Privacy Policy

Who we are

This site is operated by Alexander Mils, a photographer based in Belgrade, Serbia. It is where you enquire about and book photography sessions.

For anything in this policy — including requests to see, correct or delete your information — contact [email protected].

What we collect, and why

We only collect what is needed to answer an enquiry or deliver a session.

When you send an enquiry

Your name, email address, optional phone number, the subject you pick, and your message. We use this to reply to you and to keep a record of the enquiry.

When you book a session

Your name, email address, optional phone number, any notes you add, the session you chose, and the date and time. We use this to hold the slot, deliver the session, and keep a record of the booking.

When you pay

Card details are entered on Stripe's own checkout page and are handled entirely by Stripe. They never reach our servers and we never see them. We receive only a confirmation that the payment succeeded, the amount, and a payment reference.

When you submit a form

Forms are protected against spam and automated abuse by Cloudflare Turnstile. When active it may process your IP address and browser signals to decide whether you are a real visitor.

Who else processes your data

We do not sell your information, and we do not share it for advertising. We use a small number of service providers who process it on our behalf:

• Stripe — payment processing, and for the card transaction itself.
• Resend — delivery of the confirmation and reply emails.
• Google Calendar — confirmed bookings are added to a private calendar so the studio knows what is scheduled.
• Cloudflare — hosting, content delivery, and the Turnstile bot check.
• Our hosting provider — where the site and its database run.

Each of these only receives what it needs to perform its function, and each is bound by its own privacy terms.

Cookies

This site sets very few cookies, and none of them are for advertising.

• Admin session cookie — set only when the studio signs in to the dashboard. Ordinary visitors never receive it.
• Turnstile cookie — set after you pass the bot check on a form, so you are not challenged repeatedly. Only present when Turnstile is active for your visit.
• Checkout cookies — set by Stripe on its own checkout page while you are paying.

If analytics or advertising tools are ever enabled on this site, they will set their own cookies and this policy will be updated to name them before that happens. As of the date below, none are active.

You can block or delete cookies in your browser settings. The site will still work — only the admin dashboard needs a cookie to stay signed in.

How long we keep it

Enquiries are kept while they are useful for following up. Booking and payment records are kept for longer, because they are financial records. Emails are kept in the mail account they were sent to.

Your rights

You can ask us to show you the information we hold about you, correct it, or delete it. You can also object to how we use it. Write to [email protected] and we will respond within 30 days.

If you believe your information has been handled badly, you have the right to complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection, or to the data protection authority where you live.

Security

The site runs over HTTPS. Booking data is stored in a database that is not publicly accessible, and payment secrets are encrypted at rest. No system is perfect, but we keep the surface as small as we can — which is why card details are never handled by us at all.

Children

This site is not directed at children. Family sessions are booked by a parent or guardian, and we ask that you do not submit information about a child without being responsible for them.

Changes

If this policy changes, the date below will change with it.

This policy describes what this website actually does with your information, and is written to be read rather than to be impressive. It is a plain description of our practices and is not a substitute for legal advice.