Privacy policy

I'm Jess Magusara, a photographer in Makati and BGC. This page says what I collect when you book or work with me, why, where it's kept, and what you can ask me to do about it. I follow the Philippine Data Privacy Act of 2012 (RA 10173).

Last updated: 2 November 2026

Who is responsible for your data

I am. Jess Magusara, photographer, working on my own in Makati and BGC, Philippines. Write to jessmagusara@gmail.com. I handle privacy myself and act as my own data protection officer.

What I collect and why

When you send a booking request: your name, email, phone (if you give one), who will be in the photos, where you'd like the session, your notes, and your answer on sharing photos online. I use these to reply, quote, and plan your session.
When you ask a question: your name, email and message. I use them to answer you.
When you book: the quote, your signed contract (your typed name, the date and time, your IP address and browser details, and a fingerprint of the text), and your invoices. I keep these to make and prove our agreement.
When you pay: the screenshot or PDF you upload, the amount and the reference. I use them to check your payment.
Questionnaire answers: names and ages of the people in your photos, pets, and anything you tell me about the session. I use them to plan.
Your photos: the pictures I take at your session, including photos of children.
Sign-in details: your email, so you can open your client area.

I don't ask for more than I need. I don't sell your data and I don't send marketing email. The only emails you get are about your own booking.

Photos of children

Children's photos and details are in your gallery and questionnaire. By booking, you tell me you're the child's parent or guardian, or you have the family's permission. I only use children's images online if your photo-sharing answer allows it.

Where your data is kept

I use these services. Each handles your data for me and does not use it for its own purposes.

Supabase: the database for bookings, contracts, invoices and sign-in. It runs in Tokyo, Japan.
Cloudflare R2: private storage for your photos and proofs of payment, in Cloudflare's Asia-Pacific region.
Resend: sends the emails about your booking, from Tokyo, Japan.
Vercel: hosts this website.
Resend: also delivers the "Ask a question" form to my inbox.
Forward Email: passes emails sent to hello@jessmagusara.com on to my inbox.
Gmail: my inbox, where emails to jessmagusara@gmail.com arrive.

Your gallery link is private. Only you can open it after you sign in. Photos are fetched through links that expire within minutes. Payment details are never put in emails.

Analytics

The public pages of this site use Google Analytics to count visits and see which pages help people book. It doesn't get your name, email, or anything you type. On the booking and client-area pages it counts only steps, such as "request sent", and never your details or the web address with your ids in it. The admin area has no analytics. It sets a few cookies to tell visits apart, and no advertising cookies.

Only me, plus the services above while they work for me. I don't give your details to anyone else unless the law requires it. I only post your photos online if you said yes, or if you said "ask me first" and then agreed when I asked.

How long I keep it

Booking requests that don't go ahead: 6 months after the last message
Signed contracts and invoices: 5 years, because Philippine tax rules require it
Proofs of payment: 1 year after the balance is paid
Questionnaire answers: 1 year after your session
Your gallery and photos: online for 6 months after delivery. I email you 30 days and 7 days before it closes, and I can extend it if you ask. After that the files are deleted from the site. I may keep my own selected photos longer only if you said I may use them online.
Sign-in emails and logs: 12 months

Your rights

Under RA 10173 you can:

be told what I collect and why
ask to see the data I hold about you
correct anything that's wrong
object to how I use it, or withdraw your consent
ask me to block or delete it
ask for a copy in a usable form
claim compensation if you were harmed by misuse
complain to the National Privacy Commission (privacy.gov.ph)

Some records I must keep for legal and accounting reasons. I'll say which, and why, when I answer you.

How to ask

Signed in? Go to your account and choose "Download my data" or "Request deletion".

Not signed in? Use the request form or email jessmagusara@gmail.com. I may ask you to prove it's you before I act. I answer within 15 days.

If something goes wrong

If a breach could harm you, I'll tell you and the National Privacy Commission as the law requires.

Changes to this page

If I change this page in a way that matters, I'll update the date at the top and tell clients with an open booking.

Contact

Jess Magusara · jessmagusara@gmail.com

### Footer link

Privacy (already in the site footer; label unchanged)