Your details,
handled with care.

What this covers

This Privacy Policy explains how Moments by Ishrar handles information submitted through moments.ishrar.com, including the public site, passwordless client access, booking inquiries, service agreements, licensing requests, and private delivery galleries. The site’s use is also subject to the Terms of Use.

Moments by Ishrar is a small, customer-led photography and film studio. We do not sell personal information or use customer details to send advertising or marketing campaigns.

Information we receive

Depending on what you do on the site, we may receive:

• Your name and email address when you request client access or begin an inquiry.
• Optional phone, service, date, location, budget, creative brief, and contact-preference details for a booking or licensing request.
• Electronic signatures, agreement versions, payment references, and booking status needed to administer a confirmed project.
• Images, films, and other files that the studio intentionally uploads to a private client gallery for delivery.
• Security and delivery records such as session cookies, timestamps, rate-limit fingerprints, email status, and provider message IDs.

How we use information

Information is used only to operate and protect the service, including:

• Sending one-time email verification links and opening the correct client flow.
• Preparing inquiries, service agreements, booking notices, calendar invitations, and confirmations.
• Providing private galleries and delivered files to the associated client account.
• Preventing spam, abuse, unauthorized access, and repeated automated requests.
• Keeping business, security, and transaction records where reasonably needed.

Service providers

The site uses Cloudflare for application hosting, database and file delivery, edge security, Turnstile checks, and domain email routing. It uses Resend to transmit transactional email. These providers process information only as needed to provide their infrastructure services.

Security and retention

Verification links expire after one hour. A verified client session is limited in duration and stored using an opaque, hashed server-side record. The site applies origin checks, server-side validation, Turnstile, and IP, email, and account rate limits to protect public actions.

Delivery galleries use a studio-selected retention window of no more than 60 days. Booking, agreement, account, and email-delivery records may be retained longer when needed for project administration, accounting, dispute resolution, security, or legal obligations.

Your choices

You may ask to correct or review information associated with your client account, request removal where it is not needed for an active project or legal record, or ask a question about this policy. Contact the studio at customerservice@moments.ishrar.com. Please do not send payment-card numbers or other highly sensitive information by email.

Policy updates

This policy may be updated when the site, services, or applicable requirements change. The “last updated” date at the top of this page identifies the current version. Material changes will be reflected here before the updated practices are used for new requests.