Privacy

Who this is

This site is run by Makayla Lotesto Photography (ABN 11 623 197 674), a photography business based in Melbourne, Victoria, Australia. For anything about your privacy, write to makaylalotesto.photography@outlook.com.

What is collected, and why

When you send an enquiry

The form asks for your name and email address and, depending on the form, a phone number, the date and venue of your event, the number of guests, your budget, your business name and a message. This is used only to reply to you and to plan the work.

If your enquiry does not lead to a booking, it is deleted automatically two years after you send it, or sooner if you ask. If you book, your enquiry is kept with the booking for as long as it is needed for the work and for business records.

To stop the form being flooded by automated spam, a scrambled version of your internet (IP) address is stored with each enquiry. The address itself is not stored and cannot be worked out from the scrambled version, which is removed after seven days.

When you book online

The booking page asks for your name, email address and mobile number, and anything you would like the business to know. This is used only to hold your appointment and to contact you about it. You are shown a private web address for your booking, where you can add it to your calendar or cancel it; the address is long and random, is not listed anywhere, and is shown only to you. Other people booking see which times are taken, never who took them.

Bookings are kept as business records for as long as they are needed for the work and for tax, and are deleted sooner if you ask and nothing requires them to be kept.

When you are sent an invoice

An invoice records your name and email address, what was billed and, if you gave them, your business name, ABN and address. You are sent a private web address where you can view and print it; the address is long and random, is not listed anywhere, and is given only to you. Invoices are business records and are kept for at least five years, as tax law requires.

An invoice may instead be sent through the accounting software the business keeps its books in (Xero). In that case your name, your email address and the invoice are also held by Xero, which emails the invoice to you and hosts the page where you view and pay it, and which may store information outside Australia.

When you visit

The site counts visits using a service called PostHog. This happens without cookies and without storing anything in your browser. It records which pages are viewed, the site you arrived from, the type of device and browser, and an approximate location (country and city) worked out from your IP address. It does not identify you.

If you choose “OK” on the notice at the bottom of the site, two more things happen. An identifier is stored in your browser so a later visit is recognised as a return visit, and your visit is recorded: the pages you see, where you click and how you scroll. Anything you type into a form is hidden in these recordings. They are used only to find and fix parts of the site that are confusing. Recordings are kept for 30 days and then deleted.

Photographs

Photographs of clients and their guests appear on this site only as agreed with the client. If you appear in a photograph here and would like it removed, write to makaylalotesto.photography@outlook.com.

Who else handles it

Personal information is not sold or passed to anyone for their own use. These companies store or process it to run the site:

• Supabase stores enquiries, bookings, invoices and photographs, on servers in Sydney, Australia.
• Vercel hosts the site and handles each page request. It is a United States company, and requests may be handled by its servers in Australia or overseas.
• PostHog provides the visitor statistics and recordings, on servers in Frankfurt, Germany.
• Microsoft provides the email service (Outlook) that enquiries are answered from, and may store email on servers outside Australia.

This means information you provide may be stored or processed outside Australia, including in the United States and Germany.

Your choices

You can change your mind about recordings and the browser identifier at any time: Privacy choices.

You can ask to see the personal information held about you, to have it corrected, or to have it deleted, by writing to makaylalotesto.photography@outlook.com. You will get a reply within 30 days.

Complaints

If you think your information has been mishandled, please write to makaylalotesto.photography@outlook.com first so it can be put right. If you are not satisfied with the response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

This page will be updated if any of the above changes. Last updated 13 November 2026.