Privacy Policy
Last Updated: 5 October 2026

This Privacy Policy describes how ShiftyNL Photography ("we", "us", or "our") collects, uses, and protects your personal data when you visit www.shiftynl-photography.nl.

1. Who we are

ShiftyNL Photography is the controller responsible for the processing of personal data described in this policy.

ShiftyNL Photography (Rense Sjoers)
The Netherlands

Email: info@shiftynl-photography.nl

2. What data we collect

Depending on how you use the website, we may collect the following personal data:

• Name, email address, phone number (if provided) and message content when you use the contact form
• Email address when you subscribe to the newsletter, plus the date and time of your subscription and confirmation
• Name, email address, website (if provided), comment text and IP address when you leave a comment
• IP address
• Browser and device information
• Website activity data (e.g. pages visited)
• Cookies and similar tracking data

3. How we collect data

• Via the contact form (Contact Form 7). Submissions are emailed to us and a copy is stored in our website database (Flamingo).
• Via the newsletter sign-up form (MailPoet)
• Via comments you leave on the website
• Automatically, through cookies and Google Analytics (only after your consent)
• Automatically, through security and spam protection tools
• Through the Instagram feed (shown using locally stored copies, see section 7)

4. Why we process your data

• To respond to contact requests (legal basis: legitimate interest, or taking steps at your request before entering into an agreement)
• To send you the newsletter (legal basis: consent). Every newsletter contains an unsubscribe link.
• To publish and moderate comments (legal basis: legitimate interest)
• To improve website performance and deliver images quickly (legal basis: legitimate interest)
• To protect and secure the website, including spam and login protection (legal basis: legitimate interest)
• To analyze visitor behavior via Google Analytics (legal basis: consent)
• To show my latest work through the Instagram feed (legal basis: legitimate interest)

We will not use your personal data for other purposes without your consent. We do not sell your personal data.

5. Photography and image use

As a photography website, images may contain recognizable individuals. These images may qualify as personal data under the GDPR.

Images are published based on:

• Consent of the person(s), where required
• Legitimate interest (e.g. public events, artistic photography)

If you appear in an image and wish for it to be removed, please contact us at info@shiftynl-photography.nl.

6. Data retention

• Contact form submissions (including the copies stored in our website database): up to 12 months
• Newsletter subscriptions: until you unsubscribe. After that we only keep what is needed to make sure you no longer receive emails.
• Comments: until manually removed
• Analytics data (Google Analytics): up to 14 months
• Security and spam protection data (e.g. IP addresses of failed login attempts): only as long as needed for security purposes

7. Sharing data with third parties

We only share data where necessary for operating the website. The parties involved are:

• Cloud86: website hosting and email (servers in the Netherlands)
• QUIC.cloud (LiteSpeed): website performance optimization
• ShortPixel: image optimization and image delivery (CDN)
• Google (Google Analytics): website statistics, only after your consent
• Meta (Instagram): our website retrieves our own Instagram posts and stores copies of the images on our own server. Your browser does not connect to Instagram when viewing the feed; only when you click through to Instagram does Meta's own privacy policy apply.
• Limit Login Attempts Reloaded: IP addresses of login attempts are checked against their cloud service to block attacks
• Affiliate partners: only when you click an affiliate link (see section 10)

We have agreements or appropriate safeguards in place with these parties where required.

8. Transfers outside the European Union

Some of the parties above (such as Google) are based in the United States or may process data there. In those cases the transfer is based on the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

9. Cookies

Our website uses cookies to function properly and to improve your experience:

• Functional cookies (required for the website to work)
• Analytics cookies (Google Analytics)
• Third-party cookies (e.g. embedded social media content)

Non-essential cookies are only placed after your consent via the cookie banner. You can change or withdraw your consent at any time via the "Cookie Settings" button at the bottom of every page.

10. Affiliate links

Some links on this website (for example on the My Gear page) are affiliate links. If you click such a link and make a purchase, I may receive a small commission at no extra cost to you. After you click, the partner or affiliate network (e.g. TradeTracker) may place its own cookies on its website to register the referral. Their own privacy policy applies to this.

11. Tools and services we use

• Google Analytics (website statistics)
• SEOPress (search engine optimization and cookie consent)
• Contact Form 7 and Flamingo (contact form and storage of submissions)
• MailPoet (newsletter)
• FooGallery and Simple Lightbox (image galleries)
• Smash Balloon Instagram Feed (Instagram feed, using locally stored images)
• ShortPixel (image optimization and CDN)
• Antispam Bee and WP Armour Honeypot (spam protection)
• Limit Login Attempts Reloaded (login security)
• LiteSpeed Cache and QUIC.cloud (performance optimization)
• TranslatePress (website translation)

12. Your rights

You have the right to:

• Access your personal data
• Correct or delete your data
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent at any time

To exercise your rights, contact: info@shiftynl-photography.nl. We will respond within one month. We may ask you to verify your identity before handling your request.

You may also file a complaint with the Dutch Data Protection Authority: Autoriteit Persoonsgegevens

13. Children

This website is not intended for children under the age of 16. We do not knowingly collect personal data from children under 16 without the consent of a parent or guardian. If you believe we have done so, please contact us and we will delete the data.

14. Automated decision-making

We do not use automated decision-making or profiling that has legal or similarly significant effects for you.

15. Data security

We take appropriate technical and organizational measures to protect your personal data against loss, misuse, or unauthorized access, such as a secure (HTTPS) connection, two-factor authentication and login protection.

16. External links

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

17. Changes to this policy

We may update this Privacy Policy at any time. Changes become effective immediately upon publication on this page.