Privacy Policy

Who We Are

byduran is a photography and visual storytelling studio operated by Diana Duran, based in Bali, Indonesia and available for commissions worldwide. This Privacy Policy explains how we handle personal data submitted through this website — byduran.co.

We are committed to handling your information with the same care and discretion we bring to every image we make. We collect only what is necessary, we never sell your data, and we make it easy for you to access, correct, or remove it.

For any privacy-related questions, contact us directly at sayhi@byduran.co.

Data We Collect

Information you provide directly

When you use the contact form on this site, you may provide:

• Your name
• Your email address
• Project details and timeline (contact form only)
• Type of project you are enquiring about

None of these fields are mandatory except where marked with an asterisk (*). You choose what you share.

Information collected automatically

When you visit byduran.co, standard server and analytics data may be logged, including:

• IP address (anonymised where possible)
• Browser type and version
• Pages visited and time spent
• Referring website
• Device type and screen size

This data is used in aggregate to understand how the site is used and to improve the experience. It is not linked to your identity.

How We Use Your Data

We use the information you provide solely for the following purposes:

• To respond to your enquiry — your name and email allow us to reply personally and discuss your project.
• To improve the website — aggregate, anonymised analytics help us understand which content is most useful.

We do not use your data for advertising, profiling, automated decision-making, or any purpose beyond what is stated here.

Third-Party Services

To operate this website we use the following third-party services. Each has its own privacy policy, linked below.

Formspree

Contact form submissions are processed by Formspree. When you submit the contact form, your data is transmitted to Formspree's servers and forwarded to our inbox. Formspree stores submissions for a limited period as part of its service. We do not use Formspree for any purpose other than receiving your message.

Google Fonts

This site loads typefaces from Google Fonts. This may cause your IP address to be transmitted to Google. We use Google Fonts solely for typographic rendering; no advertising or tracking is associated with this.

Instagram

Links to our Instagram profile (@byduran) are present on this site. Clicking them takes you to Instagram's platform, subject to Instagram's Privacy Policy. We do not embed Instagram feeds or use Instagram pixels on this site.

Cookies

This website does not use advertising cookies, tracking pixels, or third-party marketing cookies.

The site may use a minimal session cookie to maintain technical functionality (for example, to prevent repeated form submissions). This cookie contains no personal data and expires when you close your browser.

You can configure your browser to refuse or delete cookies. Refusing cookies will not affect your ability to read or navigate this site.

Data Retention

We keep your data only for as long as necessary:

• Contact form enquiries — retained in email for as long as the client relationship is active or the project remains open. Enquiries that do not lead to a project are deleted within 12 months.
• Analytics data — aggregate and anonymised; no individual retention period applies.

Your Rights

Depending on your location, you may have rights under the EU General Data Protection Regulation (GDPR), the Indonesian Personal Data Protection Law (PDPL), or other applicable legislation. These may include:

• Right of access — to request a copy of any personal data we hold about you.
• Right to rectification — to correct inaccurate or incomplete data.
• Right to erasure — to request deletion of your data where it is no longer necessary.
• Right to restriction — to limit how we use your data in certain circumstances.
• Right to object — to object to processing based on legitimate interest.
• Right to withdraw consent — you may withdraw consent for any processing based on consent at any time.

To exercise any of these rights, email sayhi@byduran.co. We will respond within 30 days.

Children's Privacy

This website is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has submitted data to us, please contact us and we will delete it promptly.

Photography sessions involving minors are arranged solely with the consent of a parent or legal guardian, and images of minors are handled under a separate model release process.

Policy Changes

We may update this Privacy Policy from time to time — for example, if we add new services or if legislation changes. The date at the top of this page reflects the most recent revision.

Continued use of this website after any change constitutes your acceptance of the updated policy.

Contact Us

For any questions, requests, or concerns about this Privacy Policy or how your data is handled:

• Email: sayhi@byduran.co
• Instagram: @byduran
• Based in: Bali, Indonesia

We aim to respond to all privacy enquiries within 5 business days.