Legal
Privacy policy
Effective: [CONFIRM WITH OWNER: date this policy takes effect]
Draft for legal review. This template is not legal advice and must be reviewed by a lawyer before the website launches.
This policy explains what personal information Asalù Studio collects through this website, why, who it is shared with, how long it is kept and how you can exercise your rights. Asalù Studio is a photography business based in Montréal, Québec.
Person in charge of personal information
Mansour Kebe, owner of Asalù Studio, is responsible for protecting the personal information we hold. Send any question, request or complaint about your personal information to mansour.kebe@asalustudio.com.
[CONFIRM WITH OWNER: mailing address of the business, which must also appear in every email we send]
What we collect
When you book a discovery call: your name, email, phone number (if you give it), call preference, the service you are interested in, and the project date, location and message you choose to share.
When you send a message: your name, email, phone number (optional), the service you are interested in and your message.
In both cases we record the date and time you gave your consent, the language you used, and the time zone of your browser so we can show call times in your local time.
Technical information: to block spam and abuse, your IP address is checked by our spam protection and turned into a one-way, salted code for rate limiting. That code cannot be turned back into your address and is deleted after about a day.
We do not collect payment information on this website, and we do not knowingly collect information from children. Parents or guardians book sessions involving children under 14.
Why we use it
- To schedule, confirm, remind you of, reschedule or cancel your discovery call.
- To answer your messages and prepare a quote or a session with you.
- To keep a record of our exchanges and of your consent.
- To protect the website against spam and abuse.
- If you allow it, to measure which pages are useful (see "Analytics" below).
We only use your information for these purposes, or for others you consent to or that the law allows. We never sell or rent it, and we do not use it for advertising.
Your consent
The booking and message forms ask for your consent before anything is sent. You can withdraw your consent at any time by writing to us; we will then stop using your information, except where we must keep it by law.
Who we share it with
We use a few service providers to run this website. They process information only on our instructions and under contracts that require them to protect it:
- Supabase: database and server functions that store bookings and messages. [CONFIRM WITH OWNER: hosting region of the Supabase project, e.g. Canada (Central)]
- Resend: delivery of confirmation, reminder and reply emails (servers in the United States).
- Cloudflare: website hosting, and Turnstile, which checks that forms are sent by people rather than bots using your IP address and browser characteristics.
- Umami: privacy-friendly website statistics, only if you allow them. [CONFIRM WITH OWNER: Umami Cloud or self-hosted, and where]
Some of these providers store or process information outside Québec, including in the United States. Before doing so we assess whether the information will be adequately protected, as Québec law requires. [CONFIRM WITH OWNER: privacy impact assessment completed for each provider]
We may also disclose information when the law requires it.
How long we keep it
[CONFIRM WITH OWNER: retention periods. Suggested defaults: booking requests and messages that do not lead to a session are deleted 24 months after our last exchange; information about clients is kept as long as needed for the session and for tax and accounting obligations (generally 6 years).]
When information is no longer needed, it is deleted or anonymized.
Cookies, storage and analytics
This website does not use advertising or tracking cookies. It stores a few settings in your browser: your light or dark theme choice and your analytics choice.
Analytics are off unless you choose "Allow" in the notice at the bottom of the page. When allowed, Umami records anonymous page views and actions such as "booking started" or "message sent", without cookies, without identifying you and without following you on other websites. Booking management links and their codes are never recorded.
You can change your choice at any time with "Privacy choices" at the bottom of every page. If your browser sends a Global Privacy Control signal, analytics stay off and we do not ask.
Emails we send
We only email you about what you asked for: your booking confirmation, a reminder before the call, changes to the call, and replies to your message. We do not send newsletters or promotional emails unless you have expressly agreed to receive them, and every such email would include a way to unsubscribe.
How we protect it
Information is sent over encrypted connections and stored with access limited to the owner. Booking management links use long random codes, and only a fingerprint of each code is stored. If an incident involving your personal information presents a risk of serious injury, we will notify you and the Commission d'accès à l'information as the law requires.
Your rights
- Access the personal information we hold about you and get a copy of it, including in a structured, commonly used technological format.
- Have it corrected if it is inaccurate, incomplete or ambiguous.
- Withdraw your consent, or ask us to stop disseminating it.
- Know how it was collected and who has had access to it.
Send your request to mansour.kebe@asalustudio.com. We will answer within 30 days. If you are not satisfied with our answer, you can contact the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).
Changes to this policy
If we change this policy, we will update the date at the top of this page. Significant changes will be shown on the website before they take effect.