1. Who We Are
Crafted in Focus ("we", "us", "our") is a photography and videography service operated by a small team of young creatives. We can be contacted through the booking form on this website.
For the purposes of the General Data Protection Regulation (EU) 2016/679 ("GDPR"), we act as the data controller for personal data collected via this website.
2. What Personal Data We Collect
We collect the following personal data when you submit a booking request:
- Full name — to identify you and personalise our communication
- Email address — to confirm your request and communicate with you
- Phone number — optional, for quick contact regarding your event
- Event details — date, location, type of service, and any notes you provide
We do not collect payment information, location data, or any special category data.
3. How We Use Your Data
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Processing and responding to your booking request | Art. 6(1)(b) — Performance of a contract / pre-contractual steps |
| Communicating with you about your enquiry | Art. 6(1)(b) — Performance of a contract |
| Storing your consent preferences (cookies) | Art. 6(1)(c) — Legal obligation (ePrivacy Directive) |
4. How Data Is Stored
This website currently operates without a server. All booking request data you submit is stored exclusively in the browser's localStorage on the device where the form is submitted. Data is not transmitted to, or stored on, any external server.
This means:
- Your data does not leave your device unless you use a shared/public computer
- Data persists until localStorage is cleared by you or the browser
- If you clear your browser data, all stored booking information is permanently deleted
5. Cookies & Local Storage
We use browser storage technologies as follows:
5.1 Strictly Necessary Storage
These are required for the website to function and cannot be disabled.
| Name | Purpose | Type | Duration |
|---|---|---|---|
cif_gdpr |
Stores your cookie consent preferences | localStorage | Until cleared |
cif_auth |
Admin session (staff only) | sessionStorage | Session |
cif_bookings |
Your submitted booking request | localStorage | Until cleared |
5.2 External Content (Optional)
If you consent, we load resources from third-party services:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Google Fonts | Display Playfair Display and Poppins typefaces | Google Privacy Policy ↗ |
| Picsum Photos | Demo placeholder images in the portfolio | picsum.photos ↗ |
When you load these resources, your IP address and browser information are transmitted to those third-party services and are subject to their respective privacy policies.
You can change your preferences at any time using the Cookie Settings link.
6. Data Retention
Because all data is stored locally in your browser, retention is controlled by you:
- Clearing browser site data removes all locally stored information immediately
- We do not retain copies of your booking data on any server
- If you require confirmation that your data has been deleted, please contact us
7. Your Rights Under GDPR
As an EU/EEA resident, you have the following rights regarding your personal data:
- Right of access — You can request a copy of your personal data we hold
- Right to rectification — You can request correction of inaccurate data
- Right to erasure ("right to be forgotten") — You can request deletion of your data. Since data is stored in your browser, you can do this directly by clearing localStorage. You may also contact us.
- Right to restrict processing — You can request we limit how we process your data
- Right to data portability — You can request your data in a structured, machine-readable format
- Right to object — You can object to processing based on legitimate interests
- Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time via Cookie Settings
To exercise any of these rights, please use the booking form to send us a request, or manage your data directly in your browser settings.
8. International Transfers
If you consent to external content, Google Fonts may transfer your IP address to Google servers, which may be located outside the EEA. Google LLC participates in the EU-U.S. Data Privacy Framework. See Google's Privacy Policy for details.
9. Children's Privacy
This website is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has submitted personal data, please contact us so we can take appropriate steps.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page indicates the most recent revision. We encourage you to review this policy periodically.
11. Complaints
If you have concerns about how we handle your personal data and are not satisfied with our response, you have the right to lodge a complaint with your national data protection authority. In Romania, this is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) — www.dataprotection.ro ↗.