# Privacy Policy URL: https://jvn.photo/privacy-policy/ Last updated: 2026-10-23 ## Privacy Policy *Last updated: 23 October 2026* How JVN Photography ehf. collects, uses and protects your personal data.This policy explains what personal data JVN Photography ehf. collects through jvn.photo, through our photo workshops and our shop, why we collect it, who we share it with, how long we keep it and what your rights are. If anything is unclear, email us at [info@jvn.photo](mailto:info@jvn.photo). ## 1. Who We Are The controller of your personal data is **JVN Photography ehf.**, Andrésbrunnur 10, 113 Reykjavík, Iceland, run by photographer Jeroen Van Nieuwenhove. Contact for anything to do with your data: [info@jvn.photo](mailto:info@jvn.photo). We’re based in Iceland, which is part of the European Economic Area. Your data is protected by the General Data Protection Regulation (GDPR) as it applies in Iceland through Act no. 90/2018 on Data Protection and the Processing of Personal Data. ## 2. What We Collect, and Why ### When You Sign Up for a Photo Workshop We collect your name, email address and phone number, the number of places you want, any notes you add, the names and email addresses of anyone travelling with you, and your answers to questions about the trip (for example room and bed preferences, and gender where rooms are shared). We need this to hold your place, send you your booking details and payment links, and organise the trip. Legal basis: to take steps at your request before entering into a contract, and to perform that contract (GDPR Article 6(1)(b)). ### Before the Trip We ask each participant for the details we need to run a safe trip: the full name as it appears on your passport or ID, your nationality, emergency contacts, dietary requirements and allergies, any medical conditions we should know about, and arrival and departure details. We ask for your nationality on every trip, so we can organise travel and entry arrangements for your group. Legal basis: performance of the contract (Article 6(1)(b)). Dietary, allergy and medical information can be health data, a special category under the GDPR. We only collect it with your explicit consent (Article 9(2)(a)), and to protect your vital interests in an emergency (Article 9(2)(c)). It is stored encrypted, and only the people who need it to look after you see it (see section 4). ### Waivers Participants sign a waiver online. We keep the signed document with your name, your signature, the date and time, and the IP address it was signed from, as a record that you signed it. Legal basis: performance of the contract and our legitimate interest in being able to show the waiver was signed (Article 6(1)(b) and (f)). ### Paying for a Workshop Our workshops are sold as travel packages through licensed travel agencies, **Iceland Travel** or **Nonni Travel**, depending on the trip. You pay the agency directly through the payment link we send you, and the agency processes your payment under its own privacy policy. We never see or store your card details. We record whether your deposit and balance have been paid. ### After You Book: Follow-Up Emails When your booking is confirmed, we add some details to your contact in Brevo, our email service, if you already have one there. We never create a contact for this. The details are the trips you’ve booked and, for your latest trip, its name, end date, whether it’s a workshop or an expedition, and its co-leader. If you cancel a booking, we update or remove them. We use them for one email about upcoming workshops and expeditions, about 60 days after your trip ends. That email only goes to newsletter subscribers, and you can opt out at any time with the email preferences link in every email. Legal basis: your consent to the newsletter (Article 6(1)(a)). ### Buying from Our Shop When you order prints, books or other products we collect your name, email address, phone number, billing and delivery address, and what you ordered. We need this to process the order, deliver it and keep the accounting records the law requires. Legal basis: performance of the contract (Article 6(1)(b)) and our legal obligations (Article 6(1)(c)). Card and PayPal payments are handled by PayPal or myPOS; we never see or store your card number. Your name, email address and what you ordered are also copied to Brevo, our email service, so we can send you emails about your order, such as a review request or tips for getting the most out of what you bought. Legal basis: our legitimate interest in following up on your purchase (Article 6(1)(f)). Every email has an unsubscribe link. If you buy one of our e-books and you’re subscribed to the newsletter, we may send you one email 14 days later about the other e-book. You can opt out with the unsubscribe link in that email. ### If You Don’t Finish an Order When you type your email address at checkout, it’s sent to Brevo, our email service, together with what’s in your cart, as soon as you leave that field, even if you don’t complete the order. If you’re logged in to your account, changes to your cart and