Privacy Policy

1. General

Cinehansoo ("we") operates a snap photography service in Kota Kinabalu, and we take your personal information seriously. This policy explains what we collect on our website, how we use it, and when we delete it. We follow the principles set by applicable laws, and any changes to this policy will be announced on this page.

2. What We Collect and How

Inquiry form

For photoshoot consultations, we ask you to provide:

• Name
• Contact channel and your ID on that channel
• Preferred date
• Product of interest
• Number of people
• Resort you are staying at
• Preferred time of day
• Special requests
• The page language at the time of inquiry

If children come along for a family session, information about them is provided by the booking adult and is used only to prepare and run that session.

Member accounts

• Email address and name
• For social login, the profile information provided by the OAuth provider (email, name, profile image)
• For email sign-up, we never store your password in plain text — only a hash generated with argon2.

Cookies

• A language preference cookie (NEXT_LOCALE)
• A cookie to keep you signed in (login session)
• Analytics and advertising cookies set by the tools listed in section 6. In the EEA, the UK and Switzerland these are not set without your prior consent.

3. Purposes of Use

We use the collected information only for the purposes below. If you are in the EEA, the UK or Switzerland, the legal basis under the GDPR is shown in brackets.

• Photoshoot consultation and booking-related communication [performance of a contract, or steps taken at your request before entering into one]
• Creating and managing member accounts and keeping you signed in [performance of a contract]
• Remembering your language preference [our legitimate interest in showing the site in the language you chose]
• Usage analytics and service improvement [your consent, see section 6]

4. Social Login (OAuth) Notice

You can sign up with a Google, Kakao, or Naver account. In that case we receive the email, name, and profile image provided by the respective provider and use them to create your account. We do not collect any additional information from the provider. Each provider's handling of your data is governed by its own privacy policy.

5. Email Verification Notice

If you sign up with an email and password, we send a 6-digit verification code to your email address once, to confirm that you own it. The code is used solely for that verification.

6. Analytics Tools

To improve our service, the following tools may be used when configured:

• Google Analytics 4 (GA4)
• Meta Pixel
• Microsoft Clarity (page interaction statistics)

These tools are used for visit statistics, page interaction statistics and ad performance measurement. In the EEA, the UK and Switzerland we do not load Meta Pixel or Microsoft Clarity at all without your prior consent, and Google Analytics runs without setting cookies. Data processing by each tool is governed by the respective provider's policy.

7. Retention and Deletion

• Collected information is stored on servers located in Malaysia and is never sold to third parties. We administer the servers ourselves; the hosting provider supplies the machines only, as our processor.
• Information you send from the EEA, the UK or Switzerland is transferred to those servers in Malaysia. Malaysia is not covered by an EU adequacy decision.
• The transfer is instead covered by the European Commission's Standard Contractual Clauses (SCCs). Both our hosting provider and Cloudflare, below, operate under data processing agreements that include the SCCs. Ask us at the address below and we will send you a copy.
• Traffic to this website passes through Cloudflare's network. Cloudflare acts as our processor for the connection data this requires (such as your IP address), and it temporarily caches public files such as the photos on this site on servers in many countries. Inquiry contents and account information are not cached and are held only on the servers in Malaysia.
• Your photos are available through a delivery link for 30 days from the day we send it. The original files are kept for 1 year from the shoot date and then destroyed; we will delete them sooner if you ask.
• Member information is deleted without delay when you close your account.
• Inquiry records are kept for 1 year after we finish answering, then deleted. No law requires us to keep them that long; we keep them only because people sometimes come back with follow-up questions.
• If a booking is actually made, contract and payment records are kept for 5 years as required by Korean e-commerce consumer protection law.

8. Your Rights

You may at any time request access to your personal information, its correction, its erasure, the restriction of its processing, or its portability, and you may object to its processing. Where processing is based on your consent, you may withdraw that consent at any time; withdrawal does not affect the lawfulness of processing carried out before it. Contact us at the address below and we will handle your request without delay.

If you are in the EEA, the UK or Switzerland, you also have the right to lodge a complaint with the data protection supervisory authority of your country of residence.

9. Contact

• Data controller: 신의한수스냅, trading as Cinehansoo · Representative: Yun Se Hyun
• Korean business registration number: 597-02-00828
• Address: 13 Saimdang-ro 8-gil, Seocho-gu, Seoul, Republic of Korea
• Email: [email protected]