Privacy.

Creative Light Studio (“we”, “us”) is a photography and videography studio operated by Youssouf Sooba, based in New York City. This Privacy Policy explains how we handle personal information collected through creativelightnyc.com and during the services we provide.

For any privacy question, write to contact@creativelightnyc.com.

We only collect what we need to do the work:

• Contact form data — name, email, phone, project type, preferred date/time, address (street, city, state, ZIP, country) and the message you write. Submitted only when you press “Send the brief”.
• Booking data — name, email and the time slot you pick, captured through Cal.com when you reserve a session.
• Session deliverables — the photos and videos we make for you, plus any reference material you share with us during production.
• Address auto-complete — the text you type into the address fields on the booking page is sent to OpenStreetMap Nominatim to plot a location on the globe. Nothing is stored on our side from that lookup.
• Server logs — when you visit the site, our host (Vercel) records standard request data: IP address, user-agent, timestamp, requested URL. Used for security and uptime, not tracking.

We do not use third-party advertising trackers, cross-site cookies, or behavioral pixels. There is no Google Analytics, Meta Pixel, TikTok Pixel, or similar on this site at this time.

• To reply to your inquiry and quote your project.
• To confirm bookings, send calendar invites, and prepare for shoots.
• To deliver finished photos and videos and to handle payment.
• To showcase select work on the public site, social channels, or commercial reels — only with your consent. By default we ask before publishing identifiable images.
• To keep the website secure and online.

We do not sell your data. We rely on the following service providers to operate the studio. Each is bound by their own privacy policy:

• Vercel Inc. — website hosting and serverless functions. (policy)
• Resend (Resend.com) — delivers your contact form submission to our inbox at contact@creativelightnyc.com. (policy)
• Cal.com Inc. — handles the booking calendar embedded on /book. Captures name, email and the chosen time. (policy)
• OpenStreetMap Foundation (Nominatim) — the address-to-coordinates lookup that drives the booking globe. (policy)
• Namecheap, Inc. — domain registrar for creativelightnyc.com.
• Google LLC — only if you choose to email us from a Gmail address, in which case Gmail receives your message.

We never transfer personal data to a processor that does not offer at least equivalent privacy protection to that described in this policy.

• Inquiries that do not convert — we delete the email after 12 months of inactivity.
• Booked projects — correspondence and deliverables are kept for 5 years for accounting, dispute, and re-print purposes, then archived or deleted on request.
• Server logs — rotated automatically by Vercel within 30 days.
• Published portfolio images — remain online for as long as the work is showcased, unless you ask us in writing to take a specific image down.

Regardless of where you live, you can email contact@creativelightnyc.com to:

• See a copy of the personal data we hold about you.
• Correct anything that is inaccurate.
• Have your data deleted (where we are not legally required to keep it).
• Withdraw consent to display your image on this site or our social channels.
• Receive your data in a portable format.

If you are in the EU/UK and believe we have mishandled your data, you can also complain to your local data protection authority. If you are in California, you have the rights described in the CCPA/CPRA and we will honor them on the same email above.

This site uses no advertising cookies and no analytics cookies. The embedded Cal.com booking widget may set a small number of functional cookies that are strictly necessary to keep your selected time slot while you complete the booking flow. You can block them at the browser level; the rest of the site will still work.

We do not knowingly collect data from children under 13. If a parent or guardian believes their child has sent us information through this site, please contact us and we will delete it.

We may revise this policy from time to time. When we do, we update the effective date below. Material changes will be flagged on the homepage for at least 30 days.

Effective date: May 1, 2026.