Privacy Policy

1. What we collect

• Booking request — name, phone number, email, Instagram/WhatsApp ID (optional), preferred date, time, package, location, number of people, and your message
• Payment — card details are handled directly by Toss Payments; we never receive or store card numbers. For bank refunds, the refund account
• Session — photos in which you appear
• Automatically — website visit logs (time, browser type, etc.)

2. How we use it

• Checking availability, scheduling, sending booking confirmations and day-before reminders
• Delivering photos and handling editing requests
• Payments, refunds, questions and complaints
• Portfolio and ads — only with your consent

3. How long we keep it

• Booking information is kept for 1 year after the session and delivery, then deleted (for re-edit requests and questions).
• Records required by law — contracts and withdrawals 5 years, payments and service delivery 5 years, complaints and disputes 3 years (Korean E-Commerce Act)
• If you ask us to delete your data, we do so promptly, except records we must keep by law.

4. Sharing

We never sell or hand your personal information to others, except where required by law (e.g. law enforcement requests).

5. Service providers

• Google LLC (USA) — storing booking requests, scheduling
• Solapi — sending KakaoTalk notifications
• Toss Payments — card payments and cancellations
• Microsoft Corporation (USA) — photo share links (OneDrive)
• Vercel Inc. (USA) — website hosting
• Kakao — KakaoTalk channel support

6. Transfers abroad

• Booking requests are stored on Google servers and photos on Microsoft servers (USA and elsewhere). Data travels over encrypted connections when you submit the form and is kept for the period in section 3.
• If you prefer not to, you can book by message instead of the form. Photos are delivered only by online share link.

7. Cookies and ad measurement

• The website may use tools such as the Meta Pixel to measure ads; these leave cookies with the pages you visited.
• You can block cookies in your browser settings; the website and booking still work.

8. Your rights

• You can ask at any time to see, correct, delete or stop the processing of your personal information.
• Contact the privacy officer below; we act within 10 days.

9. Deletion

Expired data is erased so that it cannot be recovered. Paper documents are shredded or burned.

10. Security

• Only authorised people can access booking data, and our accounts use two-step verification.
• All data exchanged with the website is encrypted (HTTPS).

11. Privacy officer

• Name — Mikael Kim (Representative)
• Contact — Instagram @midasfilm_official

12. Where to get help (Korea)

• Personal Information Dispute Mediation Committee +82 1833-6972 (kopico.go.kr)
• Privacy Infringement Report Center 118 (privacy.kisa.or.kr)

Addendum

This policy applies from September 22, 2026. We announce changes on the website 7 days before they take effect.