top of page

Privacy Policy for www.fayealamango.com

​

​

Last Updated: May 28, 2025

This Privacy Policy explains how Faye Alamango ("we," "us," or "our") collects, uses, stores, and protects your personal data when you visit our website, www.fayealamango.com, and engage with our videography and photography services.

We are committed to protecting your privacy and handling your personal data transparently and in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Maltese Data Protection Act (Chapter 586 of the Laws of Malta).

​

1. Who We Are (Data Controller)

Faye Alamango, hello@fayealamango.com

Website: www.fayealamango.com

As the data controller, we determine the purposes and means of processing your personal data.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

  • Information You Provide Directly:

    • Contact Form Data: When you use the contact form on our website to send queries or book services, we collect your name, email address, phone number, and any other information you choose to include in your message regarding your videography or photography needs.

    • Booking and Service Information: If you proceed with booking our services, we will collect further details necessary for the contract, such as event dates, locations, specific requirements, preferences, and potentially your physical address for invoicing or delivery of products.

    • Payment Information: If you make payments, we may collect billing address details. Please note that we do not directly store full credit card numbers on our Wix site; these are processed securely by Wix's integrated third-party payment processors (e.g., Stripe, PayPal), who are independently responsible for the security of your payment data.

    • Direct Communications: Records of your correspondence with us via email, phone calls, or social media.

  • Photographic and Videographic Content:

    • Images and videos of individuals that we capture as part of our professional services. Where individuals are identifiable in these images/videos, they constitute personal data. This includes identifiable individuals at events, portraits, etc.

  • Automatically Collected Information (via Wix and its partners):

    • Website Usage Data: When you visit our website, Wix automatically collects certain information about your device and Browse activity. This may include your IP address, browser type, operating system, pages visited, time spent on pages, referral source, and clicks. This data helps us understand how our website is used and improve its functionality.

    • Cookies and Tracking Technologies: Our Wix website uses cookies and similar technologies (e.g., pixels, web beacons) for various purposes, including:

      • Strictly Necessary Cookies: Essential for the website to function (e.g., site navigation, security, user sessions).

      • Functional Cookies: To remember your preferences (e.g., language, region).

      • Performance/Analytical Cookies: To analyze how visitors interact with the website, identify popular pages, and improve website performance (e.g., Google Analytics via Wix).

      • Marketing/Advertising Cookies: To deliver relevant content and advertisements. (See Section 5 for more details on cookies).

3. How We Collect Your Personal Data

We collect personal data in the following ways:

  • Directly from you:

    • When you complete the contact form on our website.

    • When you communicate with us via email, phone, or other direct channels.

    • When you book our services and provide details relevant to the project.

    • When you provide explicit consent for us to photograph or video record you and use those images/videos (e.g., for portfolio, marketing).

  • Automatically via our Wix website: Through the use of cookies and tracking technologies embedded in the Wix platform.

  • From third parties: In certain situations, if you are referred to us by an event planner or other third-party service provider, they may share your contact information to facilitate our engagement. We ensure that such third parties have a legal basis for sharing your data with us.

4. Purposes and Legal Basis for Processing Your Personal Data

We process your personal data for the following purposes, relying on the specified legal bases under GDPR:

  • To provide our videography and photography services:

    • Legal Basis: Performance of a contract (Art. 6(1)(b) GDPR) or steps necessary to enter into a contract. This includes taking bookings, planning shoots, capturing images/videos, editing, and delivering final products.

  • To respond to your inquiries and communicate with you:

    • Legal Basis: Legitimate interests (Art. 6(1)(f) GDPR) for responding to general inquiries from the contact form, or performance of a contract (Art. 6(1)(b) GDPR) for communications related to a booking or service.

  • To manage and improve our website:

    • Legal Basis: Legitimate interests (Art. 6(1)(f) GDPR) to ensure our Wix website is functional, secure, and to understand user behavior for improvements. We also rely on your consent for non-essential cookies.

  • For marketing and promotional purposes (with consent):

    • Legal Basis: Your explicit consent (Art. 6(1)(a) GDPR). This specifically applies to displaying your identifiable images/videos in our portfolio, on our website, social media, or in other promotional materials. We will always seek your clear and informed consent for this use of your images/videos.

  • For invoicing and payment processing:

    • Legal Basis: Performance of a contract (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR) for tax and accounting purposes.

  • To comply with legal obligations:

    • Legal Basis: Compliance with a legal obligation (Art. 6(1)(c) GDPR), such as tax laws, data protection laws, or responding to lawful requests from public authorities in Malta or the EU.

  • To protect our legitimate interests:

    • Legal Basis: Legitimate interests (Art. 6(1)(f) GDPR), such as preventing fraud, ensuring network and information security (including monitoring website activity for malicious behaviour), establishing, exercising or defending legal claims, and for internal administrative purposes.

