Privacy Policy | Pictual

1. Who we are

Pictual ("we", "us", "our") is an online platform for photographers to deliver client photo galleries. Pictual is operated from the Netherlands.

Data controller contact: info@pictual.nl

2. What data we collect and why

Data	Why we collect it	Legal basis (GDPR)
Name and email address	To create and manage your account	Performance of a contract (Art. 6(1)(b))
Company name	Optional — for personalising your profile	Legitimate interest (Art. 6(1)(f))
Photos and media you upload	To build and serve your client galleries	Performance of a contract (Art. 6(1)(b))
Password (hashed)	To authenticate you securely	Performance of a contract (Art. 6(1)(b))
Gallery access logs	Security and troubleshooting	Legitimate interest (Art. 6(1)(f))

We do not store your card or bank details ourselves — payments for paid subscriptions are processed by our payment provider Mollie (see section 5). We do not use tracking cookies for advertising, and we do not sell data to third parties.

3. How we store your data

Your account data (name, email, settings) is stored in a database hosted in the Netherlands. Your photos and media files are stored with IDrive e2, in a data center within the EU.

All data in transit is protected by HTTPS/TLS encryption.

4. How long we keep your data

We keep your account data and photos for as long as your account is active. If you delete a project, all associated photos are permanently removed from our storage. If you delete your account, all personal data is removed within 30 days.

We may retain anonymised usage data (e.g. aggregate statistics) indefinitely.

5. Who we share data with

We do not sell or rent your personal data. We share data only with service providers that help us operate Pictual:

IDrive e2 — media storage (EU data center)
Etheron Hosting — server and database hosting
Mollie — processing payments for paid subscriptions

All processors are bound by data processing agreements and are required to handle your data securely and in accordance with GDPR.

6. Client data (your clients' photos)

As a Pictual user, you are the data controller for any personal data belonging to your clients (e.g. photos of individuals). You are responsible for having a legal basis to share and store those photos. Pictual acts as a data processor on your behalf for this data.

We do not access, use, or analyse your client photos for any purpose other than storing and serving them to the gallery link you create.

7. Cookies

Pictual uses only essential cookies — specifically a session cookie to keep you logged in to your account. We do not use advertising cookies, analytics tracking cookies, or third-party marketing cookies.

8. Your rights under GDPR

If you are located in the European Economic Area, you have the following rights:

Right of access — request a copy of your personal data
Right to rectification — correct inaccurate data
Right to erasure — request deletion of your data
Right to portability — receive your data in a machine-readable format
Right to object — object to processing based on legitimate interests
Right to restrict processing — request temporary suspension of processing

To exercise any of these rights, email us at info@pictual.nl. We will respond within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority: autoriteitpersoonsgegevens.nl

9. Children

Pictual is not intended for use by persons under the age of 16. We do not knowingly collect data from children. If you believe a child under 16 has created an account, please contact us and we will delete the account immediately.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email. The date at the top of this page always reflects the most recent version.

11. Contact

For any privacy-related questions or requests, contact us at: info@pictual.nl