Last updated: October 25, 2026. This is an English translation of our privacy policy; if the two versions differ, the French version prevails.
Respecting your privacy is essential at Boudoir by Steve, especially in a profession where intimacy and trust are at the heart of every session. This page explains what data we collect, why, how long we keep it and what your rights are.
1. Legal notice and data controller
Steve Hubert, Boudoir by Steve
Avenue de la Croix du Sud 1, 1410 Waterloo, Belgium
Company number (BCE): 0824.867.610
Phone: +32 475 28 02 18
Email: info@boudoirbysteve.com
2. What data do we collect?
- The data you send us through the contact form, by email, by phone or on social media: last name, first name, email address, phone number, city, age, and anything you choose to tell us about your project.
- Data related to your session: contract, invoice, outfit choices and, of course, the photographs taken, which may identify you.
- Browsing data, only if you accept it in the cookie banner: pages viewed, where the visit came from, type of device (see section 9).
3. Why do we use your data, and on what legal basis?
- To answer your request and organize your session (first contact, discovery call, appointment, contract, invoice): performance of the contract, or pre-contractual steps taken at your request.
- To take your photographs and, if you allow it, publish some of them: your explicit consent. By default, your photos remain strictly private. No image is published without your written consent, and you can withdraw that consent at any time.
- To send you information or offers about our services: your consent, which you can withdraw at any time through the unsubscribe link or by email.
- To measure the site’s audience and show targeted ads (Google Analytics, Meta): your consent, given through the cookie banner.
- To meet our legal obligations, in particular accounting and tax obligations: legal obligation.
- To keep the site secure, prevent abuse and defend our rights in the event of a dispute: our legitimate interest, with respect for your rights and freedoms.
4. Who has access to your data?
Your data and your photographs are handled in strict confidence. They are never sold. We work with a few service providers, carefully chosen and bound by confidentiality:
- Dubsado (United States): contact form, client management, contracts and invoices;
- OVHcloud (France): website hosting;
- Google (Google Analytics, YouTube) and Meta (Facebook, Instagram): audience measurement, videos and advertising, only if you accept the related cookies;
- iClosed and Calendly (United States): booking the discovery call;
- Flodesk (United States): sending our newsletters, if you have consented;
- Pixieset (Canada): private, secure gallery for delivering your photographs;
- where applicable, our accountant, and a lawyer or collection agency in the event of a dispute.
5. Transfers outside the European Union
Some of these providers are based outside the European Union. For those based in the United States (Dubsado, iClosed, Calendly, Flodesk, Google, Meta), transfers are covered by the EU-US Data Privacy Framework when the provider is certified under it, or by the European Commission’s standard contractual clauses. Pixieset is based in Canada, a country recognized by the European Commission as offering an adequate level of protection.
6. How long do we keep your data?
- Contact request without a session: 3 years after our last exchange;
- Clients: for the whole of our relationship, then 10 years for accounting documents (contract, invoices), as required by law;
- Photographs: the images you selected are kept for 12 months after the session, so that you can order prints or an album later. The other images from the session are deleted. You can ask for your photos to be deleted sooner at any time;
- Cookies: see the durations in section 9.
7. Your rights
Under the GDPR and the Belgian law of July 30, 2018, you can at any time:
- access your data and get a copy of it;
- have it corrected or completed;
- ask for it to be deleted, subject to our legal retention obligations;
- ask for its processing to be restricted, or object to it, in particular to direct marketing;
- ask for its portability;
- withdraw your consent at any time, for example for the publication of a photo or for cookies.
Simply write to info@boudoirbysteve.com. We may ask you to prove your identity, and we will reply within one month.
The photographs remain protected by the photographer’s copyright. Their delivery is governed by your contract.
8. Complaints
If you believe your rights have not been respected, you can file a complaint with the Belgian Data Protection Authority: Rue de la Presse 35, 1000 Brussels, Belgium · +32 (0)2 274 48 00 · contact@apd-gba.be · www.dataprotectionauthority.be.
9. Cookies
On your first visit, a banner lets you accept or decline audience measurement and advertising cookies. They are only set with your consent. You can change your mind at any time through the Manage cookies link at the bottom of every page.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| bbs_consent | Boudoir by Steve | Remembers your cookie choice (necessary) | Until you change it |
| _ga, _ga_* | Google Analytics | Audience measurement: pages viewed, where visits come from (with your consent) | 2 years |
| _fbp | Meta | Measuring the effectiveness of our ads and ad targeting (with your consent) | 3 months |
The contact form (Dubsado) and the videos (YouTube) are provided by third-party services that may set their own cookies when you use them. We invite you to read their privacy policies.
10. Security
We take appropriate technical and organizational measures to protect your data and your photographs against loss, leaks or unauthorized access: a secure HTTPS site, restricted access, and providers selected for their reliability.
11. Minors
Our services are intended exclusively for adults. If you notice that a minor has sent us data, contact us at info@boudoirbysteve.com and we will delete it.
12. Changes
We may update this policy to reflect changes in our services or in the law. The date of the latest update appears at the top of this page.
13. Governing law
In the event of a disagreement, we always favor dialogue and an amicable solution. Failing that, Belgian law applies and the courts of the judicial district of Walloon Brabant have jurisdiction.