If you appear in content on BentBox
Last updated: 16 August 2026
This page is for people who appear in photos or videos published on BentBox — not for photographers or customers. It explains what information we hold about you, where it came from, and how to have content of you removed. You do not need an account, and you do not need to explain yourself to us.
If content of you was published without your permission, tell us now.
Email privacy@bentbox.co with a link to the content, or the name of the photographer, or any other detail that helps us find it. Say that the content was published without your consent.
We restrict access to the content while we look into it, not after we finish. You do not need an account, you do not need a lawyer, and you do not need to prove anything before we act.
Who we are
BentBox is a marketplace where independent photographers and creators sell photos and videos. It is operated by Haas & Reed B.V., which is responsible for the personal data described on this page.
Haas & Reed B.V.
Mantelmeeuwhof 15
3582DN Utrecht, Netherlands
Email: privacy@bentbox.co
Why you are reading this instead of hearing from us
When a photographer publishes content on BentBox, we do not always receive contact details for the people appearing in it. Sometimes we are given an email address, sometimes we are not, and for content shot several years ago any address we do have may no longer work.
Where we cannot contact you directly, we publish this notice so the information reaches you by another route. It is here permanently, and you can act on it at any time. If you would like to know specifically what we hold about you, ask us and we will tell you.
What we hold about you
Where you appear in content on BentBox, we may hold:
- the photos or videos themselves, and the description and title the photographer gave them;
- a record that a model release exists for that content, and a reference number for it;
- the result of the age and identity check carried out before publication, confirming that a valid identity document was seen and that you were over eighteen;
- a watermarked copy of the photograph from your identity document, which we use to check that the person in the content is the person who was verified;
- your name, where the photographer or the release provided it;
- your email address, where one was provided.
We do not hold your identity document. That is held by ProntoID, the verification service described below.
Where this information came from
In most cases it came from the photographer or creator who produced the content, either directly or through ProntoID when they registered the release. If you verified yourself through ProntoID — for example by confirming a ProntoTag — then you provided it, and ProntoID will have given you its own information about that at the time.
Why we hold it
We hold the content because the photographer asked us to publish and sell it, on the basis that you agreed to that when the release was signed.
We hold the verification and release records because we are required to. Platforms publishing adult content must be able to show that everyone appearing in it was an adult and consented, both under record-keeping law and under the rules of the card schemes and payment providers we depend on. Those records also protect you: they are what allows us to establish who is in a piece of content and act quickly when someone tells us something is wrong.
Who else sees it
- ProntoID — the independent service that verifies identity documents and holds model releases. ProntoID is a separate company with its own privacy information covering what it holds.
- Our service providers — the companies that host our systems and process payments, under contract and only as needed to run the platform.
- Law enforcement and regulators — where we are legally required to provide information, or where we report something we are obliged to report.
We do not sell your personal information, and we do not use it for advertising.
How long we keep it
We keep the content for as long as it is published on the platform. If content is removed, we keep the verification and release records for a further period, because we are required to be able to show that content we once published met the age and consent requirements. We do not keep them indefinitely, and the period is set out in our Privacy Policy.
Removing content and deleting the record that proves it was lawful are different things. If you ask us to remove content we will remove it, but we may need to keep the verification record afterwards for the period described above. If that concerns you, say so and we will explain exactly what is kept.
Your rights
Whatever you signed and however long ago, you can ask us to:
- Stop publishing content of you. This is usually the request people actually want, and it is the one we act on fastest.
- Tell you what we hold about you, and give you a copy.
- Correct anything that is wrong, including your name.
- Delete what we hold, subject only to records we are legally required to keep.
- Restrict or object to what we do with your information while a question is being resolved.
- Withdraw your agreement to the content being published. Withdrawing it does not undo publication that has already happened, but it stops it continuing.
We offer these rights to everyone who contacts us, wherever you live, and whether or not the law where you live requires it.
A note about the release you signed. A model release is an agreement between you and the photographer. Withdrawing your agreement may raise questions between the two of you, and we cannot advise you about that. It does not change what we will do: if you ask us to stop publishing content of you, we will stop.
How to make a request
Email privacy@bentbox.co. You do not need an account. Tell us:
- what you want us to do — remove content, tell you what we hold, or something else;
- anything that helps us find the content: a link, the photographer's name, roughly when the photos were taken, or the name the content is published under;
- how we can reply to you.
We will ask you for enough information to be reasonably sure the request is really from you, because acting on a false request would harm you. We ask for the least we can manage with, and anything you send us for that purpose is used only to check identity and then deleted.
We reply within one month. If a request is complicated we may need longer, in which case we will tell you why and keep you updated. Requests to take content down are handled straight away and do not wait for that process.
If you are not happy with our response
You can complain to a data protection authority. BentBox is operated from the Netherlands, so the Dutch authority is the Autoriteit Persoonsgegevens. If you live elsewhere in the EU or EEA you can go to the authority in your own country instead. You can complain to them whether or not you have contacted us first, although it is usually quicker to ask us.
Common questions
Changes to this notice
We update this page when what we do changes. The date at the top shows when it was last revised.
Related: Privacy Policy · Terms & Conditions