This Privacy Policy explains how CTT MEDIA PRODUCTION INC collects, uses, stores and protects information when you visit the Photo Zone Studio site at photozonestudio.com, when you contact the booking desk, or when you book and attend a session on the studio floor. The site and the studio are operated by CTT Media acting for CTT MEDIA PRODUCTION INC, whose registered address is 5510 S Rice Ave, Houston - 77081-2131, United States (US). We have written this policy in plain language so that any client, visitor or vendor can understand what happens to information before giving any of it to us.
We handle information for a small working photo studio, not for a large data business. That means we collect only what a booking actually needs, we keep it for as long as a booking and the law require, and we do not sell it, rent it or trade it. This policy describes the categories of information we collect, the purposes we collect it for, the people we share it with, the choices you have, and the steps we take to keep it safe. It applies to every page of this website and to every service described on the services page, including zone bookings, light rig rounds, backdrop cycle weeks, portrait block days, product table sessions and darkroom print evenings.
The data controller for this website and for the studio floor is CTT MEDIA PRODUCTION INC. The company runs the Photo Zone Studio and provides photography production services from its Houston location. The company name, postal address and contact details are set out below and also appear on the contact page and in the footer of every page of this site.
CTT MEDIA PRODUCTION INC
5510 S Rice Ave
Houston - 77081-2131
United States (US)
Email: bookings@photozonestudio.com
Phone: +15624437606
The developer name associated with the design and build of this website is CTT Media. When you ask about anything connected to this website, including a request to access or delete information, you may address your request to the contact details above and the studio will route it to the right person inside the company.
This policy covers information collected through the website, through email and telephone contact with the booking desk, and through the delivery of studio services at the Houston floor. It does not cover a third party website that you may reach by following a link from this site, and it does not cover a service that a client chooses to run through another company.
The policy applies to prospective clients who send an enquiry, current clients who hold a booking, vendors who deliver paper or equipment to the studio, and casual visitors who read the pages of this website. Where the policy refers to you, it means any of those people.
If you are contacting us on behalf of a company or a crew, the policy still applies to the personal information that you share about yourself, and it applies to the personal information of colleagues that you share with us with their permission.
We collect a small set of categories that a working studio needs in order to answer an enquiry, hold a zone and run a session. The categories are described below.
This includes your name, email address, telephone number and, where relevant, the name of the company or crew you represent. We collect it when you write to the booking desk, call the studio, or send a message through the contact form.
This includes the zone you wish to book, the dates and hours you request, the paper tone you select, the number of people arriving, the equipment you plan to bring and any notes about the light you have in mind. Booking information is stored in the studio ledger and on the run sheet for the day.
Where a booking is invoiced, we keep the billing name, the billing address and the record of payment for accounting purposes. We do not store full card numbers on the studio systems. Card details are handled by the payment provider that processes the invoice.
We keep the emails, messages and notes exchanged with the booking desk so that we can answer follow up questions and so that a returning client gets the same setup as the last session.
Our hosting provider records standard technical details such as the requested page, the time of the request, the browser type and the approximate region of the request. These details are used to keep the site online and to detect abuse, and they are not used to build a profile of an individual visitor.
Where a client needs access to the side door outside standard hours, the desk keeps a short record of the access granted so that the door can be opened and closed responsibly.
Most information reaches us directly from you. You give it to us when you fill in the contact form, send an email to bookings@photozonestudio.com, call +15624437606, or talk to the desk at the studio. You also give it to us when you confirm a booking or update a run sheet.
Some information is generated as part of running the floor. The booking ledger produces a record when a zone is reserved, the email system produces a delivery record when a message is sent, and the payment provider produces a receipt when an invoice is settled.
A limited amount of technical information is generated automatically when your browser requests a page from our hosting provider. This is described in the section on website technical information above.
We do not buy personal information from data brokers, and we do not scrape contact details from social media. If a member of the studio team meets you at an event and notes your interest in a future session, that note is kept only if you agree to be contacted.
We use personal information for the purposes listed below. Each purpose is tied to a real task on the studio floor, and we do not process information for a purpose that is unrelated to the service you asked about.
We do not use personal information to make automated decisions that affect you, and we do not use information from this website to train a general purpose model.
Where data protection law requires a legal basis, we rely on one of the following. Where you have asked us to answer an enquiry or deliver a booking, we process the information because it is necessary to take steps at your request and to perform the agreement. Where we keep accounting records, we process the information because the law requires it. Where we send a studio note, we rely on your consent, and you can withdraw it at any time.
Where we keep the site secure, we rely on the legitimate interest of the company in protecting its website and its clients from abuse. We keep that interest balanced against your rights, and we collect only the technical details that are needed for the purpose.
If you are a client in a region that uses a different lawful basis structure, the equivalent basis applies. The studio will explain the basis for a particular processing activity if you ask.
The studio uses a small number of service providers to keep the site and the floor running. A website hosting provider keeps the pages online and records the technical details described above. An email provider delivers messages sent to the booking desk and keeps a delivery record. An invoicing provider issues receipts and stores the billing details that accounting requires.
Each provider is chosen for its security record, and each is asked to handle information only on the instructions of the company. Where a provider is outside the United States, the transfer is covered by the provider agreement and by the safeguards described in the section on international transfers.
The studio reviews its providers from time to time. If a provider is replaced, the new provider is bound by the same obligations, and the information it needs is limited to the task.
