Privacy Policy

Who we are

House of Noona is a photography and design business based in Krabi, Thailand, operating the website houseofnoona.com. House of Noona is responsible for the personal information described in this policy.

For anything to do with your privacy or your personal information, contact us at hello@houseofnoona.com, or on the WhatsApp number shown in the footer of this site.

The information we collect

Information you give us

• Booking enquiries. WhatsApp is our booking channel. When you message us, we receive your WhatsApp phone number, your profile name, and whatever you write in the conversation, typically your name, your dates in Krabi, the location you want and the number of people in your group.
• Email. If you email us instead, we receive your email address and the content of your message.
• Booking and payment details. The session date, time, location and package you book, and the fact that a payment or deposit was made. Card payments are handled by Stripe. We never see or store your full card number, expiry date or security code. Stripe holds those, and we only receive confirmation of the payment, the amount, and a reference.
• Photographs. The photographs taken during your session are personal information about the people in them. See “Your photographs” below.

Information collected automatically

• Server logs. Our web server records the IP address, the date and time, the page requested, the referring page and the browser user-agent for each request. This is standard web server logging and it happens for every visitor.
• Cookies. A small essential cookie called cookie-consent remembers the choice you made in the cookie banner, so we do not ask again on every page. It stores nothing else and expires after one year.
• Analytics, only if you accept. If, and only if, you choose “Accept all” in the cookie banner, we load Google Analytics 4, which sets its own cookies and records the pages you view, roughly where in the world you are, and what kind of device and browser you use. If you choose “Essential only”, or ignore the banner, Google Analytics is never loaded and its cookies are never set. You can change your mind at any time using the “Cookie settings” link in the footer.

We do not run any advertising pixel, remarketing tag or social media tracking pixel on this website.

How we use the information

• To answer your enquiry and agree a session with you.
• To plan, carry out and deliver the photography session you booked.
• To take payment, issue receipts and keep the records a business has to keep.
• To send you your finished photographs and the gallery link.
• To keep the website working, secure and free of abuse.
• To understand in aggregate which pages people find useful, so we can improve the site, but only where you accepted analytics cookies.

We use your information to perform the contract you entered into when you booked, to meet our legal and accounting obligations, on the basis of our legitimate interest in running and securing the site, and (for analytics cookies and for any promotional use of your photographs) on the basis of your consent. We do not sell your personal information, and we do not send marketing email unless you asked us to.

Who we disclose it to, and how

We share personal information only with the service providers we need in order to run the business. Each of them acts on our instructions and is bound by its own privacy terms.

• Stripe: payment processing. When you pay, your card and billing details go directly from your browser to Stripe over an encrypted connection; they are not passed through our own servers. See stripe.com/privacy.
• WhatsApp (Meta): our booking channel. Your messages travel through WhatsApp’s infrastructure and are handled under Meta’s privacy terms as well as ours.
• Databank (NAND Technologies AS): our web host and technical maintainer (databank.no), a Norwegian IT company. Our website, its WordPress content management system and its server logs sit on infrastructure Databank operates and administers for us.
• Google: Google Analytics receives website usage data through JavaScript in your browser, but only after you accept analytics cookies. Separately, this site loads its typefaces from Google Fonts, which means your browser contacts Google’s font servers and Google receives your IP address as part of that request. That happens on every page load, because the fonts are needed to display the site.
• Etsy and Shutterstock: our shop pages show items listed on Etsy and images listed on Shutterstock. Buying happens on their websites, not ours. When you click through, you leave houseofnoona.com and their privacy terms apply to whatever you do there. We receive no personal information back from them beyond ordinary order notifications for items sold through our own Etsy shop.
• Instagram and Pinterest: the footer links to our profiles. These are ordinary links; following one takes you to their platform, where their terms apply.
• Professional advisers and authorities: accountants, and any authority we are legally required to disclose information to.

Disclosure happens in three ways and no others: automatically, over encrypted HTTPS connections between your browser or our server and the provider named above; by us sending information deliberately, for example emailing you a gallery link; and by you clicking an outbound link and leaving this site.

Your photographs

Photographs of you are personal information, and we treat them that way. We may show photographs from a session in our portfolio, on this website and on our social media accounts, as examples of our work.

If you do not want your photographs used that way, tell us in writing. A WhatsApp message or an email to hello@houseofnoona.com is enough. We will not use them, and if we already published them we will take them down. You can ask before, during or after your session, and it costs you nothing and changes nothing about your booking.

How long we keep it

• WhatsApp and email conversations: kept while we are in contact and for up to two years afterwards, so we can answer questions about a past session.
• Booking, payment and invoice records: kept for as long as tax and accounting law requires.
• Session photographs and delivery galleries: originals kept for up to twelve months after delivery so we can re-send a lost gallery, then deleted unless you ask us to keep them for longer.
• Server logs: kept for a short period for security and troubleshooting, then rotated out.
• Analytics data: retained by Google under its own retention settings; it is not linked by us to your name.

International transfers

House of Noona is based in Thailand and many of our clients are visitors from the EU, the UK and elsewhere. That means information about you is processed in Thailand, and by the providers named above in the countries where they operate, including the United States and Europe. Where information about visitors from the EU or the UK is transferred, we rely on our providers’ standard contractual clauses and equivalent safeguards. If you would like details of the safeguards that apply to you, ask us.

How we keep it safe

• The whole website is served over HTTPS with a valid TLS certificate, so traffic between your browser and our server is encrypted.
• Card data never touches our servers. Stripe, a PCI-DSS Level 1 certified provider, handles it end to end.
• Administrative access to the website and its content management system is restricted to named accounts with strong, unique passwords, held by House of Noona and by Databank as our technical maintainer.
• Software and server packages are kept up to date, and the site and its database are backed up.
• Photographs and galleries are held in access-controlled storage, and gallery links are unlisted rather than published.
• We collect only what we need, keep it only as long as we need it, and give access only to the people who need it to do the work.

No website or business can promise perfect security, but if a breach ever affected your personal information we would tell you and the relevant authority as the law requires.

Your rights

You can ask us to give you a copy of the personal information we hold about you, to correct anything that is wrong, or to delete it. You can withdraw a consent you gave, including consent to analytics cookies (through “Cookie settings” in the footer) and consent to us showing your photographs. You can object to a particular use, ask us to restrict it, or ask for your information in a portable format. Depending on where you live, you may also have the right to complain to your national data protection authority.

Write to hello@houseofnoona.com and we will answer within 30 days. We may need to check who you are before we act on a request.

Children

This website is not aimed at children, and we do not knowingly collect information from children through it. Where children are photographed as part of a family session, we act on the instructions of the parent or guardian who made the booking, and we do not publish photographs of children without that parent or guardian agreeing.

Changes to this policy

If we change how we handle personal information, we will update this page and the effective date at the top of it.

Contact

House of Noona · Krabi, Thailand · hello@houseofnoona.com