We Hold Light — and Your Trust — with Care

Last updated: [12.12.2025]

 
1. Introduction
Utāb Studio takes your privacy seriously. This Privacy Policy explains what personal data we collect, why we collect it, how it is processed, and what rights you have as a customer or user of our services and website.

Utāb Studio processes personal data in accordance with applicable data protection legislation, including the EU General Data Protection Regulation (GDPR).

Data Controller:
Utāb Studio
[email protected]
(0047) 96687939
Org. nr.936399037

 
2. Personal Data We Collect
We may collect and process the following types of personal data:

Name
Email address
Phone number
Address (when required for invoicing or delivery)
Information related to bookings and photography assignments
Communication between you and Utāb Studio (emails, messages)
Images and related metadata produced in connection with photography assignments
Payment information (processed via third-party payment providers)
Technical information related to the use of the website (e.g. IP address, cookies)
 
3. Purpose of Processing
Personal data is processed solely for specific and legitimate purposes, including:

Responding to inquiries and managing bookings
Carrying out photography assignments and delivering agreed products and services
Delivering images via an online gallery
Invoicing, payment, and accounting
Customer service and follow-up
Archiving delivered images for a limited period
Marketing and publication of images only where explicit consent has been given
Operation, security, and improvement of the website
 
4. Legal Basis for Processing (GDPR)
The processing of personal data is based on the following legal grounds:

Contract (GDPR Article 6(1)(b))
To fulfill agreements related to photography services and image delivery.
Consent (GDPR Article 6(1)(a))
For the use of images in marketing, publication on the website, and social media.
Legal obligation (GDPR Article 6(1)(c))
To comply with accounting and bookkeeping requirements.
Legitimate interest (GDPR Article 6(1)(f))
For security, documentation, and limited archiving of delivered work.
 
5. Sharing of Data and Data Processors
Utāb Studio only shares personal data when necessary to deliver its services and only with trusted data processors, including:

Pic-Time – used for delivering images via password-protected online galleries
Payment providers (e.g. Vipps / Stripe) – for processing payments
Storage and backup services – for secure file storage
Website provider / hosting services – for operating the website
Utāb Studio has entered into the necessary data processing agreements where required.
Personal data is primarily processed within the EU/EEA. If data is processed outside the EU/EEA, this is done in accordance with GDPR requirements for data transfers.

 
6. Data Retention
Personal data is stored only for as long as necessary for its intended purpose:

Delivered image files: up to 12 months after final delivery
RAW files: not delivered and stored only temporarily or deleted after a short period
Customer communication: up to 12–24 months
Accounting documentation: stored in accordance with applicable legal requirements (typically 5 years)
After the retention period expires, the data is deleted or anonymized.

 
7. Your Rights
You have the right to:

Access the personal data we hold about you
Request correction of inaccurate or incomplete data
Request deletion of personal data where permitted by law
Restrict the processing of your personal data
Withdraw consent at any time
Lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe the processing violates applicable regulations
 
8. Cookies
Utāb Studio uses cookies on its website for technical functionality and analytics.
By using the website, you consent to the use of cookies. You may change or delete cookies at any time through your browser settings.

 
9. Contact
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

Utāb Studio
[email protected]
(0047) 96687939