Special Category Data (e.g., images revealing racial or ethnic origin, religious beliefs, or health data): In some instances, particularly with wedding or event photography/videography, images might inadvertently reveal special category data (e.g., religious attire, health conditions visible). Our primary purpose for processing such images is artistic and contractual, not to extract or analyze special category data. We only process such data if it is manifestly made public by the data subject, or if we have explicit consent, or another lawful basis under Article 9 of GDPR that permits such processing in the context of our services.

5. Cookies and Similar Technologies (Wix Specific)

Our Wix website utilizes cookies and similar tracking technologies. These are small text files placed on your device by websites that you visit. They are crucial for website functionality and analytics.

  • How Wix uses cookies: Wix, as our hosting platform, uses cookies to:

    • Enable core functionality of the website (e.g., user sessions, security).

    • Monitor and analyze performance, operation, and effectiveness of the Wix platform.

    • Ensure the Wix platform is safe and secure for you to use.

    • Understand how users interact with the site (e.g., Google Analytics integration).

  • Your Control:

    • When you first visit www.fayealamango.com, you will be presented with a cookie consent banner, allowing you to manage your preferences for non-essential cookies (e.g., analytics, marketing).

    • You can also adjust your browser settings to refuse some or all cookies, or to alert you when cookies are being sent. Please note that disabling strictly necessary cookies may impact the functionality of our website.

6. Sharing Your Personal Data

We may share your personal data with the following categories of recipients:

  • Wix.com Ltd.: As our website host, Wix processes your data on our behalf. Wix is committed to GDPR compliance and provides tools to help us manage your data rights. Your data may be stored through Wix.com's data storage, databases, and the general Wix.com applications. They store your data on secure servers behind a firewall. You can review Wix's Privacy Policy for more details.

  • Service Providers: Third-party companies that perform services on our behalf, such as:

    • Payment Processors: (e.g., Stripe, PayPal) for secure payment transactions.

    • Cloud Storage Providers: For securely storing images and videos.

    • Email Communication Services: For sending emails related to inquiries, bookings, or newsletters (if you've opted in).

    • Analytics Providers: (e.g., Google Analytics) to help us understand website traffic and improve user experience. These providers are contractually bound to protect your data and only process it according to our instructions and applicable data protection laws.

  • Legal and Regulatory Authorities: When required by law, court order, or to cooperate with legal investigations, we may disclose your personal data to governmental or regulatory bodies, law enforcement agencies, or other authorized third parties in Malta or the EU.

  • Professional Advisors: Our legal, accounting, or other professional advisors where necessary for them to provide services to us.

  • With your consent: We may share your identifiable images/videos for promotional purposes on our website, social media, or other platforms, but only with your explicit written consent.

  • Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal data.

We will not sell, rent, or trade your personal data to third parties for their independent marketing purposes without your explicit consent.

7. International Data Transfers

Our primary data storage and processing generally take place within the European Economic Area (EEA), including through our Wix hosting. However, some of our third-party service providers (e.g., certain cloud storage or analytics providers) may be located outside the EEA (e.g., in the United States or Israel, which has an adequacy decision from the EU Commission).

In such cases, we ensure that appropriate safeguards are in place to protect your personal data, such as:

  • Adequacy Decisions: Relying on transfers to countries deemed by the European Commission to provide an adequate level of data protection (e.g., Israel).

  • Standard Contractual Clauses (SCCs): Implementing SCCs approved by the European Commission, which impose contractual obligations on the recipient to protect your personal data to an equivalent standard as within the EEA.

  • Other legally approved mechanisms: Relying on other specific derogations or mechanisms under GDPR.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, accidental loss, destruction, alteration, disclosure, or damage. These measures include:

  • Wix's Security Measures: Our website benefits from the security features provided by the Wix platform, including SSL/TLS encryption, secure servers, and firewall protection.

  • Access Controls: Restricting access to personal data to authorized personnel only.

  • Data Minimization: Collecting only the personal data that is necessary for the stated purposes.

  • Secure Storage: Storing digital data on secure servers and implementing best practices for physical data if applicable.

  • Regular Review: Periodically reviewing our data processing practices and security measures.

Despite our efforts, no method of transmission over the internet or electronic storage is 100% secure. Therefore, while we strive to protect your personal data, we cannot guarantee its absolute security.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

The retention periods vary depending on the type of data and purpose:

  • Contact Form Data: Retained for as long as necessary to address your query and for a reasonable period afterwards for our records (e.g., up to 12 months for general inquiries, longer if it leads to a booking).

  • Client Contractual Data: Retained for the duration of the contract and for a period thereafter as required by Maltese law for tax and accounting purposes (typically 10 years from the end of the financial year in which the transaction occurred).

