DRAFT — for review before launch. This is not a final legal notice. Details that still need confirmation are listed below.
01 / Privacy contact
This draft covers the SHOTBYNZ Book Us enquiry form. For privacy questions or requests, contact shotbynz19@gmail.com.
02 / Information you provide
The Book Us form collects your name, email address, selected service, car or project, location and message. Your Instagram handle and preferred date are optional. Required fields help us understand and reply to your enquiry; without them, the form cannot be submitted. Please do not include sensitive personal information or unnecessary information about other people.
03 / Why we use it
We use your information to reply, discuss your project and arrange the next steps you request. The proposed legal bases are steps before an agreement for shoot enquiries, and legitimate interests for general replies and spam prevention. These will be checked before launch. Enquiries are not added to marketing lists.
04 / Delivery and protection
The form is built to send all submitted details through Resend to our Google Gmail inbox at shotbynz19@gmail.com. Your email is used as the reply address. Live delivery is not yet configured. The website does not keep a database of enquiry messages.
Upstash Redis is used to limit repeated submissions. It stores short-lived counts linked to protected versions of your email address and, if enabled, your IP address—not the contents of your enquiry. The form also checks submissions and blocks common spam attempts. Email credentials stay on the server.
The live hosting provider may keep connection and security logs. Its identity and settings still need confirmation. If you choose Instagram instead, its own privacy rules apply.
05 / Retention
Enquiry emails should be kept only for the enquiry and necessary follow-up. The deletion period still needs to be agreed before launch; automatic inbox deletion is not currently set up.
The form’s spam counters expire after one hour. Retention of email copies, provider delivery records, hosting logs and backups still needs confirmation.
06 / Your rights
Under GDPR, you can request access to your data, corrections, deletion, limits on its use or a portable copy, where applicable. You can also object to use based on legitimate interests.
Send requests to shotbynz19@gmail.com. We may need to verify your identity. Responses are normally due within one month; any permitted extension will be explained.
You can also complain to Romania’s ANSPDCP or another relevant EU data-protection authority.
07 / Before launch
Final review must confirm who is legally responsible for the data and the required contact disclosures, the legal bases, the deletion schedule, and the live providers’ terms and settings. Any handling of data outside the EEA and the protections required for it must also be checked.
This draft will be completed after those points are verified.