Kept between us.

I’m a one-person photography business, so this is refreshingly simple: I collect only what I need to answer you and photograph your day, I never sell it, and you can ask me to delete it whenever you like. This page explains the details in plain English. Last updated [July 2026].

1 — Who’s responsible

ByJunHeng is run by me, Jun Heng, a sole proprietor based in Singapore. That means I’m also my own data protection officer — there’s no department to escalate to, just me. For anything about your personal data, email hello@byjunheng.com. I handle personal data in line with Singapore’s Personal Data Protection Act (PDPA).

2 — What I collect

When you enquire: your name, email address, the type of shoot, your preferred date, and whatever you write in the message box. That’s it — the form asks for nothing else, and there’s no phone field.

When you book: payments run through Stripe, so I see your name, email, and the amount paid. I never see or store your card number — that goes straight to Stripe and never touches my website.

When we talk: our emails and, if you message me there, WhatsApp conversations.

The photographs themselves, which are personal data too — see section 8.

Basic technical data: like any website, my host records standard server information such as IP addresses for security and reliability. I don’t use it to identify or profile anyone.

3 — Why I use it

To reply to your enquiry, plan and photograph your shoot, deliver your gallery, issue invoices and receipts, and keep the financial records I’m legally required to keep. Nothing else. I don’t build marketing profiles and I won’t add you to a mailing list you didn’t ask for.

4 — Your consent

You give me these details voluntarily when you enquire or book, and that’s the basis on which I use them. You can withdraw your consent at any time by emailing me — though if you withdraw it before a booked shoot, I may not be able to deliver it.

5 — Who else handles your data

I use a small number of established services to run the site and the business. Each one only sees what it needs to:

Cloudflare — hosts and serves the website.
Web3Forms — relays the enquiry form to my inbox.
Stripe — processes payments securely (card details go to them, not me).
Google Fonts and unpkg — serve the typefaces and one scrolling script; they see your IP address as the page loads, as is normal for any site using a font or script service.
My email provider — carries our correspondence.
WhatsApp (Meta) — only if you choose to message me there.

I do not sell, rent, or trade your personal data to anyone, for any reason. I’ll only ever hand it over if the law genuinely requires it.

6 — Cookies & tracking

Good news: this site sets no advertising or tracking cookies. There’s no analytics tool, no ad pixel, and nothing following you around the internet afterwards — which is also why you’ll notice there’s no annoying cookie banner. If I ever add simple visitor statistics, I’ll choose a privacy-friendly, cookie-free one and update this page before switching it on.

7 — How long I keep things

Enquiries that don’t become bookings are kept for about [12 months] in case you come back, then deleted. Booking and payment records are kept for [5 years] because Singapore tax rules require it. Delivered galleries stay online for the period stated in your package, after which they’re archived. I keep your edited photographs in my own archive unless you ask me not to.

8 — Your photographs

Your photos are personal data as well as my creative work, so they get their own rules — set out in full in section 8 of my booking terms. The short version: I may feature images from your shoot in my portfolio and social media, and if you’d rather your photos stayed private, just tell me before the shoot and I’ll keep them off public channels. No explanation needed, and it never affects your price.

9 — Your rights

You can ask me at any time to tell you what I hold about you, correct anything wrong, delete it, or stop using it. Email hello@byjunheng.com and I’ll respond within 30 days, usually much sooner. There’s no charge for a reasonable request, and you never need to give a reason.

10 — Keeping it safe

The site runs over an encrypted (HTTPS) connection, payments are handled by Stripe’s PCI-compliant systems, and your files and correspondence sit in access-controlled accounts that only I use. No system is perfect, but your data isn’t sitting anywhere careless.

11 — Children

This site isn’t aimed at children, and I don’t knowingly collect data from anyone under 18. For shoots involving children — family sessions, graduations — a parent or guardian books and consents on their behalf.

12 — Data stored overseas

Some of the services above (Stripe, Cloudflare, Google, Meta) are international and may store data outside Singapore. Where that happens, I rely on those providers’ own contractual safeguards to give your data protection comparable to the PDPA’s.

13 — Changes to this policy

If what I do with your data changes, I’ll update this page and the date at the top. Questions, or want your details removed? Email hello@byjunheng.com — I’ll always give you a straight answer.

Start an enquiry Read the booking terms