Privacy Policy

Last updated: 3/09/2026

This Privacy Policy explains what personal information I collect through this website, why I use it, and how I handle it.

If you have questions about how I use your data, contact me at info@gianpaololapaglia.com.

1. Who is responsible for your data

Gianpaolo La Paglia
Italy | P.IVA 01344410863
Email: info@gianpaololapaglia.com

I am the data controller for the personal information collected through this website and in connection with my photography services, workshops and coaching activities.

2. What information I collect and why

The information I collect depends on how you interact with my website and services.

When you contact me

If you use the contact form, I collect the information you provide, including your first name, last name, email address, subject and message.

I use this information to respond to your enquiry and, where relevant, discuss workshops, coaching sessions, assignments or other services you have asked about.

Your contact form submission is handled through Squarespace and is forwarded to my email accounts for the purpose of managing your enquiry.

When you subscribe to my newsletter

If you choose to subscribe to my newsletter, I collect your email address and any other information you voluntarily provide.

I use this information to send you updates about upcoming photography workshops, 1:1 coaching opportunities and occasional photography-related content.

Newsletter subscriptions require your active consent. You can unsubscribe at any time using the unsubscribe link included in every email.

Your subscription information is stored and managed through Squarespace and MailerLite.

When you book a workshop

When you book a photography workshop, I collect the information necessary to process your booking, communicate with you before and during the workshop, provide the service and meet any legal or administrative obligations.

Depending on the workshop, this may include your name, email address, telephone number and other information you choose to provide.

I may use email and WhatsApp to communicate practical information related to the workshop.

When you book 1:1 coaching

When you book a coaching or portfolio review session, I collect the information necessary to arrange and provide the session.

You may also send me photographs, portfolios, links or other material for review. I use these materials only to prepare for and conduct the coaching session.

I do not publish, sell or otherwise reuse photographs submitted for review without your separate permission.

When you make a payment

Payments made through this website are processed by external payment providers. Depending on the payment method you choose, payment may be handled through Squarespace Payments or PayPal.

Under no circumstance I receive or store your payment card details; these are processed securely by the relevant payment provider.

When an invoice is required, I collect and retain the information necessary to issue the invoice and comply with Italian tax and accounting requirements.

When I need to issue an invoice

When you purchase a service or product, I may need to collect additional information required for invoicing and accounting purposes. This information is used to comply with applicable tax and accounting obligations and is retained for the period required by law.

When you visit the website

This website uses necessary cookies to allow the site to function properly.

I also use optional Squarespace analytics to understand how visitors use the site and improve its content and performance.

I may also use Meta Pixel and similar non-essential tracking technologies to understand website activity, measure the effectiveness of advertising campaigns and help me reach people who may be interested in my photography workshops and services.

These technologies are only used where the required consent has been given through the cookie banner.

3. Legal bases for using your information

Depending on the situation, I process personal information on one or more of the following legal bases:

Contract or pre-contractual steps: for processing bookings, purchases, coaching sessions and enquiries relating to my services.

Legal obligations: where I am required to keep information for accounting, tax or other legal purposes.

Consent: for example, when you subscribe to my newsletter, accept optional analytics or non-essential tracking technologies such as Meta Pixel, or give permission for your photographs or likeness to be used for promotional purposes.

Legitimate interests: for example, when responding to enquiries, managing business records and protecting the website and its services, where permitted by applicable law.

Where processing is based on consent, you can withdraw that consent at any time. Withdrawal does not affect processing that was already carried out lawfully before the withdrawal.

4. Who processes your information

I use a limited number of third-party services to operate my website and business. Depending on how you interact with me, these may include:

  • Squarespace: website hosting, forms, website analytics and online checkout.

  • MailerLite: newsletter subscription management and email delivery.

  • Gmail: receiving and managing messages sent through my contact forms.

  • PrivateMail: email services used to receive and manage communications.

  • Squarespace Payments: processes payments made through the website. Squarespace Payments uses Stripe as its underlying payment infrastructure, so card details (Visa, Mastercard, Amex, Discover) are ultimately processed by Stripe. Under no circumstances are your full card details received by me.

    PayPal: an alternative payment method available at checkout for those who choose to pay this way.

  • WhatsApp / Meta: practical communications with workshop participants where WhatsApp is used.

  • Meta: advertising measurement and audience-related tools, including Meta Pixel.

Some of these providers may process personal information on my behalf as service providers or processors. Depending on the service and the type of processing involved, some may also process information under their own responsibility. Their own privacy policies explain how they handle information within their systems.

5. International transfers

Some of the services I use may process or store personal information outside the European Economic Area.

Where this happens, I rely on the safeguards required by applicable data protection law, such as an adequacy decision or appropriate contractual safeguards where applicable. For example, some of the services I use (such as Google, MailerLite and Meta) may process information in the United States, under frameworks recognised by the European Commission or through standard contractual clauses.

6. How long I keep your information

I keep personal information only for as long as it is reasonably necessary for the purpose for which it was collected, unless a longer period is required by law.

Examples include:

  • Newsletter information: until you unsubscribe or request deletion, subject to any information I may be required to retain for other lawful purposes.

  • Contact enquiries: kept for no longer than 12 months from the date of your enquiry, unless a booking or ongoing relationship follows, in which case the information is retained as described above for workshop and coaching records.

  • Workshop and coaching information: for as long as necessary to provide the service and manage related records.

  • Photographs submitted for workshop preparation, coaching, or review are kept for up to 15 days after the event ends, usually the time it takes me to clean up my folders afterwards.

  • Invoices and accounting records: for 10 years as required by Italian tax and accounting laws.

7. Photographs and promotional use

Photographs or video of workshop participants may sometimes be taken during workshops.

I will only use identifiable photographs or videos of participants for promotional purposes, such as on my website, social media or other marketing materials, where I have obtained the appropriate separate permission.

Permission for promotional use is separate from booking or attending a workshop.

If you also agree to have your name or social media handle associated with an image, this will be covered by that separate permission.

8. Your rights

You can ask me to:

  • tell you what personal information I hold about you;

  • correct or delete your information;

  • restrict or object to certain uses of your information;

  • withdraw any consent you have given.

You can also unsubscribe from my newsletter at any time using the link in any email.

To exercise your rights or ask a question about your personal information, contact me at info@gianpaololapaglia.com. I will handle your request as soon as possible, free of charge and within the time frame required by law.

If you are in the European Union and believe I have not handled your personal information correctly, you also have the right to lodge a complaint with your national data protection authority. In Italy, this is the Garante per la protezione dei dati personali. I'd appreciate the chance to resolve any concern directly first.

9. Security

I take appropriate measures to protect your personal information from unauthorised access, loss, misuse or disclosure.

I also limit the information I collect and retain to what is necessary for the purposes described in this Privacy Policy.

10. Cookies

This website uses necessary cookies and, with your consent, optional analytics and non-essential tracking technologies. You can read my full cookie policy here.

11. Changes to this Privacy Policy

I may update this Privacy Policy from time to time to reflect changes to my services, the way I use personal information or applicable legal requirements.

The latest version will always be published on this page, with the updated date shown at the top.

12. Contact

If you have any questions about this Privacy Policy or how I handle your personal information, please contact me: info@gianpaololapaglia.com