Privacy Policy
What we collect, why, how long we keep it, and the rights you and your guests can exercise at any time.
What we collect, why, how long we keep it, and the rights you and your guests can exercise at any time.
Draft: legal review required before publication. This template describes how Shanzhu processes personal data. Placeholders marked
[[to complete: …]]must be filled with your company's actual details and validated by legal counsel before going live.
This policy explains what personal data we collect, why, how long we keep it, and the rights you and your guests can exercise. Retention is time-limited, deletion can be requested at any time, and data is not sold to third parties.
The controller responsible for processing the personal data described here is:
For any question about this policy or your rights, write to the contact above. If your account operates under a white-label brand, the agency that runs the event may act as controller for guest data, with Shanzhu acting as processor on their behalf.
We collect only what is needed to run the service:
Legal bases: performance of our contract with you, your and your guests' consent where required (e.g. sharing media), our legitimate interest in securing and improving the service, and compliance with our legal obligations.
You can trigger earlier deletion at any time from the platform, and expired galleries are released automatically to minimize the data footprint.
We rely on a limited set of vetted providers, each bound by contractual data-protection commitments:
Where data is transferred outside your region, we rely on appropriate safeguards such as standard contractual clauses. A full, current list of subprocessors is available on request.
Under applicable data protection law (including the GDPR), you and your guests may request:
To exercise any of these, contact us at [[to complete: dpo@yourdomain]]. We respond within the legal deadline. You also have the right to lodge a complaint with your supervisory authority (in France, the CNIL).
You can see how retention and deletion work on a real event.