the products you look at are sent too. If you don’t complete the order, Brevo may send you up to three reminder emails over about a week, starting one hour later, showing what’s in your cart. The first includes a personal 10% discount code, valid for 7 days and usable only with your email address. Our website makes the code, and the code and its expiry date are stored on your contact in Brevo. Placing your order stops the reminders. This doesn’t sign you up for our newsletter. Legal basis: our legitimate interest in helping you finish an order you started (Article 6(1)(f)). You can object at any time with the unsubscribe link in the reminder or by emailing [info@jvn.photo](mailto:info@jvn.photo). ### Online Courses Our online courses, such as the Drone Photography Masterclass, are hosted on Teachable. When you buy or take a course there, Teachable processes your data under its own privacy policy, and we receive your name, email address and what you bought. ### Newsletter, Interest Lists and Free Downloads If you join our newsletter, an interest list for a workshop, or sign up for a free download or webinar, we collect your email address and, if you give them, your name and phone number, along with what you signed up for and when. We use this to send you what you asked for and, if you agreed, our newsletter and workshop announcements. Legal basis: your consent (Article 6(1)(a)). Every email has an unsubscribe link, and unsubscribing takes effect straight away. We keep a record that you unsubscribed, so you aren’t added back by mistake. Our email services record whether each email is opened and which links are clicked, so we can see which emails people find useful. On the email preferences page you can pause our emails for one or three months. We note the date your pause ends on your contact in Brevo, and our newsletters and follow-up emails skip you until then. After that date they start again by themselves, unless you unsubscribe. We don’t use your email address for advertising, and we don’t share it with advertising platforms. ### When You Contact Us If you email us or use a contact form, we use what you send us to reply. Legal basis: our legitimate interest in answering you, or steps before a contract if you’re asking about a booking. ### When You Visit the Website Our web server and security service record technical data such as your IP address, browser and the pages you request, to deliver the site and protect it from abuse. We also use Google Analytics cookies to count visits (see section 6). ## 3. Who We Share Your Data With We don’t sell your personal data. We share it with these people and services, and each gets only what it needs: - **The travel agency for your trip** (Iceland Travel or Nonni Travel): your booking details, payment status and the participant details needed for the trip, including dietary and medical information and emergency contacts, and a copy of your signed waiver. The agency is the organiser of the travel package and is responsible for your data under its own privacy policy. - **The photographers leading your trip**, including co-leaders: the participant details they need to guide the trip and look after you. - **Hotels, restaurants and transport on your trip:** only what they need, such as names, rooming and dietary requirements. - **Service providers** who process data on our behalf, under contracts that require them to protect it: - WPMU DEV (website hosting) and Cloudflare (content delivery and security) - Google Workspace (our email, and the documents and spreadsheets we use to organise trips) - Brevo (sending the website’s emails, our newsletter, and the shop’s order follow-up and cart reminder emails, and our follow-up emails after a trip) - Mailchimp (our newsletter, until 3 November 2026) - Google Analytics (website statistics) and Google reCAPTCHA (protecting forms from spam) - Payday (invoicing and accounting) - PayPal and myPOS (shop payments), and DHL (shipping) - Teachable (online courses) - **Authorities**, when the law requires it, and our accountant and auditors for the accounting records. ## 4. How We Protect Your Data The site runs over an encrypted connection. Health information, dietary information, emergency contacts and nationality are stored encrypted. Access to booking and participant data is limited to the people who need it, and each co-leader only sees the trips they lead. Signed waivers are stored privately, not in a public part of the website. If a breach ever puts your data at risk, we’ll tell you and the Data Protection Authority, as the law requires. ## 5. How Long We Keep Your Data - **Workshop bookings, participant details and waivers:** until two years after the end of the trip, so we can deal with any questions or claims about it. After that they’re deleted or anonymised. Medical, dietary and emergency details are only shared for the trip itself. - **Payment and accounting records** (invoices, shop orders): seven years, as Icelandic bookkeeping law requires. - **Newsletter and interest lists:** until you unsubscribe or ask us to delete your