Privacy

Privacy policy

Last updated: 25 May 2026.

rxncor.studio collects only the information needed to respond to enquiries, manage bookings, protect private galleries, and deliver photo files to clients.

Information collected

Depending on how you use the site, this may include:

• your name, email address, phone number, and enquiry details
• shoot request details such as date, time, location, and notes
• client profile details used to assign galleries
• gallery access settings, album names, dates, expiry dates, and passwords stored as secure hashes
• photos, previews, thumbnails, and album ZIP files uploaded for delivery
• download logs, including file, album, time, email if provided, and IP address
• technical information needed for security, rate limits, sessions, and troubleshooting

How information is collected

Information is collected when you submit a contact form or shoot request, sign in to a client gallery, unlock a private album, download a file, or when gallery files are uploaded through the admin tools.

Please avoid sending sensitive information through forms unless it is genuinely needed for the shoot or gallery request.

How it is used

Information is used to reply to enquiries, review shoot requests, create and manage client galleries, protect private albums, provide downloads, keep basic delivery records, investigate errors, prevent abuse, and maintain the site.

Sharing and services

Personal information is not sold. Information is handled through trusted services used to run the website and gallery system, including Vercel for hosting, Supabase for database and authentication, and Cloudflare R2 for photo and ZIP storage. These services may process or store information in Australia, the United States, or other locations where their systems operate.

Storage

Gallery metadata, client records, access settings, enquiry records, and download logs are stored in Supabase. Photos, previews, thumbnails, and ZIP downloads are stored in Cloudflare R2. The website is hosted on Vercel.

Security

Admin access is restricted. Client and album passwords are not stored as plain text. Private downloads and previews use time-limited links where possible. No website can be guaranteed completely secure, but reasonable steps are taken to protect client galleries and account access.

Cookies and sessions

This site uses essential cookies and similar browser storage for admin login, client login, gallery unlock sessions, cookie preference storage, rate limiting, and basic security. These are required for private gallery delivery and cannot be switched off inside the site.

Optional analytics or performance cookies are not loaded unless you allow optional cookies. If you reject optional cookies, the public website remains available and private galleries continue to work using only essential session cookies. The site does not currently use advertising cookies or third-party ad tracking.

Retention

Gallery files and client records are kept while they are needed for delivery, support, record keeping, and future client access. Albums may have expiry dates. You can request removal or correction of your personal information at any time.

Access, correction, and removal

You can ask to access, correct, or remove personal information connected to you or your gallery. Some records may need to be kept where required for security, dispute handling, or business records.

Data incidents

If a data incident affects personal information, reasonable steps will be taken to investigate, reduce harm, and notify affected people or relevant authorities where required.

Privacy complaints

If you are concerned about how your information has been handled, email the contact address below with the details. The concern will be reviewed and answered as soon as reasonably possible.

Contact

For privacy questions, access requests, correction requests, or removal requests, email malinduherath@rxncor.studio.