services. Necessary cookies help provide security, remember preferences and support the site's core functions, including the contact forms and booking system.
Analytics and advertising cookies are only set after you accept them in our cookie banner. You can change your choice at any time.
Where you consent, we share data with Google Analytics to monitor and analyse how our services are used, and with Google Ads to measure the performance of our advertising.
To opt out of tracking by Google Analytics across all sites, visit tools.google.com/dlpage/gaoptout. More information: Google Privacy & Terms.
Photographs and image rights
Photographs taken during your session are personal data relating to you and to anyone else appearing in them.
Session photographs may appear in our portfolio, website and marketing materials unless you request exclusive rights before the shoot. If you would prefer that your images are never published, tell us before the session and we will note it on your booking at no cost.
If you have already had a session and would like images removed from our public materials, contact us at team@lukfoto.com and we will remove them from channels under our control.
Your edited gallery is stored on our Google Drive and shared with you via a private link. Depending on your package, we retain a backup for up to two years from the delivery date.
How long do we keep data?
We will retain your personal data only for as long as necessary to fulfil the purposes set out in this Policy, unless a longer period is required or permitted by law (for example, tax or accounting regulations).
Photo galleries are retained for up to two years from delivery, or for the period stated in your package, after which they may be deleted. We recommend downloading your own copy.
When we no longer have a legitimate need to continue processing, we will delete or anonymise the data. If this is not immediately possible (for example, data held in backups), we will store it securely and isolate it from any further processing until deletion becomes possible.
International data transfers
We operate from Thailand. If you contact us from the European Economic Area, the United Kingdom or elsewhere, your personal data will be transferred to and processed in Thailand, and by service providers that may store data in other countries, including the United States.
Where such transfers take place, we rely on appropriate safeguards offered by those providers, such as the European Commission's standard contractual clauses, and we share only the data necessary for the service concerned.
How do we protect your data?
We have implemented appropriate technical and organisational measures designed to protect the personal data we process. Despite our safeguards, we cannot guarantee that data transmission over the internet will be 100% secure.
We recommend using our services only in a secure environment.
Do we collect data from minors?
We do not knowingly collect, solicit or market to children under 18 years of age. By using our services, you represent that you are at least 18 years old, or that you are the parent or guardian of a minor and consent to their participation.
We regularly photograph families and children. In those cases we process the child's image on the basis of the booking made by their parent or guardian, who is responsible for giving consent on the child's behalf.
If we learn that we have collected data directly from a person under 18 years of age without such consent, we will promptly delete that data. If you suspect this to be the case, please contact us: team@lukfoto.com.
What privacy rights do you have?
Depending on your location, you may have the right:
- to request access to and obtain a copy of your personal data
- to request correction or deletion of your data
- to restrict the processing of your data
- to data portability (where applicable)
- to object to processing based on our legitimate interests
- to object to decisions based solely on automated processing
If you reside in the EEA or UK and believe we are processing your data unlawfully, you may lodge a complaint with your national data protection authority or the UK data protection authority (ICO). In Thailand, you may contact the Office of the Personal Data Protection Committee (PDPC).
Withdrawing consent: if we process your data on the basis of consent, you may withdraw it at any time by contacting us or by changing your choice in our cookie settings. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Opting out of marketing communications: you can opt out at any time by contacting us. We may still contact you on matters necessary to arrange or deliver a session you have booked.
Cookies: most browsers accept cookies by default. You can set your browser to delete or reject them — however, this may affect certain site functions.
Questions about your privacy rights: team@lukfoto.com
Control of the "Do Not Track" feature
Most browsers and some operating systems include a "Do Not Track" (DNT) feature. At present, no uniform technological standard has been established for recognising it, so we do not respond to browser DNT signals. Our cookie banner gives you direct control instead.
If an online tracking standard is adopted that we must observe, we will inform you in an updated version of this Policy.
Do we update this policy?
We may update this Privacy Policy from time to time. The updated version will be marked with a revised "Last updated" date at the top of the document. If we make material changes, we will notify you either by prominently posting a notice or by sending you a direct notification.
We encourage you to review this Policy regularly to stay informed about how we protect your data.
How can you contact us?
How to review, update or delete your data?
Under applicable law you may have the right to request access to the personal data we collect from you, to obtain information about how it is processed, to correct inaccuracies or to have your data deleted. You may also withdraw your consent to processing.
In some cases these rights may be limited by applicable law. To submit a request, contact us directly: team@lukfoto.com.