Privacy Policy

This Privacy Policy explains how Doorstep Studio ("Doorstep Studio", "we", "us", or "our"), a division of Travpass Corporate Service Provider LLC, operating the website doorstepstudio.ae, collects, uses, stores, shares, and protects information about you when you book or use our doorstep photography services.

We are committed to protecting your privacy and to handling your personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection ("PDPL") and other applicable UAE laws.

By using our website, submitting a booking form, or engaging our photography services, you confirm that you have read and understood this Privacy Policy.

Data Controller

Travpass Corporate Service Provider LLC

Registered Address

Citibank HQ Building, Floor 12, Sheikh Rashid Rd, next to Wafi Mall, Umm Hurair Second - Dubai

Privacy Contact

hello@doorstepstudio.ae

Phone

+971 56 663 8168

We collect the following categories of personal information:

3.1 Information you provide directly through our booking form

• Full name
• Mobile phone number
• Email address (optional)
• Service type requested
• Number of persons in the session
• Emirate, area, and service location (home, office, or hotel address)
• Preferred date and time slot
• Special requests or notes

3.2 Photographic information collected during the session

• Photographs of you (and any other persons you include in the booking)
• Edited and printed copies of those photographs
• Digital files derived from the session

3.3 Information collected automatically when you use our website

• IP address
• Browser type and device information
• Pages visited and time spent on our website
• Referral source (e.g., the search term or website that led you to us)
• Cookies and similar technologies (see Section 9)

3.4 Information from third-party services we use

• WhatsApp messages exchanged with our team for booking confirmation, ETA updates, and customer service
• Payment-related information from our card terminal provider (we do not store full card numbers)

Photographs of identifiable individuals are considered personal data under UAE law, and biometric photographs (such as those used for visas, passports, and Emirates ID) are considered a sensitive category. By booking a session with us, you provide explicit consent for us to:

• Photograph you and any individuals you have authorised us to photograph
• Edit, retouch, and process those photographs for the purpose you requested
• Print and deliver copies to you
• Store digital files for the limited retention period described in Section 7

If your booking includes other persons (children, family members, or colleagues for corporate sessions), you confirm that you have obtained their consent - or, in the case of minors, the consent of their parent or legal guardian - for us to photograph them.

We use your personal information to:

• Confirm, schedule, and deliver your photography appointment
• Send appointment confirmations, photographer ETA updates, and post-session follow-ups via WhatsApp, SMS, or email
• Process your photographs and prepare them to your specifications
• Verify compliance with embassy, ICA, GDRFA, or other authority requirements
• Process payment for our services
• Respond to enquiries and customer support requests
• Honour our 100% Acceptance Promise (free reshoots if your photo is rejected)
• Improve our website, services, and customer experience
• Comply with our legal and regulatory obligations in the UAE
• Prevent fraud and protect our legal rights

We process your personal information on the following legal bases under the PDPL:

• Your consent - for photography, marketing communications, and the use of cookies (where required)
• Performance of a contract - to deliver the photography service you booked
• Legal obligation - for tax, accounting, and regulatory record-keeping
• Legitimate interests - for service improvement, fraud prevention, and protecting our business, provided these do not override your rights

We retain different categories of information for different periods:

• Booking records (name, contact, address, service details): retained for 24 months after your last appointment, for warranty (free reshoot) and accounting purposes.
• Digital photograph files: retained for 90 days after your appointment, after which they are permanently deleted from our systems unless you request earlier deletion or extended retention.
• Financial and transaction records: retained for 5 years, in line with UAE accounting and tax record-keeping requirements.
• Marketing consents: retained until you withdraw consent.
• Website analytics data: retained for up to 24 months in aggregated form.

You may request earlier deletion of your photographs and booking records at any time by contacting us at hello@doorstepstudio.ae.

We do not sell, rent, or trade your personal information. We share information only in the following limited circumstances:

• Our photographers and operations team - who need access to fulfil your booking
• Service providers - including our website hosting, WhatsApp Business communication, cloud storage, and payment processing partners, all of whom are contractually bound to protect your data
• Legal and regulatory authorities - where required by UAE law, court order, or legitimate request from government authorities
• Professional advisors - such as accountants and lawyers, where necessary

We will never publish, share, or use your photographs for marketing, social media, or any external purpose without your separate, explicit, written consent.

Our website uses cookies and similar technologies to:

• Make the booking form work correctly (essential cookies)
• Remember your preferences (functional cookies)
• Understand how visitors use our site (analytics cookies, e.g., Google Analytics)
• Measure the effectiveness of our advertising (marketing cookies, where applicable)

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of our booking form.

Some of the third-party services we use (such as cloud storage and analytics) may store data on servers outside the UAE. Where this happens, we ensure appropriate safeguards are in place in accordance with the PDPL, including contractual protections with each service provider.

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, alteration, or disclosure. These include:

• Encrypted transmission of booking form data (HTTPS)
• Access controls limiting who within our team can view your information
• Secure storage of digital photograph files
• Regular review of our security practices

No method of transmission or storage is 100% secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

Under the PDPL, you have the following rights regarding your personal information:

• Right to be informed - to know what data we hold and how we use it
• Right of access - to request a copy of the personal data we hold about you
• Right to correction - to ask us to correct any inaccurate information
• Right to erasure - to ask us to delete your data (subject to our legal retention obligations)
• Right to restrict processing - to ask us to stop or limit how we use your data
• Right to object - to object to certain types of processing, including direct marketing
• Right to data portability - to receive a copy of your data in a structured, commonly used format
• Right to withdraw consent - at any time, where our processing relies on your consent

To exercise any of these rights, contact us at hello@doorstepstudio.ae. We will respond within the timeframes required by UAE law.

We photograph children, including newborns, only at the request and with the consent of a parent or legal guardian who is present at the session. We do not knowingly collect personal information directly from children under the age of 18.

With your consent, we may send you occasional marketing messages about our services, offers, or new locations via WhatsApp, SMS, or email. You can opt out at any time by:

• Replying "STOP" to any marketing WhatsApp or SMS
• Clicking the "unsubscribe" link in marketing emails
• Emailing us at hello@doorstepstudio.ae

Service-related communications (booking confirmations, ETA updates, payment receipts) are not marketing and will continue regardless of your marketing preferences.

Our website may contain links to third-party websites (such as our social media profiles or our payment processor's pages). This Privacy Policy does not apply to those websites. We encourage you to read the privacy policies of any third-party site you visit.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. For material changes, we will notify you via email or a prominent notice on our website.

If you believe we have not handled your personal data appropriately, please contact us first at hello@doorstepstudio.ae so we can address your concerns. You also have the right to lodge a complaint with the UAE Data Office or other competent UAE regulatory authority.

For any questions about this Privacy Policy or how we handle your information:

Legal name

Travpass Corporate Service Provider LLC

Email

hello@doorstepstudio.ae

Phone

+971 56 663 8168

Address

Citibank HQ Building, Floor 12, Sheikh Rashid Rd, next to Wafi Mall, Umm Hurair Second - Dubai