Privacy policy
Last updated 2 October 2026. Plain-English, short, and specific to how this site actually works.
Who is responsible
Harinda Fernando, trading as Harinda Fernando Photo Editing, based in Sri Lanka. Contact: [email protected].
What I collect and why
- Forms (free sample and contact): your name, email, the links you share and your message. Used only to reply and to do the work you ask for. Lawful basis: taking steps at your request before a contract.
- Your photos: only accessed through the links you send, used only to edit them for you. Never used in my portfolio, social media or for training any AI without your written permission.
- WhatsApp and email: messages you send are kept to manage your order and invoices.
- Analytics: Google Analytics 4, Microsoft Clarity and Ahrefs Web Analytics measure which pages are visited and how they're used, so I can see which pages help photographers. They run on every visit. IP addresses are anonymised and no advertising signals are sent. Lawful basis: legitimate interests in understanding and improving the site.
How long I keep things
- Client photos: deleted 30 days after the final gallery is approved, unless you ask me to keep them for repeat work.
- Free sample photos: deleted within 30 days if you don't place an order.
- Messages and invoices: kept as long as needed for accounting records.
Who else processes data
Hostinger (website hosting and email), Cloudflare (content delivery and security), Cloudinary (portfolio image delivery), Google Drive (file delivery), Google Analytics, Microsoft Clarity and Ahrefs Web Analytics, WhatsApp, PayPal, Payoneer, Remitly and TapSend (only if you use them to pay). Some of these providers are outside your country; each uses its own safeguards for international transfers.
Cookies
Google Analytics and Microsoft Clarity set cookies to tell visits apart; Ahrefs Web Analytics uses no cookies. They are not used for advertising. To opt out, block cookies for this site in your browser settings, or install the Google Analytics opt-out add-on.
Your rights
You can ask for a copy of your data, a correction, or deletion, and you can object to analytics at any time. If you're in the UK or EU you can also complain to your data protection authority. Email [email protected] and I'll respond within 30 days.