BFO Photographie · Nouméa, New Caledonia
Privacy policy
I am Benjamin Forte, photographer (BFO Photographie), and I am responsible for the data you entrust to me on www.bfo.nc. This page explains, in plain words, what data I collect, why, how long I keep it and what your rights are. I never sell or pass on your data.
1. Who is the data controller?
BFO Photographie – Benjamin Forte, photographer in Nouméa (New Caledonia). For any question about your data: bfo@bfo.nc or +687 74 74 47. Full details are given in the legal notice.
2. What data, and what for?
Booking request (the module on the Pricing page): surname, first name, e-mail, phone, language, chosen package, date, location and message. This information is used to reply to you, confirm my availability and prepare the proposal or quote. It is needed for the steps that precede the contract.
Contract, invoicing and deposit: identity and billing address (for a company, its name and RIDET number), electronic signature of the contract (date and time, IP address, SHA-256 digital fingerprint of the signed document) and amounts paid. This data is used to carry out the service and to meet my accounting obligations. The deposit is paid on the PayPal platform: I never receive your card details.
Contact by e-mail or WhatsApp: what you write to me, solely to reply to you.
Your photos: the images taken during the session are delivered to you in a private online gallery, reached through the link I send you. They are only used for my own communication (website, social networks, portfolio, competitions) with your agreement, stated in the contract and changeable at any time by e-mail. Photos of children are never published without their parents’ express consent.
Client area: as soon as your deposit is received, a client area is opened on this site with the e-mail address of your booking. It keeps your password (in a protected form, never readable), your logins (device, date) and the information you choose to add: contact details, members of your family and their dates of birth, answers to the session preparation questionnaire. This information is only used to prepare and follow up your sessions. You can change it, or delete your client area, at any time from your profile.
Browsing the site: the site uses no audience-measurement tool and displays no advertising; optional advertising trackers, described in section 3, may only be used if you accept them. Like any host, the server may keep technical logs (IP address, date, page viewed) for the security of the site.
3. Cookies and third-party services
The site sets a cookie, pll_language, which remembers the language you chose for one year. Other cookies are only set if you use the feature concerned: in your client area, a session cookie (bfo_cli, 30 days) keeps you logged in, and during a first login a temporary cookie (bfo_cli_e, 15 minutes) keeps the address you entered while you type the code you received; in a private gallery, a cookie remembers the language you chose (bfo_lang, one year), the gallery’s access code if it has one (30 days) or your registration as a guest (one year). These cookies are essential for the site to work and require no consent. The site also remembers your cookie choice in a technical cookie (bfo_consent, 180 days). Two trackers are optional and are only used if you click “Accept” in the banner. The first: if you arrive from a Google Ads ad and click “Accept” in the banner, a cookie (bfo_gclid, 90 days) keeps the ad click identifier. If that click leads to a booking, the identifier, the date and the deposit amount may be sent to Google Ads to measure how well the ads work, with no name, e-mail address or other personal data. The second: the Meta pixel (Facebook, Instagram) sets its own cookies (_fbp, 90 days; _fbc if you arrive from a Meta ad) and tells Meta which pages you view, clicks to WhatsApp, phone or e-mail, the sending of a booking request and the payment of a deposit (with its amount), to measure and improve the ads. The site never sends your name, e-mail address or phone number; Meta may however link this information to your Facebook or Instagram account under its own privacy policy. If you decline, none of these trackers is used; you can change your mind at any time with the small round button at the bottom left of the screen. No other advertising or tracking cookies are used.
Some features rely on outside services, each with its own privacy policy: PayPal for paying the deposit; WhatsApp (Meta) if you choose to write to me through it; Google Ads to measure ad performance (click identifier only, and only if you accepted the optional trackers); Meta (Facebook, Instagram) to measure ad performance (pixel, only if you accepted the optional trackers); Google Fonts for displaying the typefaces, which sends your IP address to Google’s servers when pages load.
4. Who has access to your data?
Only me, together with the strictly necessary technical providers: BFO Partners, which builds and maintains the website and its applications, the site’s host (OVH SAS, France), my e-mail service and PayPal for collecting the deposit. Your data is never sold, rented or passed on to third parties.
5. How long?
A request that does not lead to a booking is kept for three years after our last exchange, then deleted. Bookings, contracts and invoices are kept for the duration of the service, then for the statutory retention period for accounting documents (ten years). Your photos remain available in your private gallery with no time limit, and I keep a backup of the delivered files. Your client area stays open for as long as you wish; if it is deleted, your account and profile are erased (your bookings, contracts and invoices are kept as stated above). Photos you allow me to publish stay published until you withdraw your agreement.
6. Security
Exchanges with the site are encrypted (HTTPS). Access to the administration is protected by a password and two-factor authentication. Client area passwords are never stored in plain text, and login attempts are limited. Signed contracts are time-stamped and come with a digital fingerprint that guarantees they have not been altered.
7. Your rights
You can ask at any time to access your data, to have it corrected or deleted, to object to its processing, to restrict it or to receive a copy of it, and you can withdraw your agreement to the use of your photos. Simply write to bfo@bfo.nc; I reply within one month. If you believe your rights are not being respected, you may lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), which is competent in New Caledonia.
8. Minors
Sessions with children take place with the agreement and under the responsibility of their parents. Data about a minor is only processed under the contract signed by the parents.
9. Changes to this policy
This policy may be updated to follow changes to the site or to the regulations. The date of the last update is shown at the top of the page.