Privacy Policy

1. Who controls your data

LIMPHOTO PRODUCTIONS LTD, trading as THE STUDIO, is the controller of personal data collected through this booking portal.

2. Data we collect

We collect the information needed to provide studio services: your name, email address, telephone number, optional Instagram username, booking date and time, selected service, payment status, booking history, shoot requirements and messages you send us. A person making a booking may provide a photographer’s telephone number or Instagram username so the session can be associated with that photographer’s studio history. We may also process limited technical and security logs when you use the portal.

Continuous CCTV video surveillance operates inside the studio. Recordings may contain images of clients and their guests. The cameras are used to protect people, premises and equipment and to investigate security, safety or damage incidents.

Card details are entered directly into Viva.com Smart Checkout and are not stored by THE STUDIO.

3. Why we use it

• To create, confirm, change and cancel bookings and to provide the booked service.
• To collect deposits, balances and refunds and keep legally required accounting records.
• To send confirmations, payment requests and service reminders.
• To protect the calendar, prevent misuse and maintain the security of the portal.
• To answer customer-service and data-protection requests.

We rely on performance of a contract, compliance with legal obligations and our legitimate interests in operating and protecting THE STUDIO. Where consent is required, it may be withdrawn at any time.

4. Service providers and disclosures

We share only the data necessary for the relevant service with providers supporting hosting, communications, accounting and payment processing. Online payments are processed by Viva.com under its own payment and privacy terms. CCTV recordings are not used for advertising and are disclosed only when reasonably necessary for an incident, legal claim, insurance matter or request from a competent authority. We do not sell personal data.

5. Retention and security

Booking, transaction and invoice records are retained for the period required by applicable accounting and tax law. CCTV recordings are kept only for the shortest period reasonably necessary for security and incident review, unless a specific incident or legal obligation requires longer retention. Other personal data is kept only for as long as needed for the purpose for which it was collected. We use access controls, encrypted connections and restricted administrative access to protect the information.

6. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction or portability of your personal data and may object to certain processing. You may also withdraw consent where processing is based on consent.

Send requests to thestudiolimassol@gmail.com. You may lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus.

7. Cookies and automated decisions

The portal uses only essential browser storage and security mechanisms needed for booking and account access. We do not use advertising cookies or make decisions about customers solely by automated means.