data. We keep a minimal record of an unsubscribe so we don’t email you again. - **Unfinished checkouts:** six months after the cart was left, then deleted, unless you’ve since placed an order or signed up for the newsletter. - **Website activity logs:** 90 days. Form submissions rejected as spam: 30 days. - **Emails you send us:** as long as they’re needed for the matter they’re about. ## 6. Cookies Cookies are small files your browser stores for a website. We use: - **Necessary cookies** that make the site and shop work: your shopping cart, your currency, preventing double form submissions, and remembering that you’ve closed a popup and what you chose in the cookie banner. - **Analytics** (Google Analytics): counts visits and shows us which pages are useful. It sets its cookies (_ga and _ga_*), so a return visit is recognised. Google Analytics doesn’t tell us who you are. - **Order attribution cookies** (WooCommerce, sbjs_*): these record how you arrived at the shop, such as from a search engine or a newsletter, so we know which channels work. - **Our own link cookie** (jvnl_ft, 30 days): this records the first page you landed on, so we know which articles lead to purchases through our recommended gear links. It holds no personal details. - **Checkout cookies** (Brevo’s shop plugin, only if you press Accept): tracking_email holds the email address you type at checkout until you close your browser, and email_id holds your email address for one day after you log in to your account or your cart is linked to it. They link your cart to your email address for the reminder described in section 2. Without them, the email address you type at checkout is still sent for that reminder, but later changes to your cart aren’t linked to it. - **Discount code cookie** (our own, jvnw_code, 7 days): set when you open a jvn.photo link that carries a discount code. It holds only the code, and applies it once your cart holds something it fits. - **Third-party content:** embedded YouTube videos and maps may set their own cookies when they load. Google Analytics runs for every visitor. Order attribution, our link cookie and the two checkout cookies are only set if you press Accept in the cookie banner, and embedded YouTube videos only load if you accept or press play on one. You can change your choice at any time with the Cookie settings link. You can block or delete cookies in your browser settings. Blocking necessary cookies may stop the shop or forms from working. ## 7. Affiliate Links Some links to camera gear on our site are affiliate links, for example to Amazon. If you buy through one, we may earn a small commission at no extra cost to you. We count clicks on these links per day and country only; we don’t store your IP address or identify you. Once you’re on the retailer’s site, its own privacy policy and cookies apply. ## 8. International Transfers Some of our service providers are based outside the EEA, mainly in the United States (Google, Cloudflare, Mailchimp, PayPal and Teachable). Where your data goes outside the EEA, it’s protected by the EU-US Data Privacy Framework where the provider is certified under it, or by the European Commission’s standard contractual clauses. ## 9. Your Rights You have the right to: - get a copy of the personal data we hold about you - have it corrected if it’s wrong - have it deleted, unless we have to keep it by law - restrict how we use it, or object to our use of it, including for marketing - receive it in a portable format - withdraw your consent at any time, without affecting what we did before you withdrew it To use any of these rights, email [info@jvn.photo](mailto:info@jvn.photo). We’ll answer within one month. We may ask you to confirm your identity first. If you’re unhappy with how we’ve handled your data, please tell us first. You also have the right to complain to the Icelandic Data Protection Authority, Persónuvernd ([personuvernd.is](https://www.personuvernd.is)), or to the data protection authority where you live. ## 10. Children Our website, shop and newsletter are not aimed at children under 16, and we don’t knowingly collect their data online. A participant under 18 can only join a workshop when booked by a parent or guardian, who provides their details. ## 11. Changes to This Policy We update this policy when what we do with your data changes. The date at the top shows when it last changed. If a change matters to you, for example a new use of your data, we’ll tell you by email before it takes effect. ### Are You Looking for Something Else? - [Terms and Conditions](https://jvn.photo/terms-conditions/) - [Return & Refund Policy](https://jvn.photo/shop/return-refund-policy/) - [Photo Workshop Terms & Conditions](https://jvn.photo/photo-workshops/terms-workshops/) - [Store Frequently Asked Questions](https://jvn.photo/shop/shop-faq/) - [Fine Art Prints Frequently Asked Questions](https://jvn.photo/shop/fine-art-prints/faq/) If you can’t find the information you are looking for, please refer to [the Contact page](https://jvn.photo/contact/) where you can submit your questions.