The studio floor produces photographs as its main work, and this section explains how those images are handled alongside the personal information described above. The studio keeps the frames it makes for a client in an archive so that a returning client can ask for a reprint or a different crop, and so that a product run can be compared across sessions.
Images of a person are released only in the way the booking agreement sets out. Where a client agrees that selected frames may be shown on the studio site or in a portfolio, the release is recorded with the booking, and the client can withdraw it at any time by writing to the desk. Frames that are not covered by a release stay in the archive and are used only to deliver the work.
Contact sheets and print records are filed with the booking. The studio does not use a client image in an advertisement or in a public portfolio without a recorded release. If the studio is asked to remove an image that a client no longer wishes to be shown, the desk will remove it from the site and confirm the removal in writing.
We keep information only as long as a booking, a legal obligation or a clear studio need requires. Enquiries that do not lead to a booking are kept for a short period so that the desk can follow up, and are then deleted. Booking records and run sheets are kept for the period that accounting and tax law require, which is generally several years after the end of the tax year.
Photograph archives are kept for as long as the client may reasonably ask for a reprint. A client can ask for an archive to be deleted, and the desk will confirm when the deletion is complete, subject to any record the studio must keep for accounting.
Website technical logs are kept for a short rolling period and are then overwritten. Correspondence is kept for as long as the related booking record is kept, and is then deleted.
When retention ends, information is deleted or made permanently unreadable. Paper run sheets are shredded, and digital records are removed from the active systems and from routine backups as the backup cycle turns over.
The studio keeps information behind access controls, and only the people who need a record to answer an enquiry or run a booking can open it. The booking ledger is protected by a password and a second factor, and the archive is stored on a drive that is not open to the public.
Messages to the desk travel over an encrypted connection, and the site is served over a secure connection. Paper records are kept in a locked cabinet at the studio, and the studio space is locked when the floor is closed.
We train the small team on handling client information, on recognising a suspicious message, and on the steps to take if a device is lost. If a security incident affects personal information, we will assess it promptly, take steps to contain it, and notify the affected people and any authority where the law requires it.
No system is completely secure, and we cannot promise that an incident will never happen. We can promise that we will act quickly, tell you honestly what occurred, and take the steps needed to reduce the risk to you.
You can ask to see the personal information the studio holds about you, and you can ask for a copy. You can ask us to correct information that is wrong or out of date. You can ask us to delete information that we no longer need, subject to any record the law requires us to keep.
You can ask us to restrict how we use information, and you can object to a use that is based on the legitimate interest of the company. You can ask for the information you gave us in a portable format. You can withdraw consent to a studio note at any time, and the desk will remove you from the list.
To make a request, write to bookings@photozonestudio.com or call +15624437606. The desk will confirm receipt, may ask a short question to verify that the request comes from you, and will answer within the period that the law allows. There is no charge for a reasonable request.
If you ask us to delete information and we must keep a small record for accounting, we will explain what is kept, why it is kept and how long it will stay.
The site and the studio services are intended for adults and for businesses. We do not knowingly collect personal information from a child under the age of thirteen through this website. If a portrait session includes a child, the booking is made and managed by a parent or a guardian, and the release for any image of a child is signed by that adult.
If you believe that a child has sent personal information to the desk without the consent of a parent or guardian, write to bookings@photozonestudio.com and the desk will delete the information promptly. We will not ask a child for information, and we will not use an image of a child in a public portfolio without a release signed by the parent or guardian.
The studio is based in Houston, Texas, and most information stays in the United States. Some service providers may process information in another country, for example where a hosting or email service runs data centres abroad. Where that happens, the provider is required to protect the information to a standard that is consistent with this policy.
Where the law requires a transfer mechanism, we rely on the standard contractual terms set by the provider or another approved mechanism. If you would like to know which mechanism applies to a particular provider, the desk will explain it on request.
This site may link to a third party page, for example a mapping service that shows the studio location or a payment page that settles an invoice. Those pages are run by another company and have their own privacy policy. We do not control what those pages collect, and we encourage you to read their policy before sharing information.
A link from this site does not mean that the studio endorses every practice of the third party. If you are unsure whether a page belongs to the studio, check the address in your browser and compare it with photozonestudio.com.
The studio sends a studio note only to people who have agreed to receive it. The note covers new paper tones, changes to the booking calendar and occasional open floor days. It is sent rarely, and each note includes a way to unsubscribe.
Booking messages and service messages are not marketing. If you hold a booking and the desk needs to confirm a time, send a run sheet or explain a change to the floor, those messages are sent because the service requires them, and they are not affected by an unsubscribe from the studio note.
We do not share an email list with another company, and we do not add a client to the studio note without an explicit agreement.
We may update this policy when the studio changes a service, a provider or a legal duty. When we update it, we post the new version on this page and change the date at the top. If a change is significant, the desk will add a short notice to the homepage for a reasonable period.
Please read this page again if you are about to share information with the studio after a long gap. The version that applies is the one posted when you share the information.
If you have a question about this policy, or if you want to make a complaint about the way the studio has handled information, write to bookings@photozonestudio.com or call +15624437606. The desk will record the complaint, ask any question needed to understand it, and answer within the period that the law allows.
If you are not satisfied with the answer, you may contact the data protection authority that applies to you. The studio will cooperate with a lawful investigation and will take steps to correct a problem that is found.
Contact for privacy matters
CTT MEDIA PRODUCTION INC, 5510 S Rice Ave, Houston - 77081-2131, United States (US). Email: bookings@photozonestudio.com. Phone: +15624437606.