Privacy policy

What we collect

• When you request a booking: your name, email address, phone number (optional), whether you're booking as an individual or a business, the type of shoot, your preferred dates and times, the location, the details you share about your shoot, and your preferred language.
• When you send us a message: your name, email address and message.
• When you visit the site: one cookie that remembers your language. We don't use advertising or tracking cookies.
• To stop spam, our forms use Cloudflare Turnstile, which may process technical details such as your IP address and browser information to tell people apart from bots.

Why we use it

We use your information to respond to your request, plan and photograph your session, send confirmations, quotes and invoices, deliver your photos, and keep the business records the law requires. We don't sell your information, and we don't use it for unrelated marketing.

Who we share it with

We share information only with the service providers that run this website, and only as much as they need:

• Supabase (database and file storage), with servers in the United States (Ohio)
• Vercel (website hosting), with servers in the United States and other countries
• Resend (email delivery), in the United States
• Cloudflare (spam protection), on its global network

Storage outside Canada

Because these providers are based outside Canada, your information is stored and processed in the United States and may be accessed by authorities there under the laws of that country. We choose providers that protect data with encryption and access controls.

How long we keep it

We keep booking and invoicing records for as long as our business and tax obligations require, generally six years. Booking requests that don't go ahead, and contact messages, are deleted when they're no longer needed, and within two years at most.

How we protect it

Only Bo Creative can see booking requests and messages. The site uses encrypted connections (HTTPS), the database only lets the business owner read private information, and our accounts are protected with strong passwords and two-factor authentication.

Photos of you

We may show selected photos from your session in our portfolio and on social media. If you'd rather not appear, tell us before or after your shoot and we'll leave those photos out or remove them.

Your rights

You can ask to see the personal information we hold about you, ask us to correct it, withdraw your consent, or ask us to delete it when we're not legally required to keep it. Withdrawing consent may mean we can't complete a booking. Email us and we'll respond within 30 days.

If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Changes to this policy

If we change this policy, we'll update this page and the date at the top.