Legal
Privacy Policy
Last updated: July 2026
Information We Collect
We collect information you provide directly through our contact and booking forms, including: your name, email address, phone number, event date, and service preferences. We also collect payment information processed exclusively through Stripe (we never store card details). When you visit our website, we automatically collect technical data such as IP address, browser type, pages visited, and time spent — via Google Analytics 4, Microsoft Clarity, and Cloudflare.
How We Use Your Information
Your information is used to: • Respond to inquiries and coordinate photography services • Process bookings and payments • Send you updates about your session or event • Improve our website and user experience • Manage our internal business analytics (via our Athena analytics tool) We do not sell your personal data to third parties.
Facebook and Instagram Integration
We use the Meta Graph API to access data from our official Robi Photo Studio Facebook Page and Instagram account (@quinceanera_robistudio). Through this integration we access: • Post engagement metrics (likes, comments, reach) • Follower count and growth • Content performance analytics • Page insights This data is accessed exclusively for internal business analytics through our Athena system and is never shared with third parties. Users who interact with our Facebook Page or Instagram account are subject to Meta's Privacy Policy (facebook.com/policy). You may revoke our app's access at any time via Facebook Settings → Apps and Websites.
WhatsApp and Messaging Communications
We may communicate with you via WhatsApp Business for booking inquiries, appointment reminders, and service updates. By initiating contact with us via WhatsApp, you consent to receiving responses through that channel. • We do not initiate unsolicited promotional messages • You may opt out at any time by replying STOP or notifying us directly • Message content is not stored beyond what is necessary to fulfill your request • Messaging infrastructure may be provided by Twilio or Meta • Data is handled per WhatsApp's and Twilio's Privacy Policies We do not share WhatsApp communications with third parties.
Photographs of Minors
Our photography services frequently involve minors (quinceañeras and similar events). We adhere strictly to the following: • All session photographs are the exclusive property of the client's family • Written parental or guardian consent is required before using any image of a minor for portfolio or marketing purposes • We do not publish photographs of minors on social media without explicit written authorization • Photographs of minors are never used to train AI models • Our website does not knowingly collect personal data from children under 13 (COPPA compliance) For questions about photos of your minor, contact us at [email protected].
Cookies and Tracking Technologies
Our website uses the following technologies: • Google Analytics 4 — measures website traffic and user behavior (anonymized) • Microsoft Clarity — records session heatmaps for UX improvement (anonymized) • Cloudflare — provides security, performance, and DDoS protection We do not use advertising or retargeting cookies. You can disable cookies in your browser settings at any time. Disabling cookies may affect some website functionality.
Third-Party Services
We use the following third-party services, each with their own privacy policies: • Stripe — Payment processing (stripe.com/privacy) • Google Analytics 4 — Website analytics (policies.google.com/privacy) • Microsoft Clarity — UX analytics (privacy.microsoft.com) • Meta (Facebook & Instagram) — Social analytics (facebook.com/policy) • Cloudflare — Security & CDN (cloudflare.com/privacypolicy) • Twilio — Messaging infrastructure (twilio.com/legal/privacy) • Hetzner Cloud — Hosting (hetzner.com/legal/privacy) We do not share your personal information beyond what is necessary to operate our services.
Data Retention
We retain your data for the following periods: • Contact and booking inquiries: 3 years from last contact • Payment and transaction records: 7 years (required by law) • Photography files: Until requested for deletion by the client • Website analytics data: Per each provider's retention policy (typically 14–26 months) • WhatsApp/messaging: Duration of the service engagement You may request earlier deletion at any time — see 'Your Rights' below.
Your Rights
Depending on your location, you may have the following rights: • Right to Access — Request a copy of the data we hold about you • Right to Correction — Request correction of inaccurate data • Right to Erasure — Request deletion of your data • Right to Portability — Receive your data in a portable format • Right to Object — Object to processing for direct marketing • Right to Restrict Processing — Limit how we use your data California residents (CCPA): You have the right to know what personal information is collected and to opt out of the sale of personal information (we do not sell data). To exercise any of these rights, contact us at [email protected]
User Data Deletion
You may request deletion of your personal data at any time: • Email [email protected] with subject: "Data Deletion Request" • We will confirm receipt within 3 business days • Deletion will be completed within 30 days For Facebook/Instagram data: Go to Facebook Settings → Privacy → Apps and Websites → Find "athena-agent" → Remove. Note: Some data may be retained for legal compliance (e.g., payment records required by tax law).
Data Security
We implement appropriate technical and organizational measures to protect your data: • All data transmitted via our website is encrypted with SSL/TLS • Payment processing is handled by Stripe (PCI-DSS Level 1 certified) • Servers are hosted on Hetzner Cloud with enterprise-grade security • Access to personal data is restricted to authorized personnel only • API credentials and tokens are stored securely and never exposed publicly In the event of a data breach affecting your rights, we will notify you and relevant authorities as required by law.
Children's Privacy
Our website and digital services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at [email protected] and we will delete it promptly. For photography services involving minors, see "Photographs of Minors" above.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will: • Update the "Last Updated" date at the top of this page • Post a notice on our website • Notify you by email if you are an active client Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.
Contact
For any questions, concerns, or requests related to this Privacy Policy: 📧 Email: [email protected] 🌐 Website: https://robistudio.com 📍 Location: Miami, Florida, United States Business hours: Mon–Fri 9am–6pm | Sat–Sun 10am–5pm (by appointment) We aim to respond to all privacy-related inquiries within 5 business days.