Privacy Policy

What we collect

Only what a given action needs. Nothing is collected speculatively.

• Enquiries — your name, email, and whatever you write in the message.
• Bookings — name, email, phone, session details, the location or area for the shoot, and any note you add.
• Photo permission — name, email, optional phone, your Yes/No answer to each use, your typed signature, and the date. If you sign for someone under 18, their name and your relationship to them.
• Orders — the items ordered and the email associated with the order.
• Client galleries — your email address, which photographs you favourite, and any comments you leave on them.
• Accounts — email, name, and a hashed password. Passwords are never stored in a readable form.

Card details never reach us

Payments are handled entirely by Stripe. Card numbers are entered on Stripe's own checkout page, not on this website, and the Studio never sees or stores them.

What comes back to us is confirmation that a payment succeeded and a reference for it — enough to know your deposit is paid, and nothing more.

Technical information we record, and why

Two places record an IP address and browser identifier, and both are deliberate rather than incidental:

• A signed photo permission stores them alongside the signature. That is what fixes an agreement in time — it is the evidence that a particular person agreed to particular uses on a particular day, and it protects you as much as the Studio.
• A client gallery records when it was opened, viewed, downloaded, favourited or commented on. It is how the Studio knows a delivery arrived, and how unexpected access would be spotted.

Cookies

The site uses cookies for two things only: keeping you signed in, and remembering what is in your shopping basket between pages.

There is no advertising network, no tracking pixel, no analytics profile built about you, and nothing sold to a data broker.

Who else handles your information

The Studio uses a small number of service providers to run the site. They process data on the Studio's behalf and are not permitted to use it for their own purposes:

• Stripe — payments and subscriptions.
• Cloudinary — storage and delivery of photographs.
• Neon — the database holding bookings, galleries and permissions.
• Vercel — hosting, which necessarily handles every request to the site.

Your photographs

Photographs from your session are stored so they can be delivered to you, and are visible only to you through your private gallery unless you have given permission for a specific public use.

Those permissions are separate, optional, granted use by use, and reversible. Withdraw one by emailing zhanetamiastudios@gmail.com; the Studio removes the images from anything it controls within 30 days.

How long it is kept

Enquiries that do not become bookings are kept while they are still useful to follow up, then deleted.

Booking, order and payment records are kept as long as tax and accounting rules require.

Signed permissions are kept for as long as the Studio may rely on them, because a record of what you agreed to is the only thing that makes the agreement checkable later.

Client galleries expire on the date set when they were created, after which access ends.

What you can ask for

You can ask what the Studio holds about you, ask for it to be corrected, ask for it to be deleted, or withdraw a permission you previously gave. You do not have to give a reason.

Email zhanetamiastudios@gmail.com. Requests are answered within 30 days. Where something cannot be deleted — a payment record required for tax purposes, for instance — the Studio will say so plainly rather than quietly declining.

Children

The Studio photographs children as part of family and event work. Where the person photographed is under 18, permission is given by a parent or legal guardian, never by the child.

The website itself is not directed at children and no account should be created by one.

Changes

If this policy changes, the version below changes with it.

Questions are welcome at zhanetamiastudios@gmail.com.