Guest photos are personal data: what your retention policy should say
If your activation captures faces, somebody will ask what happens to the images. Here is how to have that answer ready before the doors open.
An activation that photographs guests is processing personal data, and the question of what happens to those photographs will be asked. Sometimes by a guest at the stand, sometimes by a legal team three weeks before the event, and occasionally by a journalist. The only bad answer is an improvised one.
Decide retention per project
A single global default is convenient and almost always wrong, because a one-night internal party and a season-long public campaign have nothing in common. Retention set per project lets the answer match the activation: how long images are kept, what they are used for, and what happens when the campaign ends.
- How long source photos are retained after the event
- How long finished output is retained, which may differ
- Whether anything is reused in marketing, and on what basis
- What the deletion point is, and who confirms it happened
Say it where the guest is standing
A policy nobody reads is not consent. The practical version is a short, plain statement at the point of capture that tells the guest what is being made, where it goes, and how long it lives. It takes one sentence and it removes almost every awkward conversation at the stand.
If the honest answer to what happens to my photo takes a paragraph to explain, the policy is too complicated.
Get it agreed in planning
The worst time to discover that legal wants a fourteen day deletion window is the week of the event. Retention belongs in the same conversation as dates, footfall and theme approval, because it can genuinely change how the activation is built and what you are allowed to do with the content afterwards.
A short checklist
- Agree the retention period before any theme work starts
- Write the guest-facing wording at the same time as the policy
- Make sure the wording matches what the system actually does
- Confirm deletion after the campaign closes, and record that you did
None of this slows an activation down. It removes the one risk that can stop a campaign entirely, and it means the person on the stand can answer the question honestly instead of guessing.
