PRIVACY

Privacy policy

Last updated: September 17, 2026

Masahito Yoshida Photography treats your personal information, photographs, and films with care.

01

Information collected

The inquiry form collects your name, email address, inquiry details, and optionally your phone number, preferred dates, and location. If you book a session, additional information needed for communication, the agreement, photography, and delivery may be collected.

02

How information is used

Information is used to reply, arrange the date and session, manage the agreement, photograph, deliver, provide aftercare, and operate the service safely. It is not used for unrelated advertising or sold as a mailing list.

03

Storage and deletion

Inquiry information is reviewed for retention as a rule 12 months after the response is complete. Records reasonably needed for Booking, an agreement, payment, accounting, legal obligations, or dispute handling follow their own formal retention authority. Cloudflare D1 does not currently have an automatic deletion process triggered 12 months after completion, so this policy does not promise automatic deletion from every location after 12 months. Connection data used against spam is irreversibly transformed and only the most recent hour is used for decisions. Records older than 24 hours are deleted during the next submission process.

04

Third parties and service providers

Personal information is not provided to third parties without consent unless required by law. Cloudflare, including Turnstile, is used for site delivery, security, and spam prevention; Cloudflare D1 stores inquiry information; and Resend delivers notifications and confirmation emails.

05

Publishing photographs and films

Photographs or films are published on the website, social media, advertising, or portfolios only according to the photography agreement or separate confirmation. Sending an inquiry does not constitute consent to publication.

06

Security and spam prevention

Measures include encrypted communication, input validation, submission limits, and Cloudflare Turnstile spam checks. You do not need to allow analytics to use the inquiry form.

07

Analytics

Google Analytics is used to improve the site only after you explicitly allow it. The operating policy is to retain user- and event-level data for 14 months; the actual Google Analytics property setting is managed in Google’s administration interface. Google may receive pages viewed, referrer, device and browser type, approximate region, and link interactions. URL queries and hashes, your name, contact details, inquiry text, and booking or inquiry identifiers are not sent. Advertising storage, signals, and personalization remain disabled.

08

Changing your choice

Your analytics choice is stored in this browser on this device and can be changed at any time through “Analytics settings” in the footer. The Google Analytics tag is not loaded until you allow it.

09

Booking feature

The booking feature is not currently available to the public. If future booking adds information or service providers, this policy and the on-screen notice will be updated before launch.

10

Privacy requests

For confirmation of purpose, access, correction, deletion, restriction of use, or another privacy question, use the inquiry form and select “Personal information or privacy,” or contact me on LINE. Deletion is not unconditional; requests are handled appropriately according to applicable law and the information actually held. Only the minimum confirmation needed to identify the requested data safely may be requested; no passport or driver’s-license upload is requested. The internal target is an initial response within 14 days, and an update will be provided if investigation or verification needs more time.