Privacy Policy

Last updated: 30 October 2026

Your privacy is important. This policy explains what personal information may be processed when you visit this website or contact Annabel, how that information is used, and what rights you have.

1. Data Controller

Annabel Engström is responsible for the processing of personal data in connection with this website and the photography services offered.

For questions regarding privacy or personal data, please contact:

Annabel Engström
Email: contact@annabelengstrom.com

2. Personal Information We Process

When you contact Annabel by email, the following information may be processed:

  • Your name and email address.
  • Contact details you choose to provide.
  • Information about photography sessions, bookings, or other enquiries.
  • Any additional information you voluntarily share.

This information is used to respond to enquiries, communicate about photography sessions, and manage any agreed services.

The legal basis is legitimate interests for general enquiries and taking steps before entering into, or performing, a contract for bookings and photography services.

Contacting Annabel is voluntary, although certain contact details are necessary to respond to your enquiry.

3. How Long Information Is Kept

Personal information is retained only for as long as necessary for its intended purpose.

Enquiries that do not result in a booking or assignment are deleted within 12 months of the most recent communication, unless the information is still required for another legitimate reason.

Information relating to ongoing or completed services may be retained for longer when necessary to fulfil contractual obligations, address potential legal claims, or comply with applicable laws.

Any accounting records are retained in accordance with applicable accounting regulations.

4. Website Hosting and Security

This website uses Cloudflare for hosting, security, and content delivery.

When you visit the website, technical information such as your IP address, browser type, and information about requests to the website may be processed by Cloudflare.

This processing helps ensure that the website functions reliably, displays correctly, and remains protected against technical issues and unauthorised traffic.

The legal basis is the legitimate interest in providing a secure and functional website.

Technical information is retained according to the retention periods applicable to the relevant services and security features, and no longer than necessary for their intended purposes.

For more information, please visit Cloudflare’s Privacy Policy.

5. Instagram

This website displays photographs from Annabel’s Instagram account.

Posts are retrieved through a server function hosted by Cloudflare. Images are delivered through this function rather than using Instagram’s embedded widgets.

This allows Instagram content to be displayed without requiring you to log in to Instagram. Technical information may be processed by Cloudflare when images are delivered to your browser.

If you click a post or follow a link to Instagram, you will leave this website and become subject to Instagram’s own terms and privacy practices.

For more information, please visit Instagram’s Privacy Policy.

6. Cookies and Local Storage

The website uses browser storage for certain basic functions.

Language preferences: Your selected language is stored in your browser’s localStorage to remember your preference between visits. This information remains until you change your preference or clear the website’s stored data.

Page transitions: The website uses sessionStorage to manage transition animations between pages. This information is temporary and is normally removed when the browser tab or session ends.

These features are not used to create individual visitor profiles or deliver targeted advertising.

The website does not use its own analytics or advertising cookies.

You can remove locally stored information through your browser settings.

7. Sharing of Personal Information

Personal information is not sold to third parties.

Information may be processed by service providers necessary for website operation, technical functions, and email communication. These may include hosting, email, and security providers.

Some providers may process personal information outside the EU/EEA. Where such transfers occur, they must be supported by a valid transfer mechanism under the GDPR, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with additional safeguards where required.

8. Photography and Personal Data in Images

During photography assignments, personal information may be included in photographs and communications with clients.

Such information is processed to plan, carry out, and deliver photography sessions and manage agreed services.

Photographs featuring identifiable individuals are published on the website or social media only where an appropriate legal basis exists. Any specific arrangements regarding the use and publication of photographs are handled in connection with the assignment.

9. Your Rights

Under the General Data Protection Regulation (GDPR), you may, depending on the circumstances, have the right to:

  • Request information about and access to your personal data.
  • Request correction of inaccurate information.
  • Request deletion of your personal data.
  • Request restriction of processing.
  • Object to processing based on legitimate interests.
  • Request data portability where applicable.
  • Withdraw consent where processing is based on consent.

To exercise these rights, please contact contact@annabelengstrom.com.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at www.imy.se.

10. Automated Decision-Making

Personal information is not used for automated decision-making or profiling.

11. Changes to This Privacy Policy

This privacy policy may be updated to reflect changes to the website, its services, or the processing of personal information.

The latest version will always be available on this page.