Our business &
your privacy

• LOL is a photography business operated by Michael Anthony Pruneda as a sole proprietor.
• The business owner is responsible for handling personal information relating to enquiries, photography, production and delivery under this policy.
• Our business address and contact details appear above.

When you enquire

• For enquiries, we collect your name, contact details, company, preferred date, location and group size, intended photo use, message, safe contact instructions for a proposal, reference number, submission time and consent record.
• We use these to respond, quote, arrange dates, clarify requirements and prevent abusive submissions.

After you book

• After you engage us, we handle contract, invoice and payment records, photographs, video and production details to arrange the shoot, produce and deliver your work, handle revisions, settle payments and keep legally required records.
• Do not enter card numbers, identity documents or unnecessary health information in the enquiry form.

Who replies

• Enquiries are saved in our intake database and emailed to Michael, the operator, and Shun, the photographer.
• Shun handles replies for all photography services.
• Michael joins corporate photography meetings as an observer.

Discreet proposal contact

• For proposals, we check your requested safe contact method, address, time and subject before contacting you.
• The form does not send you an automatic email reply.
• Please keep the reference number shown after submission.
• Sending an enquiry does not confirm a booking.

Services & contractors

• We use Sites / Cloudflare for the website and intake database, and Google Gmail for notifications.
• These providers process information needed to operate those services.
• Where we engage photography or editing contractors, we share only the information they need and confirm purpose, confidentiality, retention and deletion conditions.

Third parties & overseas processing

• We do not provide personal data to third parties without consent except where permitted by law, including applicable rules for outsourced processing.
• Information may be processed or stored outside Japan depending on the services used.
• We review these arrangements and provide information and obtain consent where legally required.
• Contact us for further information about providers and safeguards.

• The enquiry form does not process payments.
• We use Stripe for card payments.
• After you accept the quote, we confirm the total including tax, currency and payment deadline and provide a Stripe payment page for your booking.
• Stripe handles card details; we do not collect card numbers through LOL forms or email.
• LOL handles names, contact details, invoice information, payment status, refunds and related transaction records for the contract and settlement.

Permission to publish

• Booking a shoot and allowing publication are separate decisions.
• Before the shoot we ask about website use; before publication we confirm permission from the people pictured for the selected work, intended use and any names shown.
• Declining does not change the price or shoot.
• We do not publish if permission is unanswered or pending, and we confirm social media and advertising use separately.
• For proposals, the partner's permission is sought after the surprise; the booking customer's permission alone does not authorize publication.

Advertising & removal requests

• We do not use enquiry details to build advertising audience lists.
• Please contact us to request a change or removal of published work.
• We will check the channels we control and explain the scope and outcome of our response.

Protecting your information

• Intake administration requires authentication and notification recipients are limited to the designated handlers.
• Enquiry records are not publicly accessible.
• We use HTTPS.
• If a data incident is identified, we investigate, take necessary protective steps and make reports and notify affected people as required by law.

Preventing abusive submissions

• To prevent duplicate or excessive submissions, we generate comparison values from IP and email addresses.
• Our intake records do not store raw IP addresses.
• Hosting and protection providers may still process connection information.

• To understand how enquiries reach us, we record the source category, predefined LOL advertising or referral link codes, and the type of landing page with your enquiry.
• We keep only these codes in tab-scoped session storage for up to 30 minutes across page navigation.
• We do not store your name, email or form contents in browser storage.
• Google Analytics and advertising tags are not currently installed.
• We use these records to evaluate our marketing, not to create advertising audience lists.

Enquiry and contract records

We retain enquiry, contract, billing and related records as needed to respond, settle payments and meet recordkeeping requirements, then delete information no longer needed.

Finished work and downloads

• The customer download period is three months from final delivery.
• We retain finished deliverables long-term in LOL's Google Drive to handle redelivery enquiries and support, and periodically review access and the need for retention.
• Permanent storage and redelivery after the deadline are not guaranteed.

Original files and backups

• Original files (RAW), editing files and their backups are normally deleted three months after final delivery.
• Where needed for outstanding revisions, disputes or similar matters, we limit extended retention to the necessary purpose and period.

When we delete information

• When reviewing deletion, we check Drive, working devices, backups and relevant notification emails.
• Where records must be retained, we explain why and keep only what is necessary.
• Version history and backups held by external services follow their respective retention and deletion procedures.

Requests & how to contact us

• Contact anthony1232123@gmail.com to request notice of purpose, access to your retained data or third-party disclosure records, correction, addition, deletion, cessation of use or third-party disclosure, or to raise a complaint.
• Include your name, request, safe reply instructions and reference number if available.
• A reference number is not required.

Verification, response & fees

• We verify identity or authority as needed and respond without undue delay in accordance with applicable law.
• We explain any additional verification needed; do not send identity documents with your first message.
• If we cannot fulfil a request, we explain why.
• We currently charge no request fee.

We update the date on this page when our handling changes and obtain consent for changes where required by law.