Privacy Policy
STESSIO — Anastasiia Danylenko, photographer, videographer and content maker
Website: https://stessio.tilda.ws/
Last updated: 21 October 2026
1. Introduction
This Privacy Policy explains how personal data is collected, used, stored and protected when you visit https://stessio.tilda.ws/ (the "Website") or contact me about photo, video or content services. I am committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
2. Who I am (the data controller)
For the purposes of data protection law, the controller of your personal data is:
• Name: Anastasiia Danylenko, trading as STESSIO
• Based in: London, United Kingdom
• Email: adanilenko045@gmail.com
• WhatsApp: +44 7770 192804
• Telegram: https://t.me/Nastasya_agent
If you have any questions about this policy or about your data, please use any of the contact details above.
3. What personal data I collect
Data you give me directly
• Contact details you enter into the "Leave your contact details" forms on the Website (for example your name, phone number, WhatsApp or Telegram handle, or email address).
• Information you send me by WhatsApp, Telegram, email or Instagram when you enquire about or book a service (for example your name, preferred date, location, style and ideas for the shoot).
• Information needed to deliver the service, such as payment confirmations, and the photographs, video footage and other content created during a shoot, which may show you or other people.
• Feedback and reviews you choose to send me.
Data collected automatically
• Technical data such as your IP address, browser type and version, device type, operating system, pages visited, time spent on pages and referring website.
• Cookie and similar technology data (see section 8).
I do not knowingly collect special category data (such as health, ethnic origin or religious beliefs). If such information is visible in photographs or shared during a shoot, I will only use it for delivering the service you requested.
4. How and why I use your data (lawful bases)
Purpose | Data used | Lawful basis (UK GDPR Art. 6) |
Responding to enquiries and contact form submissions | Contact details, message content | Legitimate interests (replying to you) or steps taken at your request before entering a contract |
Booking, planning and delivering a shoot, editing and delivering the final files | Contact details, booking details, images and video | Performance of a contract |
Taking payment and keeping financial records | Name, payment details and confirmations | Contract; legal obligation (accounting and tax records) |
Showing work in my portfolio, website and social media | Photographs and video featuring you | Your consent (given separately; you may withdraw it at any time) |
Sending promotional offers or updates | Contact details | Consent or, where allowed, legitimate interests, with the right to opt out at any time |
Running, securing and improving the Website | Technical and usage data | Legitimate interests; consent for non-essential cookies |
Dealing with complaints, disputes or legal claims | Relevant correspondence and records | Legitimate interests; legal obligation |
5. Photographs, video and portfolio use
Photographs and video footage in which you can be identified are personal data. I will not publish them on the Website, on social media or in other promotional material without your permission. You can ask me to stop using, or to remove, any image of you from my portfolio at any time; I will act on your request promptly, although I cannot control copies already shared by third parties. Copyright in the images remains with me unless we have agreed otherwise in writing, and this policy does not change that.
6. Who I share your data with
I do not sell your personal data. I only share it where needed with:
• Website platform: Tilda Publishing, which hosts the Website and processes form submissions and technical data on my behalf.
• Communication services: WhatsApp, Telegram, Instagram and email providers, when you choose to contact me through them.
• File delivery and storage: services such as Google Drive, used to store and deliver photos and videos to you.
• Studios, venues and assistants: only where needed to carry out your booking, and only with the information required.
• Payment and banking providers used to take payment.
• Professional advisers, accountants and authorities where required by law.
These providers act as processors on my instructions or as independent controllers under their own privacy policies. Links from the Website to third-party sites (such as Behance, Instagram, Telegram, WhatsApp and Google Drive) are outside my control, so please read their privacy notices.
7. International transfers
Some of the providers named above may process data outside the UK. Where that happens, I rely on appropriate safeguards required by UK GDPR, such as an adequacy decision, the UK International Data Transfer Agreement or Addendum, or standard contractual clauses, to make sure your data stays protected.
8. Cookies and similar technologies
The Website uses cookies and similar technologies that are needed to make it work and to understand how it is used. Under PECR, I will ask for your consent before setting any cookies that are not strictly necessary.
• Strictly necessary cookies: allow the Website to load and function properly. These do not require consent.
• Analytics and performance cookies: help me understand how visitors use the Website. These are used only with your consent.
• Third-party cookies: may be set by embedded content such as video players or social media links.
You can accept or refuse non-essential cookies via the cookie notice on the Website and change your choice at any time through your browser settings, where you can also delete existing cookies. Blocking some cookies may affect how the Website works.
9. How long I keep your data
Data | Retention |
Enquiries and contact form details (no booking made) | Up to 12 months after the last contact |
Client booking records and correspondence | Up to 6 years after the end of the service (limitation period for contract claims) |
Financial and payment records | At least 6 years, as required by UK tax law |
Final edited photographs and video | Up to 3 years in my archive, unless agreed otherwise |
Portfolio images | Until you withdraw consent or ask me to remove them |
Marketing contact details | Until you unsubscribe or withdraw consent |
When data is no longer needed, I delete or anonymise it securely.
10. Keeping your data secure
I take reasonable technical and organisational measures to protect your data from loss, misuse, unauthorised access or disclosure. These include password-protected devices and accounts, restricting access to files, and using reputable storage providers. No method of transmission over the internet is completely secure, so I cannot guarantee absolute security.
11. Your rights under UK GDPR
You have the right to:
• Be informed about how your data is used (this policy).
• Access a copy of the personal data I hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data in certain circumstances (the "right to be forgotten").
• Restrict processing in certain circumstances.
• Data portability: receive your data in a structured, commonly used format, or have it transferred to another controller where applicable.
• Object to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent at any time where I rely on consent, without affecting the lawfulness of earlier processing.
• Not be subject to solely automated decisions that have legal or similarly significant effects. I do not carry out this type of decision-making.
To exercise any of these rights, contact me using the details in section 2. I will normally reply within one month. I may need to verify your identity first. There is usually no charge, unless a request is clearly unfounded or excessive.
12. Complaints
If you are unhappy with how I have handled your data, please contact me first so I can try to put things right. You also have the right to complain to the UK supervisory authority:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Telephone: 0303 123 1113
13. Children
The Website and my services are not aimed at children under 13, and I do not knowingly collect their data through the Website. Where a shoot involves a child, bookings must be made by a parent or legal guardian, who is responsible for giving consent on the child's behalf.
14. Changes to this policy
I may update this Privacy Policy from time to time, for example to reflect changes in the law or in how the Website works. The latest version will always be available on the Website, with the "Last updated" date at the top. Where changes are significant, I will make this clear on the Website.
15. Contact
For any questions about this Privacy Policy or your personal data:
• Email: adanilenko045@gmail.com
• WhatsApp: +44 7770 192804
• Telegram: https://t.me/Nastasya_agent
© 2026 Anastasiia Danylenko. All rights reserved.
