Last updated: April 2026
Legal Privacy & Cookies
Last updated: April 2026
This policy explains what personal data we collect, how we use it, and what rights you have. It also covers the cookies this website sets. We have written it to be readable, not to obscure anything.
The data controller is ANDP FilmStyles, a brand of Thomas Andp Photography, De Meern, Utrecht, The Netherlands. For data requests or questions about this policy, contact [email protected]
1. What We Collect and Why
Account and purchase data
When you create an account or place an order, WooCommerce collects your name, email address, billing country and postcode (required for EU VAT compliance), and order history. Your password is stored in hashed form — we never see it in plain text.
Legal basis: Performance of a contract (Article 6(1)(b) GDPR). This data is necessary to process your order and give you access to your downloads.
Payment data
Payments are processed by our payment provider. ANDP FilmStyles does not store or have access to full card numbers or bank details — that information is held solely by the payment processor under their own privacy terms.
Legal basis: Performance of a contract (Article 6(1)(b) GDPR).
Email communications
If you opt in to email notifications through the Email Notifications tab in your My Account area, we use Brevo to send you updates about new film simulations, product version updates, and our Lab Notes blog. You can withdraw consent at any time from the same tab — no need to contact us.
Legal basis: Consent (Article 6(1)(a) GDPR).
Website analytics
With your consent, we use Google Analytics 4 to understand how visitors use this website — which pages are visited, how long people stay, and where traffic comes from. This data is collected in aggregate and is not used to identify individual visitors. IP addresses are anonymised by default in GA4.
Legal basis: Consent (Article 6(1)(a) GDPR).
Advertising
With your consent, we use Google Ads to show advertisements to people who have searched for products like ours. Google Ads places cookies to measure whether an ad click resulted in a purchase, and to avoid showing the same ad repeatedly. We do not use this data to build personal profiles or sell it to third parties.
Legal basis: Consent (Article 6(1)(a) GDPR).
Server log data
Our hosting provider automatically records standard server logs including IP addresses, browser type, and pages visited. This data is used solely for security and to keep the website running — it is not used to identify or profile visitors for marketing.
Legal basis: Legitimate interests (Article 6(1)(f) GDPR) — maintaining the security and integrity of the website.
2. How Long We Keep It
3. Who We Share It With
We do not sell or rent your personal data. We share it only with the service providers strictly necessary to operate the business:
All processors are bound by data processing agreements and are required to handle your data in accordance with GDPR.
4. Your Rights
As a resident of the European Economic Area, you have the right to access, correct, or delete your personal data; to restrict or object to its processing; and to receive it in a portable format. You also have the right to withdraw consent at any time for any processing based on consent, without affecting anything that happened before you withdrew it.
For most things — updating your name, email, or notification preferences — you can do this directly in your My Account area. For anything else, email [email protected] and we will respond within 30 days.
5. Supervisory Authority
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority — the Autoriteit Persoonsgegevens — at autoriteitpersoonsgegevens.nl.
6. Cookies
Cookies are small text files placed on your device by websites you visit. They are not programmes and cannot run code or transmit viruses.
When you first visit this website, a consent banner will ask for your permission before any non-essential cookies are set.
Functional cookies (no consent required)
These cookies are strictly necessary for the site and shop to work and cannot be switched off.
| Cookie | Purpose | Duration |
|---|---|---|
| wordpress_* / wordpress_logged_in_* | Keeps you logged in to your account | Session / 14 days |
| wp_woocommerce_session_* / woocommerce_cart_hash / woocommerce_items_in_cart / wc_* | Stores your cart and checkout session | Session / 2 days |
| storeApiCartData | WooCommerce store API cart state | Session |
| PHPSESSID | Standard server session identifier | Session |
| complianz_* | Stores your cookie consent choice | 1 year |
Statistics cookies (consent required)
These cookies are only set if you accept statistics cookies via the consent banner.
| Cookie | Purpose | Duration |
|---|---|---|
| _ga / ga* | Google Analytics 4 — distinguishes unique visitors and sessions | 2 years |
| _gcl_au | Google Analytics — measures ad conversion efficiency | 90 days |
Marketing and advertising cookies (consent required)
These cookies are only set if you accept marketing cookies via the consent banner.
| Cookie | Purpose | Duration |
|---|---|---|
| _gcl_ls | Google Ads — links ad clicks to conversions | 90 days |
Payment cookies (set only during checkout)
| Cookie | Purpose | Duration |
|---|---|---|
| paypal / paypal_storage / nsid / enforce_policy / tsrce / ts_c / __ssid | Set by PayPal during the payment process to enable secure transactions | Session |
Fonts
Our fonts (Inter and JetBrains Mono) are hosted locally on this server via the OMGF plugin. No request is sent to Google’s servers when you visit this website for font loading purposes.
Managing cookies
You can change or withdraw your consent at any time by clicking the cookie preferences link in the footer of this website. You can also clear cookies through your browser settings — note that doing so will log you out of your account and clear your cart.
7. Changes to This Policy
We may update this policy when we add new services or functionality. The last updated date at the top of this page reflects the most recent revision. We will not introduce new non-functional cookies without updating this policy and, where required, asking for your consent first.
