Who we are
Rivas Photo & Film ("we", "us") is a photography and film business based in Los Angeles, California. This policy covers rivasphotoandfilm.com. Questions and requests go to randy@rivasphotoandfilm.com.
What we collect
Inquiry form. When you send an inquiry we receive what you type: your name, your partner's name, email address, phone number (optional), your date, location, guest count, which collection interests you, how you found us, and your message. We use this to reply to you and, if you book, to plan and deliver your elopement or wedding. The legal basis is taking steps at your request before entering a contract, and our legitimate interest in answering you.
Spam protection. The form uses Cloudflare Turnstile, which checks that a person, not a bot, is submitting. Turnstile may process your IP address and browser signals for that purpose only.
Server logs. Our host, Cloudflare, keeps standard request logs (IP address, pages requested, browser type) for security and performance. We do not use these to identify you.
Nothing else. There are no accounts, no passwords, and no payments on this site. We do not sell personal information and we do not share it with advertisers.
Cookies and local storage
We do not set tracking cookies and we do not run advertising pixels. The site stores two small flags in your browser's local storage: whether you have already seen the opening animation, and whether you found the hidden egg. These never leave your device and you can clear them in your browser settings.
Films are hosted on Vimeo and load only when you press play. When you do, Vimeo may set its own cookies under Vimeo's privacy policy. We embed with Vimeo's "do not track" option.
Where your information lives
Inquiries are stored in a database on Cloudflare's network and a copy is emailed to us through Resend, our email provider. Both act on our instructions as processors. Our own email and photo tools may also hold your information once we are working together.
How long we keep it
Inquiries that do not lead to a booking are deleted 24 months after we receive them. If you book, we keep your details for the life of our working relationship and for as long as tax and record-keeping rules require afterwards. Photographs and films are kept as part of our portfolio under the terms of your contract.
Your rights
Wherever you live, you can ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. California residents have these rights under the California Consumer Privacy Act, and residents of the European Union, the United Kingdom and Switzerland have them under the GDPR and equivalent laws. Email randy@rivasphotoandfilm.com and we will respond within 30 days. We will never treat you differently for exercising these rights.
We do not sell or share personal information for cross-context advertising, so there is nothing to opt out of. We do not knowingly collect information from anyone under 18.
Security
The site is served over HTTPS only, with security headers that block scripts and embeds we have not approved. Database access and email keys are held by us alone. If we ever learn of a breach affecting your information we will tell you without undue delay.
Changes
If this policy changes we will update the date at the top. Substantive changes will be noted here for 30 days.
