Privacy Notice
Photography is personal. This notice explains how Mirrorflower Photography handles your contact details and photographs, from your first enquiry to the delivery of your gallery.
Your information and photographs
When you enquire or book, we collect the information needed to arrange your session. This may include your name, contact details, wedding date, locations, schedule, photography preferences and payment records.
During a session, we take photographs of you and, where relevant, your guests. Group photograph lists and other details may be provided by the person organising the booking.
We use this information to answer enquiries, plan and provide photography services, edit and deliver your photographs, and manage payments. We also keep information needed for accounting, security and resolving any service concerns.
For clients, this processing is generally necessary to arrange and fulfil the booking. For guests, we rely on our legitimate interest in documenting the commissioned event, while considering their privacy, reasonable expectations and any objections. Accounting records are kept to meet legal obligations. Promotional use of identifiable client and guest photographs is handled through separate consent.
Please only share personal information that is relevant to your booking.
Editing and private delivery
Your photographs are selected and edited personally by the photographer. Photo editing is not outsourced to external retouchers.
We use Pic-Time for our website and client galleries, and may use WeTransfer to send files. These services process the photographs and information needed to host galleries, provide downloads and operate their platforms.
Relevant information may also be handled by payment providers, professional advisers or authorities where necessary for payments, business administration or legal requirements.
We do not sell your personal information or photographs. We do not give venues or other businesses permission to use your photographs for promotion without appropriate authorisation.
Please share private gallery links only with people you intend to give access to.
If you are a wedding guest
If you would prefer not to be photographed, please tell the photographer or the couple as early as possible. We will accommodate your request within practical limits. You can also contact us directly with questions or concerns about photographs showing you.
How long we keep your information
Original photography files are normally kept for 100 days after final delivery and may then be deleted. Files relevant to an unresolved complaint or a legal obligation may need to be kept longer.
Private client galleries are normally available for 100 days after final delivery, unless another period is agreed. WeTransfer links may expire sooner; your delivery message will state the download deadline. Please download your photographs and keep your own backups.
Photographs approved for portfolio use may be kept while permission remains valid and they are still needed for display. Permission records may be retained where necessary to document that use.
Enquiries and booking correspondence are kept for as long as reasonably needed to manage your enquiry, booking or related claims. Accounting records are normally kept for five years from the end of the relevant financial year, as required by Danish law.
Where information is processed
Some of our service providers process information outside the European Economic Area, including in the United States.
Where required, these transfers must be covered by recognised data protection safeguards, such as an adequacy decision or Standard Contractual Clauses. You can contact us for details of the arrangements that apply to your information and how to obtain a copy.
Your choices and rights
Depending on the circumstances, you can ask to access, correct or delete your personal information, restrict its use, receive a portable copy, or object to processing based on legitimate interests.
Some information may need to be retained for accounting or legal claims. Deleting personal information does not always mean every related business record can also be deleted.
Please email us to make a request. We may ask for information needed to confirm your identity. We normally respond within one month, subject to extensions allowed by law.
You can also raise a complaint with the Danish Data Protection Agency at datatilsynet.dk.
Last updated: 2 October 2026.
We may update this notice when our services or information handling change. The latest version will appear here with its update date. We will notify affected people of significant changes where required.