Privacy Policy and Data Protection

Data we collect

• Contact and booking details you send us: name, email, phone, session date, location, package and any notes or messages.
• Payment and order details: payments are processed by Stripe. We receive the payment status and, for print orders, the shipping address. We never see or store your full card number.
• Client gallery data: the photos from your session and the selections and notes you make in your private gallery.
• Messages you write in the website chat assistant.
• Technical data: IP address, browser, device and pages visited, collected through cookies and similar technologies (see Cookies below).

How we use it

We do not sell or rent your personal data.

• To answer your inquiries, confirm and manage your booking and deliver your photos.
• To process payments, refunds and print orders.
• To send emails related to your session (confirmations, reminders, gallery links).
• To show the website in your language. We use your IP address to detect your country for this purpose only.
• To measure how the website is used and improve it.
• To comply with legal, tax and accounting obligations.

Who we share it with

Only with service providers that help us run the business and only for that purpose: website and database hosting (Lovable and Supabase), payments (Stripe), transactional email, the chat assistant's AI provider, language detection (ipapi), and, when enabled, analytics and advertising tools such as Google Analytics and the Meta Pixel. We may also share data when the law requires it.

Cookies

The website stores small pieces of information in your browser, such as your language choice and gallery drafts. When analytics or advertising tags are enabled, Google and Meta may set cookies to measure visits and the performance of our ads. You can block or delete cookies in your browser settings; the website will keep working.

Your photos and boudoir sessions

Client galleries are private and only accessible with your link and access code. Boudoir and other private sessions are never published or shared without your explicit written permission.

How long we keep data

We keep booking and contact records while they are needed to provide the service and for as long as tax and accounting laws require. Client galleries stay available for the period agreed for your session; after that they may be archived or deleted. You can ask us to delete your data sooner (see Your rights).

Security

We use reputable providers with encrypted connections (HTTPS) and access controls. No system is completely secure, but we work to protect your data and limit who can see it.

Your rights

You can ask us to see, correct or delete your personal data, or to stop sending you emails, by writing to hello@kevinmumaw.com. We will reply within 30 days. If you live in a place with specific privacy laws, such as the European Union or California, you may have additional rights and we will honor them.

Children

This website is not directed to children under 13 and we do not knowingly collect their data. Sessions with minors are booked and authorized by a parent or legal guardian.

Changes and contact

We may update this policy; the date at the top shows the latest version. Questions: hello@kevinmumaw.com, Kevin Mumaw Photography, San Juan, Puerto Rico.