Privacy Policy

This Privacy Policy explains how Mohammad Sami ("Bookashoot", "we", "us") collects and uses personal data when you use bookashoot.co (the "Platform"). We process personal data in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and other applicable UAE laws.

1. Data we collect

• Account details: your name, email address, password (stored only as a secure hash), account type (customer or photographer), and optionally your phone number and location.
• Photographer profile: bio, specialities, rates, packages, FAQs, availability, portfolio images, profile photo, intro video link and, if you add it, map location.
• Bookings: date, booking type, hours, package, estimated price, notes and questionnaire answers, booking status, reviews and any problem reports.
• Messages: the messages and attachments you send to other users through the Platform.
• Photos: images uploaded by photographers (portfolio and delivered photos) and by customers (for example, review photos).
• Technical data: basic server logs (such as IP address, browser type and time of request) kept for security and troubleshooting.

We do not collect or store payment card details – payments are made directly between customers and photographers.

2. Why we use it

• To create and run your account and let you log in securely.
• To show photographer profiles and let customers search, request bookings and chat with photographers.
• To send service emails, such as email verification, password resets, booking requests, confirmations and new message notifications.
• To keep the Platform safe: preventing fraud and abuse, enforcing our Terms, and handling reports.
• To comply with legal obligations and requests from competent UAE authorities.

We process your data because it is necessary to provide the service you asked for, to meet legal obligations, for our legitimate interest in running a safe platform, or with your consent where the law requires it. We do not sell your personal data and we do not use it for third-party advertising.

3. Who we share it with

• The other party to a booking. When you request or accept a booking, or message another user, the details needed for that booking (such as your name, booking details and messages) are shared with that user. Photographer profiles (name, location, bio, rates, portfolio, reviews) are public.
• Service providers who process data on our behalf under contract:
  • Hosting – Render (Render Services, Inc.), which hosts the Platform and its database;
  • Email delivery – Brevo (Sendinblue SAS), which sends our service emails.
  These providers may store data outside the UAE. Where that happens, we rely on the safeguards permitted under the PDPL. Our hosting provider currently stores the Platform's data in data centres outside the UAE.
• Authorities, where we are required to by law.

4. Cookies

We use only one cookie: a login session cookie (bas.sid) that keeps you signed in. It is strictly necessary for the Platform to work. We do not use analytics, advertising or tracking cookies. Some pages may load map tiles or embedded videos (YouTube/Vimeo) chosen by photographers; those services may receive your IP address when they load.

5. How long we keep it

• Account and profile data: while your account is active. When you ask us to delete your account we delete or anonymise your data within 30 days, unless we must keep some of it longer by law.
• Bookings, messages and reviews: while either party's account is active, and then for up to 2 years for dispute handling and legal purposes.
• Login sessions: expire after 7 days.
• Database backups: kept for 14 days, then automatically deleted.

6. Your rights

Under the UAE PDPL you have the right to:

• access the personal data we hold about you and get a copy;
• correct inaccurate or incomplete data (you can edit most details yourself in Settings or your profile);
• delete your data / close your account;
• restrict or object to certain processing, and withdraw any consent you have given.

To use these rights, email hello@bookashoot.co from the email address on your account. We will reply within the time required by law. You may also complain to the UAE Data Office.

7. Security

We use reasonable technical and organisational measures to protect your data, including encrypted (HTTPS) connections, hashed passwords, access controls on delivered photos and regular backups. No online service is completely secure, so please use a strong, unique password.

8. Children

The Platform is not intended for anyone under 18, and we do not knowingly collect their data.

9. Changes

We may update this Privacy Policy. We will post the new version on this page and tell you about significant changes.

10. Contact

Mohammad Sami, Dubai, United Arab Emirates – hello@bookashoot.co.