Privacy Policy
Effective date: EFFECTIVE DATE
Draft for structure and review only — this is not legal advice and is not final. Bracketed items must be supplied and the wording reviewed by a qualified professional before launch.
This page explains what this website collects, why, and what happens to it. This is a personal automotive photography portfolio run by OWNER LEGAL NAME ("I", "me"). Questions or requests: CONTACT EMAIL.
What I collect
I only collect what you choose to send:
- Booking request — your name, and any of email, phone or Instagram you provide; the requested date and time; the vehicle; the shoot type; a location; and your message.
- Feedback — your name, a rating, and your message.
- Basic technical data your browser sends with any request (for example your IP address), used transiently to keep the site working and to limit abuse.
Is it required?
Providing this information is voluntary. If you don't complete the booking or feedback fields that's fine — but without at least a name and one way to reach you back, I won't be able to respond to a request.
How I use it
Only to read and reply to your message, to arrange a shoot if you request one, and to keep the site running securely. I don't sell your information or use it for advertising.
Who processes it
The site relies on a few service providers that process data on my behalf: the database (Supabase — hosted in Frankfurt, EU), the notification email provider (Resend), and the hosting/CDN platform (Netlify). Some of this processing takes place outside Israel (in the EU and, depending on the provider, the United States). Exact processing locations are provider-dependent and governed by each provider's own terms and documentation.
How long it's kept
I keep booking and message records only as long as reasonably needed to handle your request and for a sensible period afterward, then delete them. RETENTION APPROACH — owner to set.
Security
Submissions are stored in a private database the public cannot read: it is not exposed to the browser, access uses a server-side key only, and row-level security is enabled with no public access. No system is perfectly secure, but access is kept to the minimum needed.
Your choices
You can ask me to show you what I hold about you, correct it, or delete it — contact CONTACT EMAIL (PRIVACY REQUEST METHOD — if different).