1. Who We Are

Sasta Lens Studios ("we," "us," or "our") is a photography services business. This Privacy Policy explains how we collect, use, and protect personal information when you use our website or book our services.

2. Information We Collect

We collect information you provide directly to us, including:

Name, email address, and phone number (when booking or creating an account)
Booking details: date, time, session type, and any messages you send us
Payment-related information (we do not store card numbers; payments are handled by third-party processors)
Photographs and media delivered as part of your session
Electronic signature data: name, timestamp, IP address, and document hash (when signing a contract)

3. How We Use Your Information

We use your information solely to:

Provide and manage photography services you have booked
Communicate with you about your booking, delivery, and contract
Send transactional emails (booking confirmation, delivery link, contract)
Maintain legally required records of signed agreements
Improve our services based on aggregate usage patterns

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Electronic Signatures & Audit Logs

When you electronically sign a Photography Services Agreement, we record your full legal name, the date and time of signing, your IP address, and a SHA-256 hash of the document content. This information is retained as part of the signed contract record and may be used to verify the integrity of the agreement if disputed.

5. Photographs & Portfolio Use

Your photographs are stored securely and delivered via a private, password-protected gallery. We will only use your photographs for portfolio or marketing purposes if you have explicitly granted permission in your signed Photography Services Agreement (Section 15). You may withdraw this permission in writing at any time.

We will not use your photographs to train, fine-tune, or develop any artificial intelligence or machine learning model without separate written consent.

6. Data Retention

Booking records: Retained for 7 years for legal and accounting purposes
Signed contracts: Retained indefinitely as legally binding documents
Delivered photos: Archived for 90 days after gallery delivery, then permanently deleted. You are responsible for downloading and backing up your files.
Account data: Retained until you delete your account

7. Your California Privacy Rights (CCPA)

Under the California Consumer Privacy Act (Cal. Civ. Code §1798.100 et seq.), California residents have the right to:

Know what personal information we collect and how it is used
Delete personal information we hold about you (subject to legal retention requirements)
Opt out of the sale of personal information (we do not sell personal information)
Non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at the email address below.

8. Cookies & Analytics

Our website uses essential cookies for authentication and session management. We do not use third-party advertising cookies or cross-site tracking.

9. Third-Party Services

We use the following third-party services to operate our platform:

Supabase — database and file storage
Resend — transactional email delivery
Cloudflare Turnstile — CAPTCHA to prevent spam
Groq — AI chat responses (no conversation data is retained by Groq per their API policy)

Each service has its own privacy policy governing their handling of data.

10. Contact

For privacy-related questions or to exercise your rights, contact us:

Sasta Lens Studios
Email: admin@sastalensstudios.com