Privacy Policy

Effective date: October 12, 2026

This Privacy Policy explains how Coastal Bay Digital LLC d/b/a Make a Scene Photo Company ("Make a Scene Photo Co.," "we," "us," or "our"), a Delaware limited liability company, collects, uses, shares, and protects personal information. It covers:

• our website, makeascenephotos.com;
• our online proposals, booking pages, and e-signature and payment pages;
• our Digital Lookbooks (online event galleries);
• our photo booth services at events across Delaware, Maryland's Eastern Shore, and Virginia's Eastern Shore.

The short version

• We collect what we need to plan, book, and deliver your event, and to keep reliable records.
• Payments are processed by Stripe. We never see or store your full card number or your online-banking login.
• We don't sell your personal information, and we don't use or share it for targeted advertising.
• Digital Lookbooks are private, unlisted links. They're not password-protected: anyone with the link or QR code can view the photos. Hosts can hide photos, and anyone pictured can ask us to remove a photo.
• Our website analytics are cookieless and don't track you across other sites.
• Questions or requests? Email hello@makeascenephotos.com.

1. Information we collect

1.1 Information you give us

• Inquiries and bookings:
  • your name, email address, and phone number;
  • event details, such as event type, date, times, venue name and address, and package and add-on choices;
  • any notes you share with us;
  • if you're booking for an organization, its name and your role.
• Print design content: names, dates, logos, photos, or artwork you send us for your custom print design.
• Messages: emails and other messages you send us.

1.2 Agreement and e-signature records

When you review and sign an agreement online, we record:

• your typed name and drawn signature;
• your choices (consent to electronic records, and whether we may feature your event photos in our marketing);
• your IP address, browser and device information, and device time zone;
• timestamps for each step;
• email delivery confirmations;
• if used, verification-code checks;
• a digital fingerprint (cryptographic hash) of the exact document you signed.

We keep these records so there's a reliable, tamper-evident record of what was agreed, by whom, and when.

1.3 Payment information

Payments are processed by Stripe. Stripe collects your card or bank details directly, and we never receive or store full card numbers, security codes, or online-banking credentials.

From Stripe, we receive limited information:

• your name and email;
• billing postal code (if collected);
• card brand, last four digits, and expiration date;
• the card type and last four digits (shown on your receipt);
• for bank (ACH) payments, the bank name and the last four digits of the account;
• payment amounts and status.

If you turn on autopay, Stripe securely stores your payment method so we can charge your balance on its due date.

1.4 Photos and event content

• At your event, our photo booth captures the photos, GIFs, and short videos that guests choose to take. We also store when each one was taken and which event it belongs to.
• These images show the people who use the booth. That can include children, if their parent, guardian, or the event host lets them use it (see Section 6).
• Guests get their photos by QR code. Scanning the code on the booth screen or on a strip opens the event's Lookbook. The booth doesn't ask guests for a phone number or email address.

1.5 Information collected automatically

• Server and security logs. Our hosting provider records technical information when you visit, such as IP address, browser type, the page requested, and the date and time. We use it to keep the site secure and working.
• Cookieless analytics. We use Vercel Web Analytics to understand overall site traffic. It doesn't use cookies.
  • It records pages viewed, referring site, approximate location (country, region, city), and device, operating system, and browser type.
  • Visitors are distinguished by a hash of the incoming request, which is discarded after 24 hours.
  • The data is used only in aggregate.
  • We configure analytics to remove private Lookbook, proposal, and signing links from the page addresses it records.
• Performance metrics. We use Vercel Speed Insights to measure page-load performance. It records metrics such as load timing, page route, device type, browser, and country. Vercel says this data isn't tied to any individual visitor or IP address.

1.6 Information from others

• Bookings made by someone else. If a planner, family member, or employer books an event, they may give us your name and contact details.
• Stripe. Stripe may send us fraud-prevention signals about a payment.

2. How we use information

We use personal information to:

• Provide our services. That includes:
  • preparing proposals;
  • booking and planning your event;
  • designing your prints;
  • running the booth;
  • creating and hosting your Digital Lookbook.
• Communicate with you. For example: confirmations, reminders, invoices, receipts, Lookbook links, and replies to your questions.
• Create and keep records of agreements and e-signatures, and enforce our agreements.
• Process payments and prevent fraud, including applying the card fee shown at checkout.
• Market our business, only as described here:
  • We feature event photos only when the event host opted in, and under the limits in Section 4.
  • We send newsletters or promotional emails only if you ask to receive them. You can unsubscribe at any time.
• Improve our website using aggregated analytics.
• Comply with law, respond to lawful requests, and protect the rights, safety, and property of our clients, guests, team, and business.

3. How we share information

We don't sell personal information, and we don't share it for targeted (cross-context behavioral) advertising. We share information only as follows.

3.1 Service providers

These companies process information for us, under their own security and privacy commitments:

3.2 Other sharing

• People with a Lookbook link. Anyone who has a Lookbook's link or QR code can view and download its photos. The event host decides who receives the link.
• Event hosts. Photos taken at an event are part of the host's Lookbook. The host can see them and hide them.
• Professional advisors and insurers, such as lawyers, accountants, and insurance carriers, when needed.
• Legal and safety reasons. We share information to comply with the law or a valid legal process, or to protect rights, property, or safety.
• Business transfers. If our business is sold or reorganized, information may transfer to the new owner. This policy, or one at least as protective, would continue to apply, and we'd give notice.
• With your consent, or at your direction.

4. Photo booth and Digital Lookbooks

4.1 Using the booth is optional. If you step in front of the booth, your photos will appear in the event host's Digital Lookbook.

