Privacy and data

Three things, and nothing beyond them: the reference photos you upload, the facial geometry my production step derives from those photos, and the contact details you enter in the brief form.

Your explicit consent for the biometric data, given in writing before any upload. Performance of the contract for the work itself. I do not lean on legitimate interest for anything biometric.

Your files and data sit in the European Union, under GDPR, with Supabase in the eu-west-3 region. EU storage is the design, not an afterthought.

Reference photos and the biometric data derived from them are permanently deleted 30 days after your project closes, or earlier if you ask, at any time. The contact details from your brief form are kept for up to 24 months after the last time you reach out, so I can follow up on your enquiry, then deleted, or sooner if you ask.

Producing your portraits uses a third-party model, Google’s Gemini, which processes outside the EU, because there is no equivalent inside it. That transfer happens only after you have given consent. I list every service that touches your data, including this one, on the subprocessors page.

You can ask to see your data, delete it, or withdraw your consent, at any time. If you are a California resident, you have access and deletion rights under the CCPA and CPRA.

Several US states regulate biometric data specifically: Illinois under BIPA (740 ILCS 14), Texas under CUBI, and Washington under its biometric privacy law. Wherever you live, the written consent and the 30-day deletion above apply to you.

Your images and the data derived from them are never sold, never shared beyond the services listed on the subprocessors page, and never used to train any model.

This service is for adults. I do not knowingly collect data from anyone under 18, and I do not produce portraits of minors. If a source photograph turns out to show a minor, it is deleted and the person is removed from the project. If you believe I hold data on someone under 18, email me and I will delete it.

For any of the above, email me at adrien@adrienlacour.studio. I handle these requests myself.