Privacy.

Creative Light Studio (“we”, “us”) is a photography and videography studio operated by Youssouf Sooba, based in New York City. This Privacy Policy explains how we handle personal information collected through creativelightnyc.com and during the services we provide.

For any privacy question, write to contact@creativelightnyc.com.

We only collect what we need to do the work:

• Booking brief — name, email, phone, company, the craft and package you pick, your preferred date, the place and the address or venue, and the message you write. Submitted only when you press “Send the brief” and transmitted to the studio by e-mail through Resend.
• Call booking data — name, email and the time slot you pick, collected by Cal.com. Cal.com is opened on request in a modal window when you choose to book the 20-minute call; nothing loads from Cal.com until then.
• Session deliverables — the photos and videos we make for you, plus any reference material you share with us during production.
• Server logs — when you visit the site, our host (Vercel) records standard request data: IP address, user-agent, timestamp, requested URL. Used for security and uptime, not tracking.

We do not use third-party advertising trackers, cross-site cookies, or behavioral pixels. There is no Google Analytics, Meta Pixel, TikTok Pixel, or similar on this site at this time.

• To reply to your inquiry and quote your project.
• To confirm bookings, send calendar invites, and prepare for shoots.
• To deliver finished photos and videos and to handle payment.
• To showcase select work on the public site, social channels, or commercial reels — only with your consent. By default we ask before publishing identifiable images.
• To keep the website secure and online.

We do not sell your data. We rely on the following service providers to operate the studio. Each is bound by their own privacy policy:

• Vercel Inc. — website hosting and serverless functions. (policy)
• Resend (Resend.com) — delivers your booking brief to our inbox at contact@creativelightnyc.com. (policy)
• Cal.com Inc. — handles the 20-minute call calendar, opened on request in a modal window from /book. Captures name, email and the chosen time. (policy)
• Namecheap, Inc. — domain registrar for creativelightnyc.com.
• Google LLC — only if you choose to email us from a Gmail address, in which case Gmail receives your message.

We never transfer personal data to a processor that does not offer at least equivalent privacy protection to that described in this policy.

• Inquiries that do not convert — we delete the email after 12 months of inactivity.
• Booked projects — correspondence and deliverables are kept for 5 years for accounting, dispute, and re-print purposes, then archived or deleted on request.
• Server logs — rotated automatically by Vercel within 30 days.
• Published portfolio images — remain online for as long as the work is showcased, unless you ask us in writing to take a specific image down.

Regardless of where you live, you can email contact@creativelightnyc.com to:

• See a copy of the personal data we hold about you.
• Correct anything that is inaccurate.
• Have your data deleted (where we are not legally required to keep it).
• Withdraw consent to display your image on this site or our social channels.
• Receive your data in a portable format.

If you are in the EU/UK and believe we have mishandled your data, you can also complain to your local data protection authority. If you are in California, you have the rights described in the CCPA/CPRA and we will honor them on the same email above.

This site uses no advertising cookies and no analytics cookies. If you open the Cal.com call booking in its modal window, Cal.com may set a small number of functional cookies that are strictly necessary to keep your selected time slot while you complete that booking. They are set only once you open the modal. You can block them at the browser level; the rest of the site will still work.

We also set two first-party cookies of our own: cls-lang (your language choice, EN or FR) and cls-region (your pricing and contact region, New York or Conakry). They store only those two preferences, contain no identifier, are not used for tracking or advertising, and expire after one year. You can change them at any time with the EN/FR and New York/Conakry switches on the site, or delete them in your browser. To choose sensible defaults, we also read the country that our hosting provider (Vercel) attaches to each request from your IP address; that country code is used for the current request only and is not stored.

We do not knowingly collect data from children under 13. If a parent or guardian believes their child has sent us information through this site, please contact us and we will delete it.

We may revise this policy from time to time. When we do, we update the effective date below. Material changes will be flagged on the homepage for at least 30 days.

Effective date: May 1, 2026.