Privacy Policy

Who We Are

byduran is a photography and visual storytelling studio operated by Diana Duran, based in Bali, Indonesia and available for commissions worldwide. This Privacy Policy explains how we handle personal data submitted through this website — byduran.co.

We are committed to handling your information with the same care and discretion we bring to every image we make. We collect only what is necessary, we never sell your data, and we make it easy for you to access, correct, or remove it.

For any privacy-related questions, contact us directly at hello@byduran.co.

Data We Collect

Information you provide directly

When you use the contact form or newsletter signup on this site, you may provide:

• Your name
• Your email address
• Project details, timeline, and budget (contact form only)
• Type of photography service you are enquiring about

None of these fields are mandatory except where marked with an asterisk (*). You choose what you share.

Information collected automatically

When you visit byduran.co, standard server and analytics data may be logged, including:

• IP address (anonymised where possible)
• Browser type and version
• Pages visited and time spent
• Referring website
• Device type and screen size

This data is used in aggregate to understand how the site is used and to improve the experience. It is not linked to your identity.

How We Use Your Data

We use the information you provide solely for the following purposes:

• To respond to your enquiry — your name and email allow us to reply personally and discuss your project.
• To send the newsletter — if you subscribe, we use your email to send occasional dispatches about new work, journal entries, and photography notes. You can unsubscribe at any time.
• To improve the website — aggregate, anonymised analytics help us understand which content is most useful.

We do not use your data for advertising, profiling, automated decision-making, or any purpose beyond what is stated here.

Third-Party Services

To operate this website we use the following third-party services. Each has its own privacy policy, linked below.

Formspree

Contact form submissions are processed by Formspree. When you submit the contact form, your data is transmitted to Formspree's servers and forwarded to our inbox. Formspree stores submissions for a limited period as part of its service. We do not use Formspree for any purpose other than receiving your message.

Brevo (formerly Sendinblue)

Newsletter subscriptions are managed by Brevo. When you subscribe, your email address is stored in our Brevo account. Brevo is used exclusively to send the byduran newsletter. You can unsubscribe from any email we send, and your address will be removed promptly.

Google Fonts

This site loads typefaces from Google Fonts. This may cause your IP address to be transmitted to Google. We use Google Fonts solely for typographic rendering; no advertising or tracking is associated with this.

Instagram

Links to our Instagram profile (@byduran) are present on this site. Clicking them takes you to Instagram's platform, subject to Instagram's Privacy Policy. We do not embed Instagram feeds or use Instagram pixels on this site.

Cookies

This website does not use advertising cookies, tracking pixels, or third-party marketing cookies.

The site may use a minimal session cookie to maintain technical functionality (for example, to prevent repeated form submissions). This cookie contains no personal data and expires when you close your browser.

If you use the newsletter form, Brevo may set a cookie to track whether you have already subscribed. This is a functional cookie and is limited to that purpose.

You can configure your browser to refuse or delete cookies. Refusing cookies will not affect your ability to read or navigate this site.

Data Retention

We keep your data only for as long as necessary:

• Contact form enquiries — retained in email for as long as the client relationship is active or the project remains open. Enquiries that do not lead to a project are deleted within 12 months.
• Newsletter subscriptions — retained until you unsubscribe. Unsubscribing removes your address from all future mailings immediately.
• Analytics data — aggregate and anonymised; no individual retention period applies.

Your Rights

Depending on your location, you may have rights under the EU General Data Protection Regulation (GDPR), the Indonesian Personal Data Protection Law (PDPL), or other applicable legislation. These may include:

• Right of access — to request a copy of any personal data we hold about you.
• Right to rectification — to correct inaccurate or incomplete data.
• Right to erasure — to request deletion of your data where it is no longer necessary.
• Right to restriction — to limit how we use your data in certain circumstances.
• Right to object — to object to processing based on legitimate interest.
• Right to withdraw consent — for newsletter subscriptions, you may withdraw at any time by clicking the unsubscribe link in any email.

To exercise any of these rights, email hello@byduran.co. We will respond within 30 days.

Children's Privacy

This website is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has submitted data to us, please contact us and we will delete it promptly.

Photography sessions involving minors are arranged solely with the consent of a parent or legal guardian, and images of minors are handled under a separate model release process.

Policy Changes

We may update this Privacy Policy from time to time — for example, if we add new services or if legislation changes. The date at the top of this page reflects the most recent revision. If we make a material change that affects how we use your data, we will notify newsletter subscribers directly.

Continued use of this website after any change constitutes your acceptance of the updated policy.

Contact Us

For any questions, requests, or concerns about this Privacy Policy or how your data is handled:

• Email: hello@byduran.co
• Instagram: @byduran
• Based in: Bali, Indonesia

We aim to respond to all privacy enquiries within 5 business days.