— Privacy Policy —
What we keep,
and what we let go.
A plain field guide to the small set of details we hold on your behalf — written so a real person can read it without a magnifying glass.
Effective 06 June 2025 · Last updated 26 April 2026
We are Narra Tree Creatives — a small photo booth business based in Jaro, Iloilo City, serving the Panay Island and Guimaras. This page explains what information we collect when you visit our site, sign in with Facebook or Instagram, or reserve a date with us, and how we look after it.
We try to keep as little as we need, hold it only for as long as it is useful, and never sell it. If anything below is unclear, write to us at narratreecreatives@gmail.com and we will answer.
Hold what is needed. Return what is asked. Forget what is no longer useful.
The small set of details we hold on your behalf.
We only ask for what is needed to plan an event, get in touch, and run the studio safely. The information we keep falls into four small drawers:
i.
Identity & Contact
- Full name
- Email address
- Mobile number
- Profile photo (only when you sign in with Facebook or Instagram)
ii.
Event Details
- Event date, type, theme, and venue address
- Package and add-on selections
- Notes you write to us about the day
iii.
Account & Sign-in
- A unique account identifier from your provider (Facebook or Instagram)
- Login session cookies stored in your browser
- Last sign-in timestamp
iv.
Site Usage
- Anonymous traffic patterns (pages viewed, broad device type)
- Server logs of errors and security events
- IP address — kept briefly for abuse prevention only
We do not collect government IDs, financial account numbers, biometrics, or sensitive personal information as defined under the Philippine Data Privacy Act. Payment for bookings is handled outside of this site (GCash, bank transfer, or cash) — we never see your card details.
Plain reasons, nothing buried in the fine print.
Every detail we hold has a job. If it stops having one, it goes.
- To prepare your bookingConfirming dates, drafting proposals and layout design, sending the invoice, and arriving at the right venue with the right kit.
- To stay in touchReaching you about your reservation, sharing your gallery after the event, and answering enquiries you send us.
- To sign you inRecognising your account when you return, so you can review past bookings without logging in twice. We use Facebook and Instagram to do this — see Chapter III.
- To run the business safelyKeeping records for accounting, blocking abuse, and improving the site by looking at anonymous traffic patterns.
- Only when the law asksIf a lawful order, audit, or investigation requires it, we will share what is strictly required and tell you where allowed.
We do not sell your information. We do not rent it. We do not use it to train marketing profiles or third-party advertising networks.
[Coming Soon] When you continue with Facebook or Instagram.
You can sign in to the studio site with your Facebook or Instagram account. Because Instagram accounts are managed by Meta, both options are handled through the same Meta sign-in flow. When you do, we ask the provider for the smallest set of details that lets us identify you across visits:
- Your name as listed on the provider
- The email address linked to that account
- A unique account identifier (so we recognise you next time)
- Your profile photo, if one is set — used only as your avatar in the studio dashboard
We never receive your Facebook or Instagram password. We do not read your email, contacts, photos, friends, posts, or messages, and we do not request permission to. You can revoke our access at any time from your Facebook app settings or Instagram app settings.
Small notes your browser keeps for us.
A cookie is a short string of text saved by your browser. We use only the minimum required to make the site work:
Essential
Keep you signed in across pages and protect against forged requests.
Up to 7 days, refreshed as you use the site.
Preferences
Remember small choices — last-viewed package, dashboard layout.
Up to 30 days, cleared when you log out.
Anonymous analytics
Tell us which pages are visited and from what kind of device, with no personal identifiers.
Aggregated; raw entries discarded within 30 days.
We do not use third-party advertising cookies. You can block or clear cookies in your browser at any time — the site will still work, but you will need to sign in again.
Long enough to be useful, no longer than that.
The active season
Account and booking details remain while your account is open and for the season around your event.
Three years
Completed booking records and invoices, kept to meet Bureau of Internal Revenue and accounting requirements.
Up to ninety days
Server logs and IP addresses retained briefly for abuse prevention, then discarded.
Until you ask
Anything beyond the above can be removed sooner on request — see Chapter VI.
The Data Privacy Act, in your hands.
Under the Philippine Data Privacy Act of 2012 (Republic Act 10173) you have a steady set of rights over your information. We honour them, and you don't need to invoke any specific section to ask:
i.
The right to be informed
To know what we collect and why — that is what this page is for.
ii.
The right to access
Ask for a copy of the personal information we hold about you.
iii.
The right to correct
Have anything inaccurate or out of date set right.
iv.
The right to object
Decline specific uses you are uncomfortable with.
v.
The right to erase or block
Have your data removed once it is no longer needed.
vi.
The right to portability
Receive your data in a structured, machine-readable form.
vii.
The right to file a complaint
Reach out to the National Privacy Commission if a concern is unresolved.
viii.
The right to damages
Seek redress for harm caused by misuse of your data.
To act on any of the above, write to narratreecreatives@gmail.com. We answer within ten working days.
The locks on the cabinet.
We use industry-standard practices to protect your information: encrypted connections (HTTPS) across the entire site, encrypted storage, scoped database access, and two-factor authentication on the app's administrative accounts. Backups are kept for thirty days and then rotated.
No system is perfectly impenetrable. If a breach ever affects your information, we will notify you and the National Privacy Commission within seventy-two hours of discovering it, as required by law.
The booth is for everyone, the account is not.
The Narra Tree Creative website and any account on it are intended for guests aged sixteen and above. We do not knowingly create client accounts for children under that age.
When the field guide is rewritten.
As the studio grows and the tools we use shift, this page may need updating. When something material changes — a new processor, a new use, a longer retention — we will revise the “Last updated” date at the top, and for active account holders we will send a short note by email before the change takes effect.
Older versions remain available on request. Continued use of the site after a change means you accept the updated terms.
Reach out, anytime — we read every note.
— Data Protection Contact
Narra Tree Creatives
Photo booth · Jaro, Iloilo City, Philippines
By phone
+639 62 153 4336
— National Privacy Commission
If we cannot resolve a concern to your satisfaction, you may lodge a complaint with the National Privacy Commission of the Philippines: privacy.gov.ph.