Privacy Policy

Overview

Privacy in plain language

Snaps of Harmony ("Snaps of Harmony," "we," "us," or "our") respects your privacy. This policy explains what personal information we collect through snapsofharmony.ca, our inquiry and planning tools, our communications, and our review-display services; why we use it; who may process it; and the choices available to you.

Snaps of Harmony is a photo booth service-area business in Ontario, Canada. This policy applies to website visitors, people who contact us about an event, clients, and people whose reviews or permissioned event media appear on our website.

What may be collected

Information we collect

Information you choose to provide

We collect information that you voluntarily provide when you request availability or a quote, book a service, choose a backdrop, communicate with us, or otherwise use an interactive feature. Depending on what you do, this may include:

• your name, email address, and telephone number;
• an event date, event type, approximate location or venue, guest count, service interests, and other planning details;
• messages, questions, feedback, and files you intentionally send to us;
• booking, contract, invoice, and payment-related information handled through our booking or payment providers; and
• review, testimonial, or event-photo permissions that you give us.

Our website may embed third-party forms or selectors. For example, HoneyBook may process inquiry and booking details, and the Backdrops selector may request an email address and event date. Information entered inside an embedded service is also handled under that provider's privacy terms.

Where a page clearly states that an upload or planning tool works only in your browser, the file or answers stay on your device and are not sent to Snaps of Harmony by that tool. If you later attach a file to an email, quote request, or other submission, that separate submission is sent to us.

Information collected when you use the website

Our website, hosting provider, security services, and embedded providers may automatically process technical information needed to deliver, protect, and understand the site. This may include your IP address, browser and device type, operating system, referring page, pages viewed, approximate location derived from an IP address, timestamps, security events, and cookie or similar identifiers.

Where booking-intent measurement is enabled, the site may temporarily keep an allowlisted booth interest, page type, city slug, and button location in same-tab session storage for up to approximately two hours. It may also prepare conversion events such as a booking-button click, telephone or email click, or confirmed HoneyBook success for an analytics data layer. These events are designed not to include inquiry-form answers or the telephone number or email address you selected. Closing the tab normally clears session storage; browser behaviour can vary.

We do not intentionally place names, email addresses, telephone numbers, uploaded artwork, or private event details into analytics events.

Reviews and permissioned media

We may display reviews that a reviewer published on Google or another review platform, as well as testimonials or event photographs that we have permission to use. Public review data may include the reviewer's display name, profile image, rating, review text, review date, and our public reply. We do not use a public review to imply a venue partnership or disclose private booking details.

Why it is needed

How we use information

We use personal information only for identified and reasonable business purposes, including to:

• respond to questions, check availability, prepare a quote, and recommend suitable services;
• administer bookings, contracts, payments, event planning, setup, and customer support;
• send service communications and, when permitted, relevant marketing communications;
• operate, secure, troubleshoot, measure, and improve our website and services;
• display permissioned event media, testimonials, and public reviews;
• maintain accurate business records, prevent misuse, and enforce our agreements; and
• meet legal, tax, accounting, insurance, and regulatory obligations.

We obtain consent where required. In some cases, we may also use information where it is reasonably necessary to provide a requested service, protect the website, comply with law, or pursue another purpose permitted by Canadian law. You may withdraw consent for future optional uses, subject to legal or contractual limits.

Google API disclosure

Google Business Profile and review data

Snaps of Harmony may connect its own verified Google Business Profile to a private review-synchronization tool. The connection uses Google OAuth and may request the business.manage permission because Google requires that scope for Business Profile review access.

Our tool is designed to use that access narrowly:

• What it accesses: our own Google Business Profile account and location identifiers, and reviews associated with our own verified profile.
• Why it accesses the data: to retrieve and display those reviews on our website and keep the displayed review collection current.
• What it does not do: it is not designed to edit our Google Business Profile, publish replies, alter reviews, access another business's private data, or use Google data for advertising.
• What it stores: OAuth credentials are kept in private server configuration. A review snapshot may retain review identifiers, reviewer display names, profile-image URLs, ratings, comments, review timestamps, public owner replies, and our Google account/location identifiers. The review snapshot is retained for up to 28 days before replacement or deletion. Limited operational records may note the last synchronization status without storing review text.
• How it is shared: review details that reviewers chose to publish on Google may be displayed publicly on our website. We do not sell Google user data, use it for targeted advertising, or disclose OAuth credentials. Hosting and technical service providers may process the data only as needed to operate and secure the service.

