Privacy policy

Last updated: 20 July 2026

HeadshotDesk is a service by Panther Studios, Amsterdam, the Netherlands (“we”). It helps photographers organize headshot shoots and deliver photos to the people photographed. This page explains what personal data we process, why, and what your rights are. Questions: info@headshotdesk.com.

If you were photographed (participant)

Your photographer uses HeadshotDesk to run the shoot and deliver your photos. For that we process: your name, email address, and optional job title (entered by you at signup or by your photographer); the photos taken of you; and activity needed to run the service, such as when your gallery was emailed, which photos you downloaded, and when you accepted these terms. Your photographer decides what happens with the shoot. Legally, they are the controller for your shoot data and we process it on their behalf.

We use this data only to run the shoot and deliver your photos. We do not sell it, use it for advertising, or use your photos to train AI models.

If you are a photographer (account holder)

We process your name, email, studio name, and password (stored hashed) to provide your account, plus the job and participant data you add to run your shoots.

Where your data lives

Application data is hosted with Render (Frankfurt, Germany) and photos are stored with Cloudflare R2. The web interface is served by Vercel. Delivery and account emails are sent through Postmark. These providers process data on our instructions under their data processing agreements.

Retention

Shoot data is kept for as long as the photographer keeps the job in their account. When a photographer deletes photos, a participant, or a job, the associated data is removed. You can also ask us or your photographer to remove your data at any time.

Your rights

Under the GDPR you can request access to, correction of, or deletion of your personal data, ask for a copy in a portable format, and object to or restrict processing. Email info@headshotdesk.com and we'll respond within 30 days. You can also complain to the Dutch data protection authority (Autoriteit Persoonsgegevens).

Cookies

HeadshotDesk uses only the storage needed to keep you signed in. No advertising or cross-site tracking cookies.