Tetty's Photo Studio

Privacy and Data Protection

Privacy Policy

We collect only the information needed to run a high-touch photography service, protect customer bookings, and coordinate shoots with the Tetty team.

Who We Are

TPS Collective Inc. (株式会社TPS Collective) operates Tetty's Photo Studio and is responsible for the personal information described in this policy.

Address: Maison Ekoda 201, 1-68-8 Asahigaoka, Nerima-ku, Tokyo 176-0005, Japan (〒176-0005 東京都練馬区旭丘一丁目68番8-201号 メゾン江古田)

Representative: Tetsuta Endo, Representative Director

Contact: booking@tps-collective.com

Information We Collect

Booking details such as name, email address, phone number, country, selected plan, selected location, event reservation, requested date and time, guest or group count, optional add-ons, and customer notes.

Payment status and Stripe identifiers needed to confirm deposits, remaining payments, refunds, and cancellations. We do not store full card numbers or card security codes.

Messages you send us through the contact form, by email, or on Instagram or WhatsApp.

Operational information such as staff assignment, delivery status, notification status, support messages, and security logs.

Optional preferences such as whether you agreed to tag Tetty Photo Studio on social media for a guide gift.

Photos taken at your session, which show you and the people who join you.

How you use this website, collected by Google Analytics and Microsoft Clarity (see Analytics, Cookies and Session Recording).

How We Use Information

To confirm and manage bookings, temporary holds, event reservations, payments, cancellations, refunds, and remaining balance invoices.

To contact customers about meeting points, schedule changes, weather, reminders, support, and photo delivery.

To take, edit and deliver the photos from your session, and to show some of them in our portfolio, on our website and social media, and in our promotion (see Photos and Public Use).

If you open the payment page but do not finish paying the deposit, we send one reminder email about 30 minutes later with the same payment link.

About 7 days after your session, we send one email asking you to leave a Google review.

We may contact you on WhatsApp at the phone number you give us, about your booking.

To show owners, managers, and assigned photographers the information needed to operate the shoot safely and professionally.

To understand how visitors use the website and to find and fix problems in the booking flow.

To prevent fraud, debug service failures, keep audit records, comply with legal obligations, and improve service quality.

Analytics, Cookies and Session Recording

We use Google Analytics 4, provided by Google LLC, to count visits and see how visitors move through the site and the booking steps. It uses cookies and similar identifiers. When a payment is completed on the site, Google Analytics receives the booking reference and the amount, so we can count bookings; your name and contact details are not sent.

How Google uses information from sites that use its services: https://policies.google.com/technologies/partner-sites

We use Microsoft Clarity, provided by Microsoft Corporation, to record how visitors use our pages (clicks, scrolling, and mouse or touch movement) and to play these back as session recordings. Clarity uses cookies.

Text you type into our booking, event and contact forms, such as your name, email address and phone number, is masked and not included in recordings.

Google and Microsoft may process this information in the United States and other countries.

You can block or delete cookies in your browser settings.

Your booking selection (plan, location, date, time, number of guests, Express Delivery, and the step you reached) is saved in your browser for up to 14 days so you can continue later. It does not include your name or contact details. The details you type into the booking form are kept in that browser tab only until the tab is closed.

Service Providers

We share personal information with these providers only as needed for the service each one provides:

Stripe: payments (United States).

Resend: sending our emails (United States).

Amazon Web Services: hosting, database and file storage (Tokyo region, Japan).

Google (United States): Google Calendar for staff scheduling, which receives your name, email address, phone number and booking details; and Google Analytics.

Microsoft: Clarity session recording (United States).

Slack: internal booking notifications with your name, country and booking details, but not your email address or phone number (United States).

Expo: notifications in our staff app with your name and booking summary (United States).

Meta: WhatsApp and Instagram, when we message you there or you message us (United States).

Staff Access

Owners and managers may access booking and customer information needed to operate the service.

Photographers may access contact details only for bookings or events assigned to them, so they can coordinate with customers.

Photos and Public Use

We may use photos from your session for our portfolio, website, social media and promotion. Photos that show a person are personal information, and we use them this way only with that person's agreement.

When you book, you agree to this use for yourself, and you confirm that you have told everyone who joins your session and that they agree. For a child, the agreement is that of a parent or guardian.

You, and anyone who appears in the photos, can ask us at any time not to use them, and to remove photos we have already published, by emailing booking@tps-collective.com. We will stop using them and take them down.

Retention

When you press Pay, the name, email address, phone number and country you entered are saved as a customer record. This record is kept with your booking and payment records, including when the payment is not completed.

Booking, payment, cancellation and refund records, with the contact details on them, are kept as business, tax and accounting records. We do not delete them on a fixed schedule. You can ask us to delete information we no longer need (see Your Requests).

Unpaid temporary holds and unpaid event orders are deleted once 90 days have passed since the requested date or the hold expiry, whichever is later.

In our booking database, the content and recipient address of the emails and notifications we send are erased 180 days after sending, and payment notifications received from Stripe are erased 180 days after we receive them. Copies kept in our team mailbox, our staff Google Calendar and Slack are not erased on a schedule.

Your Requests

You may request disclosure, correction, deletion, or restriction of your personal information by contacting booking@tps-collective.com.

We may need to verify your identity before responding. Some records may be retained if required for payment, accounting, fraud prevention, legal, or dispute handling purposes.

Security

These are the measures we take to keep the personal information we hold safe.

Policy: we handle personal information under the Act on the Protection of Personal Information of Japan and this policy, and take questions and complaints at the contact above.

Organization: our directors are responsible for how personal information is handled. If personal information is leaked, lost or damaged, staff report it to them, and we report to the authorities and tell the people affected as the law requires.

People: photographers and other staff work under a contract that requires them to keep customer information confidential and to use it only for the shoot.

Physical: customer information is viewed through the staff app and the admin pages, which need a sign-in, and is not left where people outside the team can see it.

Technical: each staff member has their own account and sees only what their role needs; photographers see contact details only for the bookings assigned to them. Connections are encrypted, passwords and keys are kept in managed secret storage, card details are handled by Stripe and never reach our servers, and personal information is kept out of application logs. Our company Google and Slack accounts require two-step sign-in.

Outside Japan: some of our providers handle personal information in the United States. We handle it knowing how personal information is protected there (see International Processing).

No online service is perfectly risk free, but we work to reduce the amount of personal information exposed to only what is needed for booking operations.

International Processing

Our booking database is hosted in Japan. Several of the providers listed above, including Stripe, Resend, Google, Microsoft, Slack, Expo and Meta, process information in the United States. By agreeing to this policy when you book, you agree to your personal information being provided to these providers in the United States.

How personal information is protected in the United States, as published by the Personal Information Protection Commission of Japan (in Japanese): https://www.ppc.go.jp/enforcement/infoprovision/laws/offshore_report_america/

What each provider does to protect personal information is set out in its own privacy policy:

Stripe: https://stripe.com/privacy

Resend: https://resend.com/legal/privacy-policy

Google: https://policies.google.com/privacy

Microsoft: https://www.microsoft.com/en-us/privacy/privacystatement

Slack: https://slack.com/trust/privacy/privacy-policy

Expo: https://expo.dev/privacy

Meta (Instagram): https://privacycenter.instagram.com/policy

Meta (WhatsApp): https://www.whatsapp.com/legal/privacy-policy

Updates

We may update this Privacy Policy as the service changes. The latest version will be posted on this page.

Last updated: October 13, 2026