4.2 Who can see a Lookbook.

• Each Lookbook lives at a long, randomly generated link.
• It isn't listed on our website, and we ask search engines not to index it.
• It isn't password-protected: anyone with the link or QR code can view and download its photos.

4.3 Hiding and deleting photos.

• The event host can hide any photo at any time, and hidden photos disappear from the Lookbook right away.
• We keep hidden photos privately unless the host asks us to delete them permanently.

4.4 Removal requests.

• Who can ask. Anyone who appears in a photo can ask us to remove it, and so can a parent or guardian for a child.
• How. Email hello@makeascenephotos.com with the Lookbook link and a description or screenshot of the photo.
• Timing. We generally act within 2 business days, and faster for urgent or sensitive situations.
• Verification. We may ask for information to confirm the request is legitimate.

4.5 Marketing use. We feature event photos in our portfolio or social media only if the event host opted in. Even then:

• we don't use photos the host has hidden;
• we don't feature photos where a child is a recognizable subject unless a parent or guardian has given permission;
• we'll remove anyone's photo from our marketing on request;
• we never sell photos.

4.6 No facial recognition. We don't use facial recognition, and we don't create biometric identifiers from photos.

4.7 How long Lookbooks stay online.

• Our intention is to host Lookbooks indefinitely.
• If that ever changes, we'll email the event host at least 90 days in advance, and photos can be downloaded during that time.

5. Cookies and similar technologies

• Essential cookies and local storage. We use these to keep you signed in to booking pages or our admin tools (through Supabase), to protect forms, and to remember your progress while you sign or pay. The site won't work properly without them.
• Stripe on payment pages. Stripe uses cookies, IP addresses, and device information to process payments and prevent fraud. Stripe may use this information across its network to detect fraud. See Stripe's privacy policy and cookie policy for details.
• Analytics. Our analytics (Vercel Web Analytics) are cookieless.
• No advertising trackers. We don't use advertising cookies, social-media tracking pixels, or cross-site tracking.
• Do Not Track. We don't track you across other websites, and we don't sell or share data for targeted advertising. So our practices are the same whether or not your browser sends a "Do Not Track" signal.
• Global Privacy Control (GPC). We treat GPC signals as a request to opt out of the sale of personal data and targeted advertising, which we don't do in any case.
• Third-party tracking. Apart from Stripe's fraud-prevention data collection on payment pages, we don't allow third parties to collect personal information about your online activities over time and across different websites through our site.

6. Children's privacy

• Booking is for adults. You must be 18 or older to book with us.
• Under 13. Our website isn't directed to children under 13, and we don't knowingly collect personal information online from children under 13. If we learn that we have, we'll delete it.
• Kids at events. Children may appear in booth photos when their parent, guardian, or the event host allows them to use the booth. Event hosts are responsible for supervising minors at their events.
• Parents and guardians may ask us at any time to hide or delete photos of their child (see Section 4.4).
• Marketing. We don't feature recognizable children in our marketing without a parent's or guardian's permission.
• No contact details at the booth. The booth never asks guests, including children, for a phone number or email address. At children's events, the host can also turn the online Lookbook off: the booth then shows no QR code, and strips print without one.

7. How long we keep information

8. How we protect information

• Technical protections:
  • encrypted connections (HTTPS) everywhere;
  • encryption provided by our hosting and storage providers;
  • access limited to people who need it, with multi-factor authentication on administrative accounts;
  • long, randomly generated links for Lookbooks and signing pages.
• Payment card data is handled by Stripe, a PCI DSS-certified payment processor.
• No system is perfectly secure. If a security incident affects your personal information, we'll notify you as the law requires.

9. Your choices and rights

You can ask us to:

• access the personal information we hold about you, and get a copy, including downloading your Lookbook photos;
• correct inaccurate information;
• delete your personal information or specific photos;
• receive your information in a portable format;
• stop marketing emails. Use the unsubscribe link, or email us;
• withdraw permission for us to feature your event photos;
• opt out of the sale of personal data, targeted advertising, or profiling. We don't do any of these, but you're welcome to ask.

How to make a request.

• Email hello@makeascenephotos.com with the subject line "Privacy request,".
• We'll confirm your identity in a way that fits the request, for example by replying to the email address we have on file.
• You may use an authorized agent. We may ask for proof of the agent's authority.

Timing and cost. We respond within 45 days. If we need more time, we may extend that once by up to 45 more days, and we'll tell you why. Requests are free.

Appeals.

• If we decline your request, reply with "Appeal" and we'll respond in writing within 60 days.
• If you're still not satisfied, you may contact the Delaware Department of Justice, Consumer Protection Unit, or your state attorney general.

Limits. We may keep information we need to meet legal obligations (such as contract and tax records), resolve disputes, or prevent fraud. We can't retrieve photos that other people have already downloaded or shared.

State privacy laws. Delaware, Maryland, Virginia, and other states have consumer privacy laws that apply to businesses above certain size thresholds. Whether or not those laws apply to a small business like ours, we honor the rights described in this section for everyone, wherever you live. We won't treat you differently for using them.

10. Where information is stored

We and our service providers store and process information in the United States. If you contact us or use our site from outside the U.S., your information will be transferred to and processed in the U.S.

11. Changes to this policy

• When we update this policy, we'll post the new version here with a new effective date.
• For material changes, we'll also give notice at least 14 days before they take effect. We'll do this by emailing clients with active bookings, or by posting a prominent notice on our website, or both.

12. Contact us

Coastal Bay Digital LLC d/b/a Make a Scene Photo Company
Sussex County, Delaware
Email: hello@makeascenephotos.com
Phone: (302) 858-3355
Website: makeascenephotos.com