When a review is removed or changed on Google, a later successful synchronization is intended to update the current snapshot. A separately permissioned testimonial or editorial excerpt may remain on our website even if it is no longer part of the synchronized feed. We can disconnect the Google connection and delete stored OAuth credentials. You can also manage third-party access through your Google Account.

Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.

Website technology

Cookies, analytics, and embedded services

Cookies and similar technologies help websites remember settings, maintain security, load embedded services, and understand site use. Our site may use:

• essential and security technologies used by WordPress, our host, caching tools, and security providers;
• embedded-service technologies used when content such as HoneyBook forms, the PBBackdrops selector, Paddee template tools, Fotoshare galleries, Trustindex reviews, YouTube or Vimeo video, Google Fonts, maps, or social content loads; and
• analytics technologies that help us understand aggregate website activity and improve page performance. If Google Analytics is enabled, it may process device and browser details, approximate location, pages viewed, and a cookie-based client identifier.

Loading an embedded service generally reveals technical connection information, such as your IP address, browser details, referring page, and interaction timing, to that provider. Information you enter or actions you take inside the embed are handled under that provider's own terms and privacy policy. Some videos load automatically when they approach the visible part of the page; some albums load after you choose them; provider behaviour may differ between pages and device settings.

You can limit or delete cookies through your browser settings. Blocking all cookies may prevent some forms, embeds, or website features from working properly. Controls offered inside a third-party service apply only to that provider. If you use a browser-based image tool's Share action, the operating system and the app you select—not Snaps of Harmony—handle that user-directed transfer.

Service providers

When information is shared

We do not sell or rent personal information. We may share or allow access to information only as reasonably necessary with:

• website hosting, caching, security, email, and technical-support providers;
• HoneyBook and other providers used for inquiries, bookings, contracts, invoices, or payments;
• PBBackdrops or another backdrop-selection provider when you use its embedded selector;
• Paddee when you use an embedded template-selection tool, and Fotoshare when you view an event gallery;
• Google services, which may include Google Business Profile, Google Fonts, YouTube, and analytics if enabled;
• Vimeo for embedded video and review-display providers, including Trustindex where embedded;
• professional advisers, insurers, or authorities where reasonably necessary or legally required; and
• a successor organization in connection with a genuine business reorganization, subject to appropriate confidentiality and legal requirements.

Some providers process information in the United States or other countries. As a result, information may be subject to the laws and lawful-access processes of those jurisdictions. Snaps of Harmony remains accountable for personal information under its control and uses contractual or other reasonable measures when engaging service providers.

Third-party websites and embedded services have their own privacy practices. We encourage you to review their policies before submitting information directly to them.

Responsible handling

Retention and safeguards

We keep personal information only as long as reasonably necessary for the purposes described in this policy, to provide requested services, maintain appropriate business records, resolve disputes, and meet legal, tax, accounting, insurance, or security obligations. Retention periods vary by record type and provider. When information is no longer required, we take reasonable steps to delete, anonymize, or securely dispose of it.

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information. These include restricted account access, private credential storage, reputable service providers, software updates, and website security controls. No internet transmission or storage system can be guaranteed completely secure.

Your control

Your privacy choices

Subject to applicable law, you may ask us to:

• explain whether we hold personal information about you and how it has been used or disclosed;
• provide access to, or correct, your personal information;
• withdraw consent for future optional uses;
• delete information that we are not legally or reasonably required to retain;
• stop sending marketing emails; or
• review a privacy concern or complaint.

Marketing emails will include an unsubscribe method where required. Transactional messages about an inquiry, quote, booking, contract, payment, or event may still be sent when necessary. We may need to verify your identity before completing an access, correction, or deletion request.

Children's privacy

Our website and inquiry services are intended for adults planning events and are not directed to children under 13. If you believe a child submitted personal information to us without appropriate consent, please contact us so we can review and remove it where appropriate.

Changes to this policy

We may update this policy when our practices, providers, or legal obligations change. The current version will be posted at this address with a revised "Last updated" date. We will provide additional notice where a material change requires it.

Questions or requests

Contact us

Snaps of Harmony is responsible for personal information under its control. To ask a privacy question, request access or correction, withdraw consent, or make a complaint, contact:

We will investigate privacy concerns and respond within a reasonable time. If a concern is not resolved, you may contact the Office of the Privacy Commissioner of Canada.