Privacy Policy | Pinakx Photography

This Privacy Policy explains how Pinakx Photography collects, uses, stores, and handles personal information submitted through this website. Pinakx Photography arranges photography on location after a written estimate is accepted. The site does not publish a telephone number or a street address.

Who we are

Pinakx Photography operates this website. A privacy request goes through the contact form. Choose “Not sure yet” as the service and begin the message with “Privacy request”.

Information the form collects

If you submit the enquiry form, you provide:

your name;
your email address;
a phone number, only if you want a call back;
a city chosen from the list on the form;
a service chosen from the list on the form;
a preferred date, which may be left blank;
a message about the session;
confirmation that you agree to this policy and that you want a reply by email.

The name, email address, city, service, message, and confirmation are required. The phone number and the date are not. Please do not include health information or a detailed account of a child. If you later accept an estimate, that estimate may name the people who will be photographed. Those names belong to the booking, not to this public form.

The form includes one hidden field meant to catch automated submissions. If that field is filled in, the message is rejected. It is not emailed and it is not stored.

What the server does with an enquiry

A message that passes the checks is emailed to the studio mailbox. The website does not save the message in a database. If the mailbox is not ready, or if the server does not accept the email, the form says the message was not sent. The enquiry has then not been received.

The server also limits repeat messages. It calculates a SHA-256 hash of the network address and uses that hash only as the name of a rate-limit file. The file contains the times of messages that were successfully sent, not the network address itself. After five messages from the same network have been sent in the past hour, another message is refused until that hour has passed. A message that is not sent does not add a new time to the file.

The hosting company may keep ordinary logs of pages requested, the time, and the browser type. This policy does not name a country or a city for those logs, because the website does not publish a server location. The host decides how long its own logs are kept.

Why the information is used

Enquiry details are used to reply and to prepare a written estimate when the studio can consider the request. They are not added to a promotional mailing list. A reply is the response you asked for. It is not permission to send newsletters.

If you accept an estimate, the same contact details may be used to carry out that booking, to deliver the files the estimate describes, and to keep a record of what was agreed.

Photographs after a booking

This public website does not accept or store photographs uploaded by clients, and it does not offer an online gallery. Photographs made for a confirmed booking may be processed, stored, and provided to the client as part of that photography service. After you accept an estimate, edited files are delivered by the method and on the timing written in that estimate. The Terms and Conditions and the estimate together state who holds copyright and what you may do with those files. Reference photographs published on the website are separate. They are licensed stock images, not photographs from your session.

Cookies

The only cookie this site sets on purpose is pinakx_cookie_ack, described in the Cookie Policy. It is stored for 180 days, and only after you click Acknowledge. It remembers that choice and nothing else. The site does not set advertising cookies or analytics cookies.

How long information is kept

The rate-limit file records the times of messages that were successfully sent. A time older than one hour is not counted. The next time a message is successfully sent, older times are left out of the file. The file can remain on the server until it is removed during ordinary administration of the site.

The website does not delete mailbox messages on a fixed schedule, and it does not promise a set number of months. An enquiry email remains in the studio mailbox until the studio deletes it, or until the studio agrees to delete an enquiry that has not become a booking. If you accept an estimate, the studio may keep the contact details and the record of that agreement for as long as the booking, the licence, an invoice, or a legal claim requires. Hosting logs follow the host’s own schedule.

When information is shared

The site does not sell personal information. An enquiry email is kept in the studio mailbox. The website does not send the enquiry to a payment service, because no payment service is connected to the site. If one is added later, this policy will be updated first. A rented studio or a venue does not receive the enquiry form. After you accept an estimate, they receive only what that booking needs, such as a name and a time.

Children

The enquiry form is meant for the adult who is making the request. The form does not ask for a date of birth and the site does not open accounts for children. The studio does not knowingly collect personal information from a child through this website. Photographs of children, when they are made, are arranged with the adult who accepts the estimate. They are governed by that estimate and by the Terms and Conditions.

Access, correction, and deletion

You may ask what enquiry information the studio still has, ask for a correction, or ask the studio to delete an enquiry that has not become a booking. You may also withdraw consent to being contacted further about an enquiry that has not become a booking. Withdrawing consent does not erase a record the studio must keep for a contract, a payment, or a legal claim.

Send the request through the contact form and begin the message with “Privacy request”. The studio replies by email when the message has been delivered. If the form says the message was not sent, the studio has not received the request. This page does not state a number of days for the reply, because the website does not impose one.

Complaints

You may complain to the Office of the Privacy Commissioner of Canada. The office explains PIPEDA and how to report a concern at priv.gc.ca and on the OPC report-a-concern page. A provincial commissioner may also have a role, depending on where you live and where the records are held.

Changes

If the form, the cookie, or the way enquiries are emailed changes, this page will be updated and the date at the top will change. Earlier wording is not kept on a public archive page.