1. Introduction and Our Privacy Commitment

MVN Photostudio (“we,” “us,” or “our”) is a photobooth and photography business dedicated to capturing your most memorable moments. We are committed to protecting the privacy and security of the personal data entrusted to us by our clients and guests, in full compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (“DPA”), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (“NPC”).

This Privacy Policy Statement (“Policy”) explains how we collect, use, store, protect, and dispose of your personal data when you engage our photobooth or photography services, visit our studio, or interact with us online. We encourage you to read this Policy carefully.

2. Scope of This Policy

This Policy applies to all clients, event guests, website visitors, and any individual whose personal data is processed by MVN Photostudio in connection with our:

• Photobooth rental and event photography services
• Studio photography sessions (portraits, family, commercial, etc.)
• Website and social media interactions
• Inquiries submitted via email, messaging platforms, or in-person

3. Personal Data We Collect

We collect only the minimum personal data necessary to provide our services. The categories of data we may collect include:

Category	Examples	Purpose
Identity Data	Full name, contact number, email address	Booking confirmation, service coordination, communication
Event Details	Event date, venue, type (birthday, wedding, corporate, etc.)	Service customization and delivery
Photos & Images	Photos and videos captured during sessions or photobooth use	Service fulfillment and optional client gallery delivery
Payment Data	Payment method, billing details (processed via secure channels)	Billing and transaction records
Communications	Messages, inquiries, feedback, and complaints	Customer support and service improvement
Website Data	Cookies, IP address, browsing behavior on our website	Website functionality and user experience improvement

4. Purposes for Collecting and Processing Personal Data

We process your personal data for the following lawful purposes:

• Service Fulfillment – To confirm bookings, coordinate sessions, and deliver outputs such as printed photos, digital galleries, or photobooth prints.
• Communication – To respond to inquiries, send booking confirmations, and provide updates relevant to your engagement with us.
• Billing and Payments – To process payments and issue official receipts or invoices.
• Portfolio and Marketing (with consent) – To feature photos on our website or social media platforms, only with your explicit consent.
• Legal Compliance – To meet obligations under applicable Philippine laws and regulations.
• Improvement of Services – To assess client satisfaction and improve our offerings based on feedback.

We will not use your personal data for any purpose that is incompatible with those stated above without obtaining your prior consent.

5. Photo and Image Retention Policy

Image Type	Retention Period	Action After Period
Photobooth prints & digital captures	7 days from event date	Permanently deleted; non-recoverable
Studio session photos (unedited)	30 days from session	Permanently deleted; non-recoverable
Edited / delivered gallery images	90 days after delivery	Permanently deleted unless extended with consent
Portfolio images (with consent)	Duration of consent or upon withdrawal	Removed upon request

6. Data Security Measures

MVN Photostudio implements appropriate organizational, physical, and technical security measures to protect your personal data against unauthorized access, disclosure, alteration, destruction, or loss.

Organizational Measures

• Designation of a Data Protection Officer (DPO) to oversee compliance
• Staff training on data privacy and confidentiality obligations
• Implementation of internal data privacy policies and procedures
• Access controls ensuring only authorized personnel handle personal data

Physical Measures

• Secure storage of physical records and printed media
• Restricted access to equipment containing personal data
• Secure disposal of physical records through shredding or destruction

Technical Measures

• Password-protected devices, systems, and cloud storage accounts
• Encrypted file transfers for delivery of digital photo galleries
• Regular software updates and use of reputable antivirus/security software
• Automatic deletion protocols aligned with our retention schedule

7. Sharing of Personal Data with Third Parties

We do not sell, trade, or rent your personal data to third parties. We may share your information only in the following limited circumstances:

• Service Providers – Trusted third-party vendors (e.g., printing labs, cloud storage providers, payment processors) engaged to support our services, bound by confidentiality agreements.
• Legal Obligations – When required by law, court order, or government authority under applicable Philippine law.
• With Your Consent – When you have expressly agreed to the sharing of your data for a specific purpose (e.g., publication of photos on social media).

Any third-party service providers we engage are required to implement adequate data protection measures consistent with the DPA.

8. Use of Cookies

Our website uses cookies – small text files automatically downloaded to your browser or device when you visit our site. Cookies help us:

• Remember your browsing preferences for a better user experience
• Analyze website traffic and usage patterns
• Ensure the website functions properly across visits

We do not use cookies to collect personally identifiable information. You may configure your browser to disable or delete cookies at any time; however, doing so may affect the functionality of our website. By continuing to use our website, you consent to our use of cookies in accordance with this Policy.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you are entitled to the following rights with respect to your personal data:

Right	Description
Right to be Informed	To know how your personal data is collected, used, retained, and disposed of.
Right to Access	To request a copy of your personal data held by us, and information on how it has been processed.
Right to Rectification	To correct any inaccurate, incomplete, or outdated personal data we hold about you.
Right to Erasure or Blocking	To request the deletion or suspension of processing of your data under grounds provided by the DPA.
Right to Object	To object to the processing of your personal data for purposes not directly necessary to provide our services.
Right to Data Portability	To receive your personal data in a structured, commonly used, and electronic format, where technically feasible.
Right to File a Complaint	To lodge a complaint with the National Privacy Commission (NPC) at www.privacy.gov.ph.
Right to Damages	To be indemnified for any damages sustained due to unauthorized or unlawful processing of your personal data.

To exercise any of the above rights, please contact our Data Protection Officer. We may require you to verify your identity before processing your request, to prevent unauthorized disclosure of personal data.

10. Data Breach Response

In the event of a personal data breach that poses a real risk of serious harm to data subjects, MVN Photostudio will:

• Contain and assess the breach as soon as reasonably practicable
• Notify affected data subjects without undue delay
• Report the breach to the National Privacy Commission (NPC) within 72 hours of discovery, in accordance with NPC guidelines
• Document all breach incidents and remediation steps taken

11. Data Protection Officer

MVN Photostudio has designated a Data Protection Officer responsible for overseeing compliance with this Policy and the Data Privacy Act of 2012. You may contact our DPO for any privacy-related concerns, requests, or complaints:

12. Changes to This Policy

MVN Photostudio reserves the right to update or revise this Privacy Policy Statement at any time. Any material changes will be posted on our website and, where appropriate, communicated to you directly. The date of the latest revision will always be indicated at the top of this document. Continued engagement with our services after any update constitutes your acknowledgment of the revised Policy.

13. Governing Law

This Privacy Policy is governed by Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission of the Philippines. Any disputes arising from this Policy shall be subject to the jurisdiction of the appropriate Philippine courts and the NPC.