Privacy notice

Last updated 8 October 2026

In short: this website uses no cookies, no analytics and no tracking, and loads nothing from other websites. Personal data is only processed to show you the site, to answer your emails and, if you book a photo shoot, to deliver your photos.

Who is responsible

The controller of your personal data is:

What is processed, and why

When you visit this website

The website is delivered through Cloudflare. To show you the pages and protect the site against abuse, Cloudflare processes technical data such as your IP address, browser type, the page you request and the time of your visit.

• Legal basis: legitimate interest in running a secure, working website (art. 6(1)(f) GDPR).
• Retention: only as long as needed for delivery and security. Tool Shed does not use this data to identify or profile visitors.

When you send an email

If you write to hello@toolshed.be, your name, email address, the content of your message and anything else you choose to share are processed to answer you and, where relevant, to prepare or carry out an assignment.

• Legal basis: taking steps at your request before entering into a contract (art. 6(1)(b) GDPR), or the legitimate interest in answering your message (art. 6(1)(f) GDPR).
• Retention: if your message does not lead to an assignment, it is deleted at the latest two years after the last contact. If it does, the correspondence is kept for as long as the assignment lasts and for as long as legal obligations, such as accounting and tax rules, require.

You are not obliged to provide any personal data. Without an email address, however, it is not possible to reply to you.

When you book a photo shoot

The photography of The Lens of Tom is a service of Tool Shed BV. For a shoot, your name and contact details, the date and location of the shoot, the photos themselves (of you, your family and your animals) and the invoice details are processed to plan the shoot, edit the photos, deliver them in an online gallery and invoice you.

• Legal basis: performing the agreement with you (art. 6(1)(b) GDPR), and complying with accounting and tax law for invoices (art. 6(1)(c) GDPR).
• Galleries: your online gallery has no expiry date. It stays available until you ask for it to be removed.
• Original files: the original files of a shoot, including photos that were not selected, are kept as an archive so photos can be delivered again or reprinted later, based on the legitimate interest in offering that service (art. 6(1)(f) GDPR). You can ask for them to be deleted at any time, and they will then be deleted.
• Invoices are kept for as long as accounting and tax law require.

Photos used in the portfolio

Photos from a shoot are only shown publicly, for example in the portfolio, on this website or on social media, with the consent of every recognisable person in them (art. 6(1)(a) GDPR and the right to one’s own image). You can withdraw that consent at any time. The photos are then no longer used and are removed from the portfolio and this website.

Children

When children take part in a shoot, a parent or guardian books the shoot and gives consent on their behalf, including for any use in the portfolio.

Who receives your data

Your data is not sold or shared for marketing. These service providers process it on behalf of Tool Shed:

• Cloudflare, Inc. (United States) delivers the website and protects it.
• Fastmail Pty Ltd (Australia) handles email.
• Pic-Time Ltd. hosts the online photo galleries and the portfolio.

Transfers outside the European Economic Area

These providers may process data outside the European Economic Area. Cloudflare is certified under the EU-US Data Privacy Framework and also uses the European Commission’s Standard Contractual Clauses. Fastmail stores email in the European Union and the United States, and covers transfers with the European Commission’s Standard Contractual Clauses. Pic-Time stores galleries on servers in the European Union, the United States and Australia, is certified under the EU-US Data Privacy Framework, and uses the European Commission’s Standard Contractual Clauses for other transfers.

Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. To use any of these rights, email hello@toolshed.be. You will get an answer within one month.

If you believe your data is not being handled correctly, you can also file a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels, www.gegevensbeschermingsautoriteit.be.

Cookies

This website does not place cookies and does not store anything on your device. The fonts are hosted on this website itself, so no data is sent to font services.

Changes

This notice is updated when the way personal data is handled changes. The date at the top shows the latest version.