Privacy Policy

Who we are

The controller of your personal data is Valeria Kirichenko, trading as The Morning After Studio, a wedding content service operating from Portugal (morningafterstudio.com). For any privacy question or request, write to wedding@morningafterstudio.com.

What we collect

• Enquiry details you type into our enquiry form: your names, email address, wedding or event date (or that it is not confirmed yet), venue or location, chosen package, optional extras, additional events and your message. Names, email, date (or “not confirmed”) and package are required so we can reply with availability; everything else is optional. Without the required fields we cannot answer your enquiry through the form — you can always email us instead.
• Emails you exchange with us after the enquiry.
• Technical data that any website receives when you visit: IP address, browser type and the pages requested, processed by our hosting provider to deliver and protect the site.
• Analytics data — only if you accept it: Google Analytics 4 uses cookies with online identifiers and records usage information such as pages viewed, approximate location derived from your IP address, device and browser type, and a few actions such as viewing the packages or sending an enquiry. This is not anonymous data. We never send your name, email, wedding date, venue or message to Google.

Please avoid including sensitive personal information (such as health or religious details) in the form unless it is genuinely necessary for planning.

Why we use it and our lawful basis

• Answering your enquiry and preparing a quotation — steps taken at your request before a contract (GDPR Art. 6(1)(b)).
• Performing our contract if you book, including planning, filming and delivery (Art. 6(1)(b)).
• Keeping invoices and accounting records required by Portuguese law (Art. 6(1)(c)).
• Keeping the website secure and preventing spam enquiries — our legitimate interest in operating a safe service (Art. 6(1)(f)).
• Website analytics — your consent (Art. 6(1)(a)), which you can withdraw at any time.

Sending an enquiry does not sign you up to marketing, does not authorise us to publish any wedding imagery, and does not authorise us to pass your details to photographers or videographers we recommend — we will ask you first before any introduction that shares your details. We do not make decisions about you by automated means.

Who receives your data

• Lovable (website hosting and backend, with infrastructure from Cloudflare and Supabase) — hosts the site and stores enquiries in a database that is not publicly accessible.
• Lovable email service — delivers the enquiry notification to our inbox.
• Apple iCloud Mail — our mailbox for wedding@morningafterstudio.com.
• Google Ireland Limited / Google LLC — Google Analytics, only with your consent. Google acts as our processor under the Google Ads Data Processing Terms. Data may be transferred to the United States; Google states it relies on the EU–US Data Privacy Framework and Standard Contractual Clauses.
• Google Fonts — our typefaces are loaded from Google’s servers, which receive your IP address when the page loads.
• Dropbox — some portfolio images and films are loaded directly from Dropbox, which receives your IP address and browser details when that media is requested. No Dropbox player or account login is embedded.

Some of these providers are based outside the European Economic Area or use infrastructure outside it. Where that happens, transfers rely on the safeguards the provider offers (such as adequacy decisions or Standard Contractual Clauses). We do not sell your personal data.

How long we keep it

• Enquiries that do not lead to a booking: kept only for as long as needed to handle your enquiry and any follow-up correspondence, then deleted.
• Booked clients: kept for the duration of the contract and as long as needed to resolve any claims; invoices and accounting records are kept for the period required by Portuguese tax law.
• Analytics: Google Analytics user and event data is kept for 2 months. Aggregated reports may remain available after that.
• Server and security logs and backups: kept for short periods by our hosting providers according to their own schedules.

Your rights

You can ask to access, correct or delete your personal data, to restrict or object to its processing, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time without affecting earlier processing — for analytics, use Cookie settings. Write to wedding@morningafterstudio.com; we answer within one month. You also have the right to complain to the Portuguese data protection authority, the CNPD: www.cnpd.pt.

Security

Enquiries are sent over HTTPS, checked on our server and stored in a database that visitors cannot read, list or change. Access is limited to the studio. No system is perfectly secure, but we take reasonable measures to protect your information.

Changes

We will update this page if our practices change and revise the date above.