Privacy Policy

Last updated: 29 September 2026

Identity and Role of the Data Controller

papararzo acts as the data controller for the personal data processed through this website. We are responsible for determining the purposes and means of processing your personal data in connection with our entertainment photography and event media resource services, including public event coverage, camera positioning, visual planning, lighting, and responsible content workflows. Our registered address is 3rd Floor, 207 Regent Street, W1B 3HH, London, United Kingdom.

Scope of This Notice

This privacy policy applies to all visitors and users of our website who interact with our services from the United Kingdom. It covers data collected when you browse the site, submit enquiries via the contact form, or engage with our event media resources. It does not cover third-party websites linked from our content.

Categories of Personal Data and Sources

We collect personal data directly from you when you use the contact form, including your name, email address, and any message details you provide. We may also collect technical data such as IP address, browser type, and device information through automated means when you visit the site. No data is obtained from third-party sources without your knowledge.

Purposes of Processing and Legal Bases

We process your data to respond to enquiries submitted through the contact form, which is based on our legitimate interest in providing customer support. Technical data is processed to maintain website functionality and security under the same legitimate interest basis. Where consent is obtained for marketing communications, processing relies on your consent. Each purpose is explained clearly at the point of collection.

Requirement to Provide Data

Providing your name and email via the contact form is voluntary. However, failure to supply these details means we cannot respond to your enquiry. Technical data is collected automatically and is necessary for site operation; refusing it would require disabling cookies or similar technologies through your browser settings.

Cookies and Similar Technologies

Our site uses cookies and similar technologies to enhance functionality and analyse usage. A separate cookie policy explains the types used and how to manage preferences. Please refer to the cookie banner and policy for full details on consent mechanisms under PECR.

Processors, Recipients and Disclosures

We share data with service providers acting as processors, such as hosting providers and email delivery services, under strict contractual terms. Data may be disclosed if required by law, such as in response to valid legal requests from UK authorities. No sale of personal data occurs.

International Transfers

Where data is transferred outside the UK, we ensure appropriate safeguards such as standard contractual clauses approved by the Information Commissioner's Office are in place to protect your rights.

Retention Periods

Enquiry data is retained for up to two years after the last interaction to handle follow-ups and resolve disputes. Technical logs are kept for a maximum of twelve months unless longer retention is required for legal compliance. Criteria for retention include legal obligations and business necessity.

Security and Data Minimisation

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, or loss. Data collection is limited to what is necessary for the stated purposes, with regular reviews to minimise holdings.

Data Subject Rights

You have rights to access, rectify, erase, restrict processing, data portability, and object to processing. To exercise these rights, contact us at [email protected] with details of your request. We will respond within one month, subject to verification of identity.

Withdrawing Consent and Objecting to Marketing

Where processing relies on consent, you may withdraw it at any time by contacting [email protected]. You can also object to direct marketing at any point, and we will cease such processing promptly upon request.

Right to Complain

If you are dissatisfied with our handling of your data, you have the right to lodge a complaint with the Information Commissioner's Office, the UK supervisory authority, via their website or by post.

Children and Age Restrictions

Our services are not directed at children under 16. We do not knowingly collect personal data from individuals below this age. If we become aware of such collection, we will delete the data promptly.

Automated Decision-Making and Profiling

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals. Any analytics are used solely for improving site performance without individual targeting.

Policy Changes

We may update this policy to reflect changes in law or practice. The effective date will be noted at the top. Continued use of the site after updates constitutes acceptance of the revised terms.