What we do with your data.

The data collected on this site is handled by NEBULA, a photography and film service based in Portugal.

For anything to do with privacy, write to: nebula.pdstudio@gmail.com

Contact form. Your name, email, the type of service and, if you give them, the date and location of the event, along with whatever you write. They are used only to reply to you and prepare a proposal. The legal basis is your own enquiry — without this we cannot answer you. While you type, the text is kept in your own browser so it is not lost if you leave the page; it is deleted the moment you send, and never leaves your device before that.

Private galleries. When you are a client, we create a password-protected gallery with the photographs and films from your session. We store the name that titles the gallery, the photographs you mark as favourites, and a technical record of when it was opened and what was downloaded. That record exists so we know the delivery arrived and can spot unauthorised access; we do not store your IP address or any device identifier.

Site analytics. We use a cookie-free analytics tool that counts visits in aggregate and anonymously. You cannot be identified from it, nobody is tracked across sites, and that is why this site does not bother you with a cookie banner.

We do not collect sensitive data, we make no automated decisions about you, and we never sell or pass your data to third parties for commercial purposes.

For the site to work we rely on providers who handle data on our behalf and only on our instructions: nebula.pdstudio@gmail.com

• —GitHub Pages — hosting for the site.
• —Supabase — the gallery database and the login for our admin panel.
• —Cloudflare R2 — storage for photographs and films.
• —Form delivery service — passes the message you write to our inbox.
• —Cookie-free analytics tool — aggregate visit counts.

Some of these providers are US-based and may process data outside the European Union, under the European Commission’s standard contractual clauses.

Contact messages stay in our inbox for as long as the conversation lasts and, if it does not turn into work, for up to a year afterwards.

Client galleries have an expiry date set at delivery — usually a few months — and we warn you before they close, so you have time to download everything. After that the gallery is closed and the files are deleted from our storage. We keep the original work for as long as is reasonable for our professional archive.

The photographs and films we make are our own work, and it is each job’s contract that sets out what either side may do with them.

We only publish images you appear in — in the portfolio, on the site or on social media — if you have agreed to it. If you change your mind, write to us and we will take them down from our channels as quickly as we can.

You can ask us for access to your data, correction of anything wrong, deletion, restriction of processing, a machine-readable copy, or object to a particular use. Just write to us — we answer within one month: nebula.pdstudio@gmail.com

If you believe we have not handled it as we should, you have the right to complain to the Comissão Nacional de Proteção de Dados (CNPD), the supervisory authority in Portugal.