Privacy Notice

How the studio handles the personal data of its clients and visitors.

1. Data controller

The Studio is responsible for collecting and processing the personal data you provide, and for protecting it in accordance with this notice. It is issued under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations.

2. Personal data we collect

Depending on how you contact us (web form, WhatsApp, social media, email or in person), we may collect:

• Identification and contact details: name, phone and email address.
• Conversation content: the messages you send us, including images or files you choose to share.
• Event details: date, event type, venue, approximate budget and any preferences you mention.
• Booking-related data: billing information and payment records.

Photo galleries. If the Studio shares a delivery gallery with you:

• Viewing the gallery requires leaving no data at all and is not linked to you: visits are counted anonymously, with no IP address or device identifier.
• To download photographs or save a list of favourites, you are asked for your name and email. We store that email, the name you enter, the lists you build and a record of what you downloaded and when.
• The Studio can see that information.

We do not intentionally collect sensitive data. Please do not share sensitive information through these channels unless it is strictly necessary for the service.

3. Purposes of processing

Primary purposes (necessary for the service):

• Handle your requests, questions and quotes.
• Reply to your messages, including automated assistance via artificial intelligence (section 4).
• Schedule appointments, sessions and events, and provide the photography and video services booked.
• Generate contracts and receipts, and manage payments.
• Deliver the photographs booked and keep a record of what was downloaded and by whom.

Secondary purposes (you may object without affecting the service):

• Send you reminders, news and offers for related services.
• Invite you to leave a review or testimonial.

To object to the secondary purposes, let us know at the email in section 1.

4. Use of artificial intelligence

The Studio may use an AI assistant to handle enquiries and follow-ups through its own channels. When that happens, the content of your message is processed to generate a reply about the Studio's services, and conversations needing special attention are reviewed by a person before replying.

If you write to us via WhatsApp or another messaging service, that conversation is also subject to the privacy policy of the service you use.

5. Who we share your data with

We do not sell your personal data. It is shared only with providers that help operate the service, who are bound to handle it in accordance with this notice:

• Xarpen — the platform the Studio uses to run its business, acting as data processor.
• Cloudflare, Inc. — hosting and storage of the application and files.
• Anthropic, PBC — AI models used to draft replies.
• Stripe, Inc. and email providers — where applicable, to process payments or send you communications.

6. Retention and security

Gallery data: the email, name, lists and download history are deleted automatically when the gallery expires, or after one year (365 days) of inactivity if the gallery has no expiration date. If you request deletion of your gallery data, all four are deleted together.

The rest of your data is kept only for as long as necessary to fulfil the purposes of this notice and applicable legal obligations. Reasonable administrative, technical and physical security measures are applied; in particular, access credentials are stored hashed.

7. Your rights

You have the right to access your data, rectify it when inaccurate, cancel it when you consider it is no longer needed and object to its processing for specific purposes, as well as to withdraw any consent given.

To exercise any of these rights, or to request deletion of your data and conversation history, write to the email in section 1 stating your request and a way to reach you. Your request will be handled within the periods set by law. If you believe your right was not honoured, you may turn to INAI, Mexico's data protection authority.

8. Changes to this notice

This notice may be updated to reflect changes in the Studio's practices or in applicable law. The current version is always available at this address, with its last-updated date.