Terms of Service
Last updated: 28 October 2026
These terms govern use of Bokeh Gallery, which runs on the Bokeh Gallery platform. By creating an account or signing in you agree to them.
The service
Bokeh Gallery hosts photography portfolio websites. A photographer (site admin) may invite people to register so they can view selected galleries. Access to a gallery does not give you any rights in the photographs. You must not copy, download (except where the site expressly allows it), scrape or redistribute images.
Your account
- You must provide an accurate email address you control.
- You are responsible for keeping your password secret.
- We may suspend an account that is used to attack the service or infringe copyright.
- You may delete your account at any time from your profile. Site admins may also delete a user when asked (for example under the right to be forgotten).
Emails
We send emails that are required to run your account (verification and password reset). Gallery-update or other promotional emails are only sent if you have ticked the optional consent box. That box is never pre-ticked. You can withdraw consent on your profile. Bulk emails from a photographer are sent only to users on that photographer's site who have given this consent.
Data Processing Agreement
This section is the data processing agreement (DPA) required by Article 28 UK/EU GDPR between each photographer who uses the platform (the controller of their visitors' data) and Bokeh Gallery (the processor).
- Subject matter. Bokeh Gallery stores names and email addresses of people the photographer invites or who register to view galleries, plus account credentials and optional profile images, solely to operate the gallery service.
- Duration. For as long as the photographer's site remains on the platform, and for a short period afterwards while backups expire.
- Nature and purpose. Hosting, authentication, access control, and (only where the visitor has consented) sending gallery-update emails on the photographer's instruction.
- Types of data. Name, email, hashed password, optional profile image, gallery membership, marketing-email consent flag.
- Data subjects. The photographer's invited guests, clients and other registered visitors.
- Instructions. Bokeh Gallery processes this visitor data only to provide the service, on the photographer's documented instructions (including these terms), or as required by law. We will not sell visitor emails or use them for our own marketing.
- Confidentiality and security. We use HTTPS, hashed passwords, tenant isolation and restricted database access. Personnel who can access the data are under confidentiality obligations.
- Sub-processors. We use: Vercel (website hosting and delivery); Resend (transactional email (account verification and password reset)); EdgeStore (image file storage). We remain responsible for them.
- International transfers. If a sub-processor stores data outside the UK/EEA, we rely on an appropriate safeguard (for example the UK Addendum / EU Standard Contractual Clauses) as offered by that provider.
- Assistance. We will help photographers meet data subject requests (access, deletion, consent withdrawal) and their other GDPR duties, so far as the product allows — including the photographer's ability to delete a user and the visitor's ability to delete their own account.
- Breach. We will notify the photographer without undue delay if we become aware of a personal data breach affecting their visitors.
- Deletion or return. When a photographer leaves the platform or a visitor's account is deleted, we delete or anonymise that personal data from production systems, except where we must keep it by law.
- Audits. On written request we will provide information reasonably needed to demonstrate compliance with this DPA.
Liability
The service is provided as available. Photographs and gallery content remain the photographer's responsibility. Nothing in these terms limits liability for death or personal injury caused by negligence, or for fraud.
Contact
Bokeh Gallery: admin@bokeh.gallery. See also the Privacy Policy.