Privacy Policy
Last updated: 2026-09-16
This policy explains what data fotografopuntacana.com collects, what we use it for, who we share it with, and what rights you have. It applies to this website (Babula Shots — Michal Babula), operated independently from fotografosantodomingo.com.
1. Data controller
Michal Babula, operating as Babula Shots, based in Punta Cana, Dominican Republic. For any question about your data, contact us via WhatsApp (see the Contact page) — that's currently the channel we actively monitor.
2. What we collect
Inquiry form ('Reservar' → inquiry): your name, email, phone (optional, only with your explicit consent), approximate event date, the service you're interested in, any notes you write, and the page language. Deposit booking ('Reservar' → pay deposit): your name, email, phone, the package you chose, the session date and time, the full price and the deposit amount. Your card details are entered directly into Stripe's secure form and never reach our servers; from Stripe we receive only the payment (and, if applicable, refund) identifiers and their status. On both forms we also log the referring page and UTM parameters, and a salted hash of your IP address — never the raw IP — used solely to rate-limit automated spam and abusive payment attempts.
3. What we use it for
To respond to your inquiry, check real availability for your date, take the deposit and confirm your booking, coordinate and deliver your photo session or wedding, handle refunds where applicable, and contact you via WhatsApp, email, or (only if you gave consent) phone. UTM/referrer data is used only to understand which marketing channels generate real inquiries and bookings.
4. Legal basis
For inquiries: your consent, given when you submit the form; for phone contact we ask for separate, explicit consent. For deposit bookings: performance of the photography service contract you are entering into (your phone number is used to coordinate the session). For spam and payment-abuse prevention: our legitimate interest in protecting the site.
5. Who we share it with
We don't sell your data. We share it only with the technical providers that run this site: Supabase (database), Stripe (deposit payment processing — see Stripe's privacy policy), Resend (sending emails), and Cloudflare (hosting and security). These providers may process data on infrastructure located outside your country. Statistics: we use Google Analytics 4 in Consent Mode with analytics storage denied by default — meaning no analytics cookies or persistent identifiers unless and until an explicit opt-in exists; Google receives aggregated, anonymous signals only. We use no advertising cookies and no social-media pixels (Meta Pixel, etc.).
6. How long we keep it
As a proposed general rule, we keep your inquiry data for as long as reasonably needed to respond to you, and for up to 24 months after your last contact with us, unless you ask us to delete it sooner. Paid booking records are kept for as long as accounting and tax obligations require. (These periods are a reasonable starting point, subject to review.)
7. Your rights
If you live in the EU or a country with similar protections, you have the right to access, correct, delete, or restrict the use of your data, to object to its processing, to data portability, to withdraw consent at any time, and to lodge a complaint with your country's data protection authority. To exercise any of these rights, message us on WhatsApp.
8. Children
This site isn't directed at children, and we don't knowingly collect data from minors without parental or guardian consent.
9. Changes to this policy
We may update this policy if our real practices change (for example, if we add a cookie banner or a new provider). The "last updated" date above reflects the current version.