隱私政策

1. 簡介與範圍

LuxeLens Studio（「我們」或「我們的」）尊重您的隱私，並致力於保護您的個人資料。本隱私權政策適用於：

• 我們的網站 (luxelens.com) 及所有相關子網域
• 我們的行動應用程式（如有）
• LuxeLens Studio 提供的所有攝影服務
• 與我們進行的電子郵件、簡訊及其他電子通訊
• 任何收集個人資料的線下互動

本政策說明我們可能向您收集或您在使用我們服務時可能提供的資訊類型，以及我們收集、使用、維護、保護及揭露該等資訊的做法。

2. 定義

就本隱私權政策而言：

資料保護法： 我們遵守適用的資料保護法，包括針對歐盟居民的《一般資料保護規範》(GDPR)、針對加州居民的《加州消費者隱私法》(CCPA) 及其他適用的隱私法。

3. 我們收集的資訊

我們向服務使用者收集多種類型的資訊，包括：

我們如何收集資料： 我們透過直接互動（當您提供給我們時）、自動化技術（Cookie 及類似技術）以及第三方（付款處理商、社群媒體平台）收集資料。

4. 我們如何使用您的資訊

我們將收集的資訊用於各種目的，包括：

• 服務提供： 提供、維護及改善我們的攝影服務
• 溝通： 就預約、詢問及更新事宜與您溝通
• 帳務： 處理付款及寄送發票
• 行銷： 寄送促銷資料（經您同意）
• 法律遵循： 遵守法律義務及保護權利
• 品質改善： 分析使用模式以改善服務
• 客戶支援： 回覆您的問題並提供支援
• 安全： 偵測、預防及處理技術問題與詐欺

5. 處理的法律依據

我們基於以下法律依據處理您的個人資料：

若我們依賴同意，您有權隨時撤回同意，但不影響撤回前基於同意所為處理的合法性。

6. 分享您的資訊

我們可能在以下情況下與第三方分享您的資訊：

• 服務提供者： 與代表我們提供服務的供應商及服務提供者（付款處理商、電子郵件服務提供者、雲端儲存）
• 業務轉讓： 涉及合併、收購或資產出售時
• 法律要求： 為遵守法律義務、保護權利或防止損害
• 專業顧問： 與律師、會計師及其他專業顧問
• 經您同意： 為您在提供資訊時所揭露的任何其他目的

資料處理協議： 所有第三方服務提供者均須與我們簽訂資料處理協議，並實施適當的安全措施。

7. 資料安全措施

我們實施適當的技術與組織措施，以保護您的個人資料免於未經授權或非法的處理、意外遺失、毀損或損害。

Breach Notification: In the event of a personal data breach, we will notify you and the appropriate supervisory authority as required by applicable law.

Your Responsibilities: You are responsible for keeping your account credentials confidential and using secure networks when accessing our services.

8. Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Client Information: 7 years from last transaction (for tax and legal purposes)
• Marketing Data: Until consent is withdrawn or 2 years from last interaction
• Photographic Content: Archived indefinitely for client access unless deletion requested
• Website Analytics: 26 months from date of collection
• Financial Records: 7 years (legal requirement)

To determine appropriate retention periods, we consider:

• The amount, nature, and sensitivity of the personal data
• The potential risk of harm from unauthorized use or disclosure
• The purposes for which we process the data
• Whether we can achieve those purposes through other means
• Applicable legal requirements

Data Deletion: Upon expiration of the retention period or upon request (where applicable), we will securely delete or anonymize your personal data.

9. Your Data Protection Rights

Depending on your location and applicable data protection laws, you may have the following rights:

How to Exercise Your Rights: To exercise any of these rights, please contact us using the information in Section 14. We will respond within 30 days (or sooner if required by law).

Verification: We may need to verify your identity before processing your request, which may require additional information.

No Fee Usually Required: You will not have to pay a fee to access your personal data or to exercise any of your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

10. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and hold certain information.

Types of Cookies We Use:

Managing Cookies:

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our website may become inaccessible or not function properly.

Third-Party Cookies: Some content or applications on our website are served by third parties. These third parties may use cookies alone or in conjunction with other tracking technologies to collect information about you when you use our website.

11. Third-Party Links & Services

Our website and services may contain links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you.

We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

Each third-party service provider has its own privacy policy addressing how they use your information. We encourage you to review those privacy policies.

12. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16.

If you are a parent or guardian and believe that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from a child under age 16 without verification of parental consent, we will take steps to remove that information from our servers.

13. Changes to This Privacy Policy

Review Frequency: We review this Privacy Policy at least annually or whenever significant changes occur in our data processing activities.

Historical Versions: Previous versions of this Privacy Policy are available upon request.

Your Continued Use: Your continued use of our services after any modification to this Privacy Policy will constitute your acceptance of such modification.