Privacy Policy

Last updated: 11 October 2026

This Privacy Policy explains how OneDream Pictures processes personal information when you visit www.onedream.lt, request information about our photography services, complete a Facebook or Instagram enquiry form, or contact us by email or social media.

1. Who is responsible for your information?

The data controller is:

MB “A idea”, operating as OneDream Pictures
Company registration number: 306265478
Location: Vilnius, Lithuania
Email: info@aidea.lt
Website: https://www.onedream.lt

In this policy, “we”, “us” and “our” refer to this business. Please contact us at the email address above with any privacy questions or requests.

2. What information do we collect?

Depending on how you interact with us, we may process:

  • Your name and contact details, including your email address and telephone number if provided.

  • Information about your photography enquiry, such as your wedding or event date, country, location, venue, preferred photography coverage and other details you choose to share.

  • Your messages, our correspondence and information about proposals or bookings.

  • Enquiry submission details, such as the submission date and the form or advertisement through which you contacted us.

  • Technical information associated with website use, such as your IP address, browser, device information, pages visited and referring website.

We receive enquiry information directly from you. If you use a Facebook or Instagram lead form, Meta makes the information you submit available to us. Some fields may be prefilled by Meta; please check them before submitting.

Providing information is voluntary. However, without the contact details and event information needed to handle your request, we may be unable to respond or prepare a proposal. Required fields are identified in the relevant form.

You do not need to provide identification documents, health information or other sensitive personal information to request a photography proposal.

3. Why do we use your information?

We use personal information for the following purposes and legal bases under the General Data Protection Regulation (GDPR):

To respond to photography enquiries and prepare proposals.
This includes checking availability, discussing your plans, answering questions and following up on the proposal you requested. Our legal basis is taking steps at your request before entering into a contract — Article 6(1)(b).

To arrange and administer a booking.
If you book our services, we use the necessary information to manage the agreement and related communications. Our legal basis is performance of a contract — Article 6(1)(b).

To handle general correspondence, maintain necessary enquiry records and protect our business.
Our legal basis is legitimate interests — Article 6(1)(f). These interests include managing communications, maintaining continuity when responding to enquiries, securing our systems and establishing or defending legal claims. We consider your rights and reasonable expectations when relying on this basis.

To meet legal obligations.
Where applicable, we retain and use records needed for accounting, tax or other legal requirements — Article 6(1)(c).

For separately requested promotional communications.
If we offer a newsletter or other optional promotional communications, we will ask for separate consent — Article 6(1)(a). You can withdraw that consent at any time.

4. Facebook and Instagram enquiry forms

We use Facebook and Instagram lead forms to allow people to request information about our photography services.

When you submit a form, we use your details to respond to that request through the relevant contact channel. Submitting an enquiry does not automatically subscribe you to a newsletter or give consent to unrelated promotional messages.

Meta also processes information about your use of Facebook and Instagram for its own purposes. Its processing is explained in the Meta Privacy Policy. This policy explains how we handle the enquiry information we receive.

5. Who can receive your information?

Where necessary for the purposes described above, information may be accessed by:

  • People authorised to handle enquiries and bookings on our behalf.

  • Providers of website hosting, email, cloud storage and other business systems used to manage communications and records.

  • Professional advisers, such as accountants or legal advisers, where relevant.

  • Authorities or other recipients when disclosure is required by law or necessary to establish, exercise or defend legal claims.

Our website is hosted by Squarespace, which processes technical visitor information to provide and protect its hosting services.

Service providers acting on our behalf may process information only within their authorised role and subject to appropriate data protection obligations. Providers such as Meta may also act as independent controllers for their own platform activities.

We do not sell your personal information.

6. International transfers

Some technology providers may process personal information outside the European Economic Area, including in the United States.

Where such transfers occur, we use an applicable lawful transfer mechanism, such as a European Commission adequacy decision or Standard Contractual Clauses, together with additional safeguards where necessary.

You can contact us for information about the safeguards relevant to your data and how to obtain a copy.

7. How long do we keep information?

Enquiries that do not result in a booking: we retain enquiry details and related correspondence for up to 12 months after our last meaningful contact, unless a shorter period is appropriate or limited information must be retained for a legal reason.

Enquiries that result in a booking: relevant information becomes part of the booking record. We retain it for the duration of the service and subsequently for applicable accounting, tax and legal claim requirements.

Technical and security information: we retain it only for as long as needed to operate the website, investigate security issues and meet applicable obligations, taking account of the relevant provider’s retention arrangements.

Consent records and communication preferences: where applicable, we retain the minimum information needed to demonstrate consent or honour an opt-out.

Information required for an ongoing dispute or legal obligation may be retained for longer, with its use limited to that purpose. Otherwise, information is deleted or anonymised when it is no longer needed.

8. Cookies and advertising technologies

Website hosting may involve cookies or similar technologies necessary for website operation and security.

Submitting an enquiry is not consent to optional analytics, advertising cookies or tracking.

If we introduce optional analytics or advertising technologies, such as the Meta Pixel, we will provide information about the tools and their purposes and obtain consent before using them where required. We will also provide a way to withdraw that consent.

9. How do we protect information?

We use technical and organisational measures appropriate to the information and risks involved. Access is limited to people and service providers who need it for their work.

No online system can guarantee absolute security. Please avoid sending unnecessary sensitive information through enquiry forms or ordinary email.

10. Your rights

Depending on the circumstances and applicable law, you may:

  • Request access to your personal information and a copy of it.

  • Ask us to correct inaccurate or incomplete information.

  • Request deletion or restriction of processing.

  • Object to processing based on legitimate interests on grounds relating to your particular situation.

  • Request a portable copy of information where the legal conditions for data portability apply.

  • Withdraw consent at any time where processing relies on consent. Withdrawal does not affect the lawfulness of processing before withdrawal.

You can object to the use of your information for direct marketing at any time. We will stop using it for that purpose.

To exercise your rights, email info@aidea.lt. We may request proportionate information to verify your identity where necessary.

We respond without undue delay and normally within one month. If a lawful extension is needed because of the complexity or number of requests, we will explain this within the initial month.

You may also complain to the State Data Protection Inspectorate of Lithuania at https://vdai.lrv.lt/en/, or to the relevant supervisory authority in the country of your habitual residence, place of work or the alleged infringement.

11. Automated decisions

We do not make decisions about your enquiry or booking based solely on automated processing that produce legal or similarly significant effects.

12. Changes to this policy

We may update this policy when our services, processing activities or legal obligations change. The current version will be published on this page with an updated date. Where required, we will provide additional notice of material changes.