Privacy Policy

1. Introduction

Memories Photography Studio ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, process, and safeguard your information when you use our booking system at book.memories-studio.com and our main website at memories-studio.com.

We comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and, where applicable, the EU General Data Protection Regulation (GDPR).

2. Data Controller

Memories Photography Studio
Green Valley Field Subdivision, Buna Cerca
Indang, Cavite, Philippines
Email: smile@memories-studio.com
Phone: +63 906 469 4122

3. What Personal Data We Collect

We collect the following types of personal data:

• Contact Information: Name, email address, phone number
• Booking Information: Preferred date and time, service type selected, number of people
• Communication Data: Messages sent through our contact forms or email
• Technical Data: IP address, browser type, device information, cookies (see Cookie Policy below)
• Payment Information: We do not store credit card details. Payment processing is handled securely by third-party payment processors

4. Why We Collect Your Data (Legal Basis)

We collect and process your personal data for the following purposes:

• Booking Management: To process and manage your photography session bookings (contractual necessity)
• Communication: To send booking confirmations, reminders, and respond to inquiries (contractual necessity and legitimate interest)
• Service Improvement: To analyze usage patterns and improve our services (legitimate interest)
• Marketing: To send promotional materials only with your explicit consent (consent-based)
• Legal Compliance: To comply with legal obligations such as tax and accounting requirements

5. How We Use Your Data

Your personal data is used to:

• Create and manage your booking
• Send booking confirmations and reminders via email
• Process payments for services
• Communicate with you about your booking or inquiries
• Improve our website and booking system functionality
• Send marketing communications (only with your consent)
• Comply with legal and regulatory requirements

6. How We Store and Protect Your Data

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• HTTPS encryption for all data transmission
• Secure cloud storage with access controls
• Regular security audits and updates
• Strict access controls - only authorized personnel can access your data
• Data backup and recovery procedures

Your data is stored on secure servers provided by Vercel, Notion, and Google Cloud Platform. These providers are compliant with international security standards.

7. How Long We Keep Your Data

We retain your personal data for the following periods:

• Booking Data: 3 years after your last booking for business records and tax purposes
• Marketing Consent: Until you withdraw consent or 2 years of inactivity
• Communication Records: 2 years after last interaction
• Analytics Data: 26 months (Google Analytics default)

After these retention periods, we will securely delete or anonymize your data unless we are legally required to retain it longer.

8. Who We Share Your Data With

We may share your personal data with the following third parties:

• Notion: For booking and customer database management
• Google Calendar API: For scheduling and availability management
• SendGrid: For sending booking confirmation and reminder emails
• Vercel: For website hosting and performance
• Google Analytics: For website analytics (anonymized where possible)

We do not sell, rent, or trade your personal data to third parties for marketing purposes. All third-party processors are bound by data protection agreements.

9. Your Rights Under the Philippine Data Privacy Act and GDPR

You have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to Restriction: Request limitation of processing your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with the National Privacy Commission (Philippines) or relevant supervisory authority

To exercise any of these rights, please contact us at smile@memories-studio.com or +63 906 469 4122. We will respond to your request within 30 days.

10. Cookie Policy

Our website uses cookies to enhance your browsing experience and analyze site traffic. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies: Required for the website to function properly (e.g., session management, security)
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how visitors use our website (Google Analytics)
• Marketing Cookies: Track your browsing activity to serve relevant advertisements (only with consent)

You can manage your cookie preferences through our cookie consent banner that appears on your first visit. You can also disable cookies through your browser settings, though this may affect website functionality.

11. International Data Transfers

Your data may be transferred to and processed in countries outside the Philippines, including the United States and European Union, where our service providers operate. We ensure that appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by relevant data protection authorities
• Privacy Shield frameworks or equivalent mechanisms

12. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

13. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or how we handle your personal data, please contact us:

Memories Photography Studio
Email: smile@memories-studio.com
Phone: +63 906 469 4122
Address: Green Valley Field Subdivision, Buna Cerca, Indang, Cavite, Philippines

15. Supervisory Authority

If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with:

National Privacy Commission (Philippines)
Website: www.privacy.gov.ph
Email: info@privacy.gov.ph
Hotline: (+632) 8234-2228