Privacy Policy
Last updated: January 15, 2025
When you use this website or commission a portrait session, we may collect the following categories of data:
Your information is used solely for the following purposes:
This site uses essential cookies to ensure proper functionality and optional analytics cookies to understand how visitors interact with the portfolio. You may disable cookies in your browser settings, though some features may not function optimally. We do not use cookies for advertising or cross-site tracking.
We do not sell or rent personal information. Data may be shared only with trusted service providers who assist in operating this website and delivering services:
All third-party processors are bound by confidentiality agreements and may only use your data to perform their specific functions.
Contact form submissions are retained for up to 24 months to allow follow-up on inquiries. Commissioned project files and correspondence are kept for the duration of the business relationship plus a reasonable period thereafter for archival and legal purposes. Analytics data is retained in aggregated form and cannot be traced back to individual users.
Depending on your jurisdiction, you may have the following rights regarding your personal data:
Under the Protection of Personal Information Act (POPIA) in South Africa and the General Data Protection Regulation (GDPR) for EU residents, you may lodge a complaint with your local supervisory authority if you believe your rights have been violated.
This website presents the genuine portfolio and services of David Bernard Photography. We do not make misleading claims about outcomes, fabricate endorsements, or misrepresent our qualifications. All displayed work is authentic and created by David Bernard. No artificial urgency, false scarcity, or deceptive practices are used in our communications. Any testimonials or references reflect real client experiences.
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include secure hosting environments, encrypted data transmission, and restricted access to personal data on a need-to-know basis.
For any questions about this policy, to exercise your data rights, or to submit a privacy-related request, please contact:
We respond to all verified privacy requests within 30 days. This policy may be updated periodically; the date above indicates the latest revision.