Privacy

What this covers

This note explains what Cecelia Photography does with your personal information, in line with the Protection of Personal Information Act 4 of 2013 (POPIA).

What is collected

When you send an enquiry: your name, email address, phone number if you give one, and whatever you write in the message.

When you create an account and book: the same, plus your session details, the brief you write, your booking history, invoices, agreements, and the photographs made at your session.

Technically, the site also records the IP address a request came from when you sign in, sign an agreement, or submit a form. This exists to stop abuse and to evidence a signature, not to profile you.

What it is used for

• Answering your enquiry.
• Arranging, confirming and running your session.
• Issuing invoices and agreements, and taking payment.
• Delivering your photographs and telling you before the gallery closes.
• Keeping the records a small business is required to keep.

Your information is never sold, rented, or handed to anyone for marketing.

Who else sees it

The web host that runs this site, the email provider that carries the messages, and PayFast, which processes card payments. PayFast receives your name, email address and the amount. Card details are entered on PayFast's own systems and never touch this site.

Cookies

One cookie, which keeps you signed in and holds your booking while you fill it in. There is no analytics, no advertising pixel, and no third-party tracking on this site, which is why you were not asked to dismiss a banner.

How long it is kept

Delivered photographs are removed from the server 30 days after delivery. Account details, invoices and agreements are kept for as long as the law requires records of a transaction to be kept, and then deleted.

Original photograph files are archived offline as part of the photographer's own portfolio and backup, unless you ask for them to be destroyed.

Your rights

You may ask for a copy of what is held about you, ask for it to be corrected, ask for it to be deleted, or object to how it is used. Write to studio@ceceliaphotography.co.za and you will get an answer within a reasonable time.

If you are not satisfied, you may complain to the Information Regulator of South Africa.

Security

Passwords are stored hashed and cannot be read by anyone, including the photographer. Your photographs are stored outside the public web folder and are only served to your signed-in account. The site runs over HTTPS.