  • Images/Videos (with consent for portfolio use): Retained for as long as our business is active and the consent remains valid, unless you withdraw your consent. We may retain a copy for archival purposes even after withdrawal of public consent, but it will not be publicly displayed or used for promotion.

  • Website Usage Data (e.g., analytics via Wix/Google Analytics): Typically retained for a limited period (e.g., 26 months for Google Analytics data) or until you clear your browser cookies.

  • Communication Data: Retained for as long as necessary to address your inquiries and for a reasonable period afterwards for our records.

Once the retention period expires, your personal data will be securely deleted or anonymized.

10. Your Data Protection Rights

Under GDPR and Maltese law, you have the following rights regarding your personal data:

  • Right to be informed: You have the right to be informed about the collection and use of your personal data, which this Privacy Policy aims to do.

  • Right of access (Art. 15 GDPR): You have the right to request a copy of the personal data we hold about you.

  • Right to rectification (Art. 16 GDPR): You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

  • Right to erasure ("right to be forgotten") (Art. 17 GDPR): You have the right to request the deletion of your personal data under certain circumstances (e.g., if the data is no longer necessary for the purposes for which it was collected, or if you withdraw consent and there is no other legal basis for processing).

  • Right to restriction of processing (Art. 18 GDPR): You have the right to request that we restrict the processing of your personal data under certain conditions (e.g., if you contest the accuracy of the data, or if the processing is unlawful).

  • Right to data portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller, where technically feasible.

  • Right to object (Art. 21 GDPR): You have the right to object to the processing of your personal data where we are relying on legitimate interests as the legal basis, or for direct marketing purposes.

  • Right to withdraw consent (Art. 7(3) GDPR): Where we rely on your consent for processing your personal data (e.g., for using your images in our portfolio), you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

  • Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. In Malta, the relevant authority is the Information and Data Protection Commissioner (IDPC).

    • Contact Details for IDPC:

To exercise any of these rights, please contact us using the contact details provided in Section 1. We will respond to your request within one month, as required by GDPR. We may ask for identification to verify your identity before processing your request.

11. Children's Privacy

Our services are not directly aimed at children under the age of 16. If our services involve photographing or videographing children (e.g., at family events), we will ensure that explicit consent is obtained from a parent or legal guardian for the child's participation and for any public display or use of their identifiable images/videos. If we become aware that we have collected personal data from a child under 16 without appropriate parental consent, we will take steps to delete that information as quickly as possible. If you believe we may have collected personal data from a child under 16 without proper consent, please contact us.

12. Third-Party Links

Our website may contain links to other websites that are not operated by us. This Privacy Policy does not apply to those third-party websites. We are not responsible for the privacy practices or the content of such websites. We encourage you to review the privacy policies of any third-party websites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new technologies. We will post any updates on this page with a revised "Last Updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact 

Faye Alamango at hello@fayealamango.com 

​

Important Notes for Implementation on Wix:

  1. Dedicated Privacy Policy Page: Create a dedicated page on your Wix website for this Privacy Policy and link to it clearly in your website's footer, making it accessible from every page.

  2. Cookie Consent Banner: Ensure your Wix site has an active and properly configured cookie consent banner that allows users to accept or decline different categories of cookies (especially analytics and marketing cookies). Wix offers built-in tools for this.

  3. Contact Form and Consent: For your contact form, consider adding a checkbox next to the submit button where users explicitly consent to their data being processed according to your Privacy Policy. While not strictly required for basic inquiries (which can fall under legitimate interest or pre-contractual steps), it adds an extra layer of transparency and legal certainty, especially if you intend to use their contact details for follow-up marketing (which would require separate, explicit consent).

    • Example wording for the checkbox: "I have read and agree to the Privacy Policy." (Link "Privacy Policy" to the actual policy page).

  4. Photography/Videography Consent Forms: For the identifiable images and videos you capture of clients, it is critical to have separate, clear, and specific consent forms. These should outline:

    • What images/videos will be taken.

    • The specific purposes for which they will be used (e.g., for your private client gallery, for your public portfolio on the website, for social media promotion, for print marketing).

    • How long the images/videos will be retained for each purpose.

    • Their right to withdraw consent at any time.

    • You should retain records of these consents.

  5. Review Wix's Data Processing Addendum (DPA): As a Wix user, you are the data controller and Wix is a data processor. Familiarize yourself with Wix's DPA, which outlines their commitments to GDPR compliance.

  6. Third-Party Apps/Integrations: If you use any third-party apps or integrations on your Wix site (beyond Wix's core features, like a separate booking system or a specific analytics tool not native to Wix), ensure they are also GDPR compliant and mention them in your privacy policy if they collect personal data.

bottom of page