Privacy Policy
1. What we collect
Only what is needed to run a session and reply to an enquiry.
When you book or enquire
- Name, and artist or project name if you give one
- Email address and phone number
- Session details — service, package, date, time, add-ons, number of people, your notes
- Anything else you choose to write in a message
When you buy something
- Billing name and email
- Order contents and amount
- Booking reference and payment outcome
Automatically
- Standard server logs — IP address, browser type, pages requested, timestamps
- Analytics data, if analytics is enabled (see section 5)
We do not collect card numbers, government identifiers, or sensitive information as defined by the Privacy Act.
2. Why we collect it
- To confirm, prepare for and run your session
- To send confirmations, receipts, reminders and calendar invites
- To answer your enquiry
- To deliver files and fulfil orders
- To meet tax and record-keeping obligations
- To send studio news — only if you opted in, and you can leave any time
We do not sell personal information, share it with advertisers or build profiles.
3. Payments
Payments are processed by a third-party payment provider. Card details are entered directly into the provider's secure fields and never touch this website or our servers. We store only the outcome — that a payment succeeded, the amount, and a reference.
Our payment provider is a PCI-DSS compliant processor with its own privacy policy governing the data it handles. Payments are processed by Square. See Square\u2019s privacy policy.
4. Your recordings and creative work
- You own your masters. The studio claims no ownership of your recordings
- Session files are stored securely and kept for 12 months so you can recall or revisit a project
- Unreleased material is never shared, posted, played to third parties or used in promotion without your written permission
- Photos and video from your session are only published if you've agreed to it
- You can ask for your session files, or ask us to delete them, at any time
7. How long we keep it
- Booking and contact records — 7 years, as required for Australian tax and business records
- Session audio and project files — 12 months, then deleted unless you ask us to keep them
- Marketing list — until you unsubscribe
- Server logs — 30 days
8. Security
- The site is served over HTTPS
- Payment credentials are held only by the payment provider, never by us
- API keys and secrets are stored server-side in environment variables, never in the website's code
- Access to session files is limited to the engineers working on your project
If a data breach occurs that is likely to cause you serious harm, we'll notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
9. Your rights
You can ask us to:
- Give you a copy of the personal information we hold about you
- Correct anything that's wrong or out of date
- Delete your information, where we're not legally required to keep it
- Stop sending you marketing — instantly, no questions
- Delete your session files
Email us and we'll action it within 30 days, free of charge. If you're not satisfied with how we've handled a privacy matter, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
10. Contact
The studio operates from a private residential address, which is why it is not published on this website. It is disclosed only to customers with a confirmed booking.
Email: lahaicreative@gmail.com
Location: Girrawheen, Perth, Western Australia
Phone: 0417 152 903
LAHAI Creative · ABN 97 846 645 714