Privacy & your photographs.
Updated 2 November 2026.
Who handles your information
Hakim Treasure manages this website and the information you share when enquiring about creative services. For access, correction, deletion or privacy questions, contact the studio using the contact details in your booking correspondence. You can also send a privacy enquiry through the website.
What we collect and why
Booking enquiries include your name, email, optional phone and location, preferred date, service and brief. We use these to respond to your request and take steps towards arranging your session. Confirmed session details and correspondence support delivery of the agreed service. The basis for handling your enquiry is taking steps at your request before a contract, and delivering an agreed session is based on that contract. We use limited security and spam checks for the legitimate interest of protecting the service. Please avoid sending sensitive personal information in your brief.
Private delivery and public work
Private galleries are assigned to your email address. Sign-in links verify access to your inbox; keep them private. Downloads and previews use temporary links. Anyone receiving a temporary file link can use it until it expires. Portfolio publication is a separate studio decision and requires appropriate permission; uploading to a private gallery never publishes it to the portfolio.
Providers and security
The service uses Supabase for authentication, database and storage, the configured hosting provider to serve the website, Resend for service emails, and Cloudflare Turnstile to reduce spam. Providers process information needed to provide those services. The studio must configure suitable regions and agreements before launch. No marketing mailing list or advertising tracking is built into this website.
Retention and deletion
Gallery availability lasts 90 days by default; your gallery and delivery email show its actual expiry. Access stops after that date (UTC). Expired collections are scheduled for permanent deletion after a further 30 days. Download and back up your files before expiry. The scheduled cleanup must be running for deletion to occur.
Unconfirmed, declined, completed or otherwise inactive enquiries are deleted after 12 months without an update. Confirmed bookings remain until the studio completes or otherwise closes them. Service email records are removed 30 days after creation; spam quota identifiers after two days. Provider logs and backups follow the provider’s configured retention schedule, and deleted information may persist in backups until they expire.
Cookies and your choices
Essential authentication cookies keep you signed in. Turnstile may use browser signals to check for automated submissions. This website does not add analytics or advertising cookies. You may request a copy or correction of your information and ask about erasure, restriction or objection where applicable. Where applicable, you can request your information in a portable format. You may object to processing based on legitimate interests; contact the studio to explain your circumstances. Providing contact details is necessary for us to respond to an enquiry; you do not need to submit a request to browse public work. We do not make automated decisions about accepting bookings. You can raise concerns with the UK Information Commissioner’s Office.