Privacy notice

The short version

This site collects what an enquiry needs and nothing else. It sets no cookies, runs no advertising trackers, and sells or rents no personal data. This page is the full privacy notice (aviso de privacidad integral) required by the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP), published in the Diario Oficial de la Federación on 20 March 2025.

Who is responsible for your data (art. 15, fr. I)

TODO_LEGAL_NAME, with its domicile at TODO_DOMICILE, is responsible for your personal data. The person in charge of personal-data requests (art. 29) is TODO_PRIVACY_OFFICER, at TODO_EMAIL.

The data we process (art. 15, fr. II)

We do not ask for sensitive personal data (art. 2, fr. VI), such as health, religious belief or sexual preference, and we ask you not to include it in a message. A maternity session or a religious ceremony may reveal such a fact by its nature; that fact is used only to plan the session. TODO_SENSITIVE_DATA.

If you give us data about other people — a partner, guests, children — you confirm you may share it with us for the purposes below.

Why we use it (art. 15, fr. III)

Primary purposes, needed for the service you ask for:

1. Answering your enquiry and preparing a quote.
2. Booking the session and assigning a photographer, videographer or drone pilot.
3. Arranging permits, entry and venue access the session requires.
4. Delivering your photographs and video.
5. Invoicing and meeting tax and legal obligations.

Secondary purposes: none. We do not send newsletters or advertising, and we do not build profiles. Showing your photographs in our portfolio is a separate, optional consent described on the image rights page, and saying no changes nothing about your booking.

Who receives it, and where

Some service providers process data on our behalf, and two of them store it outside Mexico:

The photographer assigned to your session receives the data needed to work it: your name, phone number, date, time and location. TODO_PHOTOGRAPHER_ROLE.

Data is transferred to third parties only where the LFPDPPP allows it without your consent (art. 36) — to an authority or venue issuing a permit for your session, for example, because the transfer is needed for a contract in your interest (fr. IV), or where a law or a competent authority requires it (frs. I and V). Any other transfer would need your consent first. TODO_TRANSFER_CLAUSE.

Cookies and analytics

This site sets no cookies and stores nothing on your device. Cloudflare Web Analytics counts page views without cookies and without identifying you. That is why there is no cookie banner.

How to limit the use of your data (art. 15, fr. IV)

Write to TODO_EMAIL to ask us to stop contacting you, or to limit how your data is used or disclosed. We keep no marketing list to remove you from, and the request is honoured anyway.

Your ARCO rights (art. 15, fr. V)

You may access, rectify or cancel your personal data, or object to its use — the ARCO rights in LFPDPPP articles 21 to 26. Send your request to TODO_EMAIL with (art. 28):

1. Your name and a means of receiving our reply.
2. A document proving your identity, or your representative's identity and authority.
3. A clear description of the data concerned, unless you are asking for access.
4. The right you want to exercise, or what you are asking for.
5. Anything else that helps us locate the data.

We reply within 20 business days of receiving the request, and a request found valid is carried out within the following 15 business days; each period may be extended once by the same length where the case justifies it (art. 31). Exercising ARCO rights is free; only reproduction or delivery costs may be charged (art. 34).

Some data must be kept even after a cancellation request, for example invoices that tax law requires us to keep (art. 25).

Withdrawing your consent

You may withdraw your consent at any time, without retroactive effect (art. 7), by writing to TODO_EMAIL. Withdrawal may mean we can no longer provide a service that depends on the data.

If you are not satisfied

If we do not answer, or you disagree with the answer, you may file a request for protection of rights with the Secretaría Anticorrupción y Buen Gobierno, the authority that oversees this law (arts. 2, fr. XV, and 40). The request is filed within 15 business days of our reply, or once our deadline to reply has passed.

How long we keep it

Security

Data in transit is encrypted, and access is limited to the people who need it to do the work (art. 18). A security breach that significantly affects your rights is reported to you immediately (art. 19).

Children

Bookings are made by adults. A session involving minors — a family session, a quinceañera — is booked by a parent or guardian, who gives the data and decides separately whether any photograph may be shown publicly.

Changes to this notice (art. 15, fr. VI)

Changes are published on this page with a new review date, and anyone with an open booking is told by email.

Last reviewed: TODO_LEGAL_REVIEW.