Privacy Policy

Your privacy is important to us. This Privacy Policy explains how [Your Name / Business Name] (“we”, “us”, “our”) collects, uses, stores, and protects personal data in accordance with the EU General Data Protection Regulation (GDPR) and Swedish data protection law.
This website functions as:
-
a portfolio showcasing photographic work, and
-
an online store selling digital photographic products.
The data controller responsible for the processing of your personal data is:
Hamish Burson/Burson Media
Sweden
hamishburson@gmail.com
Personal Data We Collect
We may collect and process the following types of personal data:
a) Contact & Communication
-
Name
-
Email address
-
Any information you submit via contact forms or email
b) Purchases & Payments
When you purchase digital products, we may collect:
-
Name
-
Email address
-
Billing information
-
Purchase details
Payment information is processed securely by third-party payment providers and is not stored by us.
c) Technical & Usage Data
-
IP address
-
Browser type and device information
-
Pages visited and interaction data
This data is used for basic website functionality, security, and performance analysis.
4. Legal Basis for Processing
We process personal data based on one or more of the following legal grounds under GDPR:
-
Contractual necessity – to deliver purchased digital products
-
Legitimate interest – to operate, secure, and improve the website
-
Consent – where required (e.g. cookies, marketing communications)
-
Legal obligation – accounting or regulatory requirements
5. How We Use Your Data
Your data is used to:
-
Deliver digital products you purchase
-
Communicate with you regarding inquiries or orders
-
Maintain website security and functionality
-
Comply with legal and accounting obligations
We do not sell or rent your personal data.
6. Cookies & Tracking
This website may use cookies or similar technologies for functionality and analytics.
Where required by law, consent is requested before non-essential cookies are placed. You can manage or withdraw cookie consent at any time through your browser settings or cookie banner.
7. Third-Party Services
We may use trusted third-party services to operate the website and process payments, such as:
-
Payment providers
-
Website hosting services
-
Analytics tools
These providers only process personal data on our behalf and under data processing agreements (DPAs) compliant with GDPR.
8. Data Storage & Retention
We store personal data only for as long as necessary to:
-
Fulfil the purposes described in this policy
-
Meet legal or accounting requirements
When data is no longer needed, it is securely deleted or anonymised.
9. Your Rights Under GDPR
You have the right to:
-
Access your personal data
-
Request correction or deletion
-
Object to or restrict processing
-
Request data portability
-
Withdraw consent at any time
To exercise your rights, contact us at hamishburson@gmail.com.
10. Complaints
If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Swedish supervisory authority:
Integritetsskyddsmyndigheten (IMY)
www.imy.se
11. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this website.