Privacy Policy — BConcept Studio

Last updated: August 14, 2026

BConcept Studio (“we,” “us,” “our,” “BConcept”) operates bconceptstudio.com and provides self-photo studio, onsite/event photography, creative portrait, graduation portrait, photobooth, and product photography services in Naga City, Camarines Sur, Philippines.

This Privacy Policy explains what personal information we collect when you visit our website or book a session with us, why we collect it, how we use and protect it, and what rights you have over it. This policy is written to comply with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC).

By booking a session or using our website, you agree to the practices described in this policy.

---

1. Who We Are

For any privacy questions, concerns, or requests, contact us using the details above.

2. Information We Collect

a) Information you give us when booking

When you book a session with us (online, via Messenger, or in person), we may collect:

• Full name and phone number
• Email address
• Home or mailing address
• Payment/deposit details (see Section 5)
• For baby/newborn/kiddie sessions: the child’s birthday, weight, and mode of delivery (CS/normal), and the parent’s or customer’s birthday

We only ask for what a specific package genuinely requires — for example, delivery-related details are only collected for baby/newborn sessions, not for a standard self-photo booking.

b) Photos and video taken during your session

When you visit the studio, we capture (or you capture, for self-photo sessions) photos and/or video of you, your family, your pet, or your event. These are used to produce your prints/digital copies.

c) Website usage data

Our website uses Google Tag Manager, which may load analytics or advertising tools that collect standard technical data such as your IP address, browser type, device information, and pages visited, typically through cookies. See Section 8 (Cookies).

d) Messenger/social media

If you contact or book us through Facebook Messenger, Meta (Facebook’s parent company) processes that conversation under its own privacy policy, in addition to this one.

3. Sensitive Personal Information — Extra Care for Baby/Health-Related Details

Under the Data Privacy Act, information like mode of delivery (CS/normal) is considered sensitive personal information because it relates to health, and a child’s birthdate is information about a minor. This category of data gets stricter protection than ordinary contact details:

• We only collect it with your explicit, separate consent, given at the time of booking a baby/newborn/kiddie package.
• It is used only to help our photographers plan appropriate posing, safety precautions, and session timing (e.g., newborn posing safety depends on days since birth and delivery type) — never for marketing or profiling.
• It is not shared with any third party except staff directly involved in preparing for your session.
• You may decline to provide it, though this may limit our ability to safely plan certain newborn poses; our staff will advise you of alternatives.
• As the parent/guardian, you are providing this data on behalf of your child, and you may request its correction or deletion at any time (Section 9).

4. Photos Used for Marketing/Social Media — Separate, Opt-In Consent

We will never post your session photos publicly (on our website, Facebook, Instagram, or elsewhere) unless you have specifically said yes.

• At booking, you are asked a separate, explicit question: whether we may use your photos for marketing/social media purposes.
• If you say no (or leave it blank), your photos are used only to produce your own prints/digital files and are not posted anywhere.
• If you say yes, we may feature select photos on our social media pages or website to showcase our work.
• You can withdraw this consent at any time — even after photos have already been posted — by contacting us at bconceptgds@gmail.com or our phone numbers above, and we will take the post down and stop further use.

5. Payment Information

We accept cash on-site, GCash/bank transfer, and online card payments, and may require a booking deposit to confirm your slot.

• Cash and manual transfers (GCash/bank): We keep a record of the reference number and amount for booking/accounting purposes. We do not have access to your GCash or bank account credentials.
• Online card payments: These are processed through a third-party payment gateway. We do not store your full card number, expiry date, or CVV on our systems — the payment provider handles and secures that data under its own privacy and security standards.
• Deposit and payment records are kept for our bookkeeping and tax obligations (see Section 7).

6. Why We Collect Your Information (Purpose & Legal Basis)

We collect and use your information to:

• Confirm and manage your booking (contract necessity)
• Prepare appropriately for your specific session type, including safety planning for baby/newborn sessions (consent)
• Process payments and deposits (contract necessity)
• Deliver your prints/digital photos (contract necessity)
• Contact you about your booking, rescheduling, or promos you’ve opted into (consent)
• Feature your photos in marketing, only if you opted in (consent)
• Comply with tax, accounting, and legal recordkeeping obligations (legal obligation)
• Improve our website and services through basic analytics (legitimate interest/consent, per cookie settings)

7. How Long We Keep Your Information

• Booking and contact details: kept for as long as needed to fulfill your booking, plus a reasonable period afterward for customer service and rebooking purposes, or as required by law.
• Payment/transaction records: retained as required by Philippine tax and accounting regulations (generally several years).
• Sensitive baby/health-related details: retained only for as long as needed to complete your session, then securely deleted from active use unless you rebook and provide updated details.
• Marketing photos: retained until you withdraw consent or request removal.

8. Cookies and Website Tracking

Our website uses Google Tag Manager, which may set cookies or trigger other tracking tools (such as analytics) to help us understand site traffic and improve the website. These tools may collect data such as your IP address, device/browser type, and browsing behavior on our site.

You can control or disable cookies through your browser settings. Disabling cookies may affect how some parts of the website function, but you can still book a session by contacting us directly.

9. Your Rights Under the Data Privacy Act

As a data subject under RA 10173, you have the right to:

• Be informed that your personal data will be, is being, or has been processed
• Access your personal data that we hold
• Correct inaccurate or outdated personal data
• Object to certain processing, including marketing use of your photos
• Erase or block your personal data under certain conditions
• Withdraw consent at any time (e.g., for photo marketing use), without affecting the lawfulness of processing done before withdrawal
• Data portability, where applicable
• File a complaint with the National Privacy Commission (NPC) if you believe your rights have been violated

To exercise any of these rights, contact us at bconceptgds@gmail.com or the phone numbers listed above. We will respond within a reasonable time as required by law.

You may also lodge a complaint directly with the National Privacy Commission: privacy.gov.ph

10. Who We Share Your Data With

We do not sell your personal information. We may share limited data with:

• Payment gateway providers, to process online payments
• Meta/Facebook, if you book or message us via Messenger
• Google (via Google Tag Manager/Analytics), for basic website analytics
• Government agencies, when required by law (e.g., tax authorities)

We do not share your baby/health-related details or unposted session photos with any third party for marketing or advertising purposes.

11. Data Security

We take reasonable organizational, physical, and technical measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction, including limiting staff access to sensitive booking details to those who need it to prepare for your session.

No method of storage or transmission is 100% secure, but we work to protect your information to the best of our ability.

12. Children’s Information

We collect baby/child details (e.g., birthday, weight) only when a parent or guardian books a session on the child’s behalf and knowingly provides that information. We do not knowingly collect personal information directly from children without parental/guardian involvement.

13. Changes to This Policy

We may update this Privacy Policy from time to time, for example as our services or legal obligations change. The “Last updated” date at the top will reflect the most recent version. Significant changes will be communicated through our website or social media pages.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data: