Skip to content

Privacy policy

Last updated

Golden Hour Phuket is a brand of Teerashot Production Co., Ltd., a photography studio in Phuket. We photograph people on holiday, which means we hold your contact details, where you are staying, and pictures of you. This page says exactly what we collect, why, who else sees it, and how to make us delete it. It is written to be read, not to be survived.

Who we are

Golden Hour Phuket is a trading name of Teerashot Production Co., Ltd. (company number 0835568013635), registered in Thailand at 88/39 Moo Baan Pitak Home 3, Moo 2, Soi Kiatsin 2, Thepkrasattri Road, Ratsada Subdistrict, Mueang Phuket District, Phuket 83000, Thailand. We are the data controller for everything described here.

Questions, or a request to see or delete your data: hello@goldenhourphuket.com, or WhatsApp +66 94 249 5808. A person reads both.

What we collect

When you book
Your name, email address, WhatsApp number, the hotel or villa you are staying at, the date, how many people are coming, the occasion, and anything you write in the notes box. We ask for the exact address because it decides which beach we walk to and what time we meet you.
When you pay
Payment is handled entirely by Stripe on their own pages. We never see or store your card number. Stripe tells us that the payment succeeded, the amount, and the email you used.
When you message us
Whatever you send us on WhatsApp or by email, and your phone number or email address, so we can answer. WhatsApp messages pass through Meta's servers under their own terms.
Your photographs
The pictures we take of you, and the notes we make to edit them. Photographs of an identifiable person are personal data, so everything on this page applies to them too.
When you tell us how it went
The stars, words and favourite photos you send from your gallery's feedback page, and whether you tick the box allowing them on this website. If you post a review on Google, that is between you and Google: we only note that you opened it.
When you visit this site
Our host records the standard technical log every web server keeps — IP address, browser, the page requested, the time. It is used to keep the site up and to spot abuse. On the booking page, the country your connection comes from is also used, once and without being stored, to pre-select the country code of your WhatsApp number.

We do not ask for, and do not want, your passport number, date of birth, health information or anything else we have no use for. If you put something like that in the notes box we will delete it.

Why we are allowed to use it

To do the job you booked
Contacting you, meeting you at the right place, taking and editing the photographs, and sending you the gallery. Without this we cannot perform the contract you entered into.
Because the law says so
Tax and accounting law in Thailand requires us to keep records of what we sold and to whom.
Because you said yes
Any marketing email you opt into, and showing your feedback on this website when you ticked the box for it — with your first name only. You can withdraw that consent at any time and we will stop.
Because it is reasonable and we have weighed it
Showing photographs from your session in our portfolio — a photographer's work is how the next client finds us, and the booking form lets you rule it out before you pay. Also keeping the site secure, preventing fraud, answering enquiries that do not become bookings, and asking you once, after your photos arrive, how your shoot went. You can object to any of this at any time, and for your photographs that objection is final.

Your photographs — the part most people care about

Your photographs are yours. We deliver them in an online gallery within 3–5 days (5–7 days after a full day), and you can download, print and share them however you like.

We may show a few frames from your session on this website, on Instagram and in advertising, unless you tell us not to. The booking form has a box that says “Please keep our photos private”: tick it and we publish none of them. It is never a condition of anything and it changes nothing about your shoot, your gallery or the price. We record your answer, the exact wording you were shown, and the date.

Tick it and your photographs stay between us. If we later take one we would love to show, we will write and ask you about that particular picture, and no is a complete answer.

You can change your mind in either direction with one message, including after you have said yes. Tell us and the pictures come down.

Photographs of children are only ever published with a parent's or guardian's agreement, asked for separately.

The photographer and our editor see your photographs because they are the people making them. Nobody else does.

Who else sees your data

We do not sell your data, and we never will. We use a small number of companies to run the business, and each of them only gets what they need for their part:

Stripe
Takes the payment. Gets your name, email and card details, which go to them directly and never through us.
Vercel
Hosts this website and your gallery. Sees the technical server log described above.
Cloudflare
Stores your photographs and sends them to you when you download them from your gallery.
Neon
Holds our gallery records: your name, email address and WhatsApp number, so every shoot you do with us can sit on one page, and the feedback you send us.
OpenRouter
Tidies the spelling and grammar of your feedback when you tap “Polish my words”, through services it runs in the United States and Europe. It gets only the words you wrote, and none of them may keep them.
Dropbox
Holds the untouched files from your shoot while we edit them, and your RAW files if you bought them.
Meta (WhatsApp)
Carries the WhatsApp messages between you and us, and the alert we get when you book: your name, WhatsApp number, where you are staying and what you booked.
Resend
Sends our email: your booking confirmation, and a copy of the booking to us.
Notion
Holds our booking records: the details you give when you book, and what you paid.
Google (Calendar)
Holds our bookings calendar. Your booking is an event on it, with your name, the meeting place and time, and what the photographer needs to know on the day.
Google (Maps)
Suggests hotel names as you type them into the booking form. When you use that field, Google receives what you typed and your IP address. If you would rather it did not, type the name yourself and ignore the suggestions — the form works either way.
Google (Analytics & Ads)
Measures which pages and adverts lead to bookings.
Meta (Pixel)
Measures which Facebook and Instagram adverts lead to bookings.
The photographer on your shoot
Gets your name, the meeting place and time, and the number to reach you on the day.

Most of these companies are based in the United States or Europe, so your data leaves Thailand. They are all major international providers whose terms include the standard contractual clauses used for transfers out of the UK and the EEA. We will also hand over data if a court or the police lawfully requires it — and we will tell you if we are allowed to.

Cookies and tracking

The first time you come here you are asked whether we may use measurement and advertising cookies. Nothing is loaded before you answer — not a script, not a request — and “No thanks” is one click, the same size and in the same place as “Accept”. If you want to be more precise than yes or no, “Choose” lets you take one and leave the other.

  • Measurement — Google Analytics: which pages people read before they book.
  • Advertising — Google Ads and the Meta pixel: which advert brought you here, and whether it led to a booking.

You can change your mind whenever you like: “Cookie settings” at the bottom of any page reopens that choice, and turning something off clears its cookies and reloads the page so it genuinely stops. Blocking them in your browser instead works just as well — nothing on this site, the booking form included, depends on them.

The only thing we store without asking is the answer you give, kept in your own browser so we do not have to ask again. It never reaches us.

The payment pages are Stripe’s and use their own cookies, which are necessary to take a payment safely. Stripe’s privacy policy covers those.

How long we keep it

Booking and payment records
5 years, because Thai tax law requires it.
Your gallery
Online for good, so you can download your photos whenever you like. Ask us and we delete it, and your link stops working.
Your feedback
As long as your gallery. Ask us and we delete it, and it comes off this website.
The original RAW files
About 3 months after your shoot, unless you bought them, in which case they are yours and we deliver them.
Enquiries that never became a booking
12 months, then deleted.
Photographs we have published
For as long as we are using them, and we take them down when you ask us to.

What you can ask us to do

Thailand's Personal Data Protection Act gives you these rights, and if you live in the UK or the EU the GDPR gives you the same ones. Ask for any of them and we will do it, free, within 30 days:

  • See a copy of everything we hold about you
  • Correct anything that is wrong
  • Have it deleted, unless the law makes us keep it (tax records, mostly)
  • Get it in a portable file, or sent to someone else
  • Tell us to stop using it for something, including anything public
  • Withdraw a consent you gave earlier, without having to explain
  • Object to how we are using it

Email hello@goldenhourphuket.com. We may ask you to confirm who you are first, so we are not handing your photographs to a stranger.

If you think we have handled this badly you can complain to Thailand's Personal Data Protection Committee, or to the data protection regulator where you live. We would rather you told us first and gave us the chance to fix it.

Keeping it safe

The site runs over HTTPS. Card details never touch our systems. Access to bookings and galleries is limited to the people working on your shoot, on accounts protected by two-factor authentication. No system is perfect, and if something ever goes wrong in a way that puts you at risk, we will tell you and the regulator rather than hope you do not notice.

Children

We photograph families, so children are often in front of the camera — always with a parent or guardian present, who is the person booking and the person we deal with. This website is not aimed at children and we do not knowingly take booking details from anyone under 20.

Photographers who connect their Google Calendar

This part is for the photographers who work with us, not for guests. When a guest books, we check whether our photographers are free at that time. A photographer can let us do that from the personal link we send them, by signing in with Google.

What we ask Google for
Your email address, to know which calendar is yours, and permission to change who can see your calendars. We use that permission once: to share your main calendar with golden-hour-site@golden-hour-phuket.iam.gserviceaccount.com, which can then see your events. Straight after, we give the permission back to Google, so we keep no sign-in of yours.
What our booking system reads
When a booking is paid or moved, the start and end times of your events around that shoot, whether each is marked busy or free, what kind of event it is (a working-location note, say) and whether you declined an invitation. Never an event's title, description, place or guests.
What we keep
Your name, your calendar's address and when you connected it, in our photographers list in Notion. Our own booking alerts then say whether you were free or busy for a shoot.
How to stop
In Google Calendar on a computer, open Settings, choose your calendar, and remove golden-hour-site@golden-hour-phuket.iam.gserviceaccount.com under “Share with specific people”. Tell us too, and we will delete your row.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use it for advertising, and we do not sell it or give it to anyone else.

Changes to this policy

If we change how we use your data we will update this page and change the date at the top. If the change is a significant one and it affects a booking you have already made, we will email you rather than quietly edit the page.

Still not sure about something? Ask us at hello@goldenhourphuket.com before you book, not after. Back to prices.