Privacy Policy

This Privacy Policy describes how Nest Atelier ("we," "us," or "our") collects, uses, and protects information when you visit nestatelier.studio or book a session with us.

What we collect

• Booking & inquiry information. Name, email, phone (optional), session type, and the message you write into our contact or booking forms.
• Session details. Date, time, location, attendees, and any preferences you share with us before or during a shoot.
• Payment information. We do not store credit-card numbers ourselves. Deposits and balances are processed by our payment provider; we receive only confirmation that a payment occurred.
• Email correspondence. Messages you exchange with us, including any attachments, are retained in our inbox so we can serve you.
• Basic, cookieless analytics. We use Vercel Analytics, which records aggregated page-view counts without third-party cookies and without building a personal profile of you.

How we use it

We use this information to respond to inquiries, schedule and deliver photography sessions, send you images, process payments, and improve our website. We do not sell or rent your personal information to anyone.

How we store it

• Form submissions and bookings are stored in Supabase databases hosted in the United States.
• Email is sent and received through Resend. Inbound emails are retained at Resend for up to 30 days; copies are stored indefinitely in our own database until you ask us to remove them.
• Photographs are kept on professional cloud storage and on encrypted local drives. Final delivery galleries are typically retained for at least 90 days after delivery; we may keep image archives longer for our portfolio.

Third-party services

We rely on the following processors, each under their own privacy terms:

• Vercel — website hosting and analytics.
• Supabase — database, authentication, and file storage.
• Resend — transactional email delivery.
• Upstash — rate limiting on the contact form.

Children's information

Many of our sessions involve children. We collect their information (name, age, photographs) only with the consent of a parent or guardian, only for the purpose of the booked session, and we do not market to minors. Parents may request that we remove a child's images and information from our records at any time.

Your rights

Depending on where you live (including under the California Consumer Privacy Act and the EU/UK General Data Protection Regulation), you may have the right to:

• access the personal information we hold about you,
• correct inaccurate information,
• request deletion of your information,
• opt out of marketing emails (we don't currently send any), and
• lodge a complaint with your local data-protection authority.

To exercise any of these rights, send us a message through the contact form on our homepage. We will respond within 30 days.

Image release & portfolio use

By default, we may use a small selection of session images for our portfolio, website, and social channels. If you would prefer that your images not be used publicly, please tell us at booking — we will note your opt-out and honor it indefinitely. See our Terms of Use for the full photo-release language.

Changes to this policy

We will update this page when our practices change. The "Last updated" date at the top of the page reflects the most recent revision.

Contact

Questions about this policy? Send us a note via the contact form on our homepage and we will get back to you.