Privacy Policy

Last updated: May 2026

This policy explains how Shooting Stars Photo Booth Ltd. handles your personal information. We want you to feel confident that your data and the memories we capture are treated with respect and care.

Information We Collect

When you visit our website or inquire about a booking, we collect details like your name, email address, phone number, and event specifics. This allows us to provide an accurate quote and communicate with you about your celebration.

During an event, our booths capture media in the form of photos, videos, GIFs, and audio recordings. To deliver these files to you quickly, we may collect phone numbers or email addresses directly at the booth.

For corporate events and brand activations, we may collect additional information such as survey responses or lead generation data. In these cases, we are collecting this on behalf of the corporate client who hired us, and that information is shared with them.

How We Use Your Information

We use your contact details to manage your booking, send invoices, and provide support. Your event media is used to create your deliverables, including online galleries, physical prints, and guestbook albums.

We also use tracking tools on our website from partners like Google, Meta, and Bing. These tools help us understand how visitors interact with our site and allow us to show relevant advertisements to people who might be interested in our services.

Media Delivery and Sharing

Once your photos or videos are captured, they are uploaded to secure online galleries hosted by third party providers. We provide you with the files or a link to your gallery, which you can then share on your own social media accounts or with your guests. Our booths do not have direct social media integration, so we never ask for your social media login information.

Our Instagram Messaging Assistant

If you send a direct message to our Instagram Business Account (@shootingstarsca), your message may be handled by Stella — our AI-powered assistant — who helps answer questions about our services, pricing, and availability.

Here is exactly what happens when you DM us:

• Your Instagram username and message text are received by our system.
• The message is sent to an AI service (Anthropic Claude) to generate a helpful, on-brand reply.
• The reply is sent back to you through Instagram.
• Your inquiry may be saved to our internal CRM (Notion) so we can follow up if needed.

We only use your message content to respond to your inquiry. We do not use it for advertising, we do not sell it, and we do not share it with anyone outside of the services listed below.

Third Parties & Service Providers

We do not sell your personal information to outside companies. We work with a small number of trusted services to run our business. Below is the full list of companies that may handle your data on our behalf:

• Anthropic — AI platform that powers our messaging assistant. Message content is processed to generate replies and is subject to Anthropic's Privacy Policy.
• Notion — Cloud-based CRM where we store inquiry and lead information. Subject to Notion's Privacy Policy.
• Twilio — Used to send internal SMS notifications to our team when a new inquiry arrives. Subject to Twilio's Privacy Policy.
• Modal Labs — Cloud infrastructure that runs our backend systems. Subject to Modal's Privacy Policy.
• Google Analytics & Google Tag Manager — Website analytics and tag management tools we use to understand how visitors interact with our site. Google Tag Manager enables us to deploy and manage measurement tools without modifying code directly. Subject to Google's Privacy Policy.
• Microsoft Clarity — Behavioral analytics tool that generates anonymous session recordings, heatmaps, and click pattern reports to help us improve our website. Clarity may collect your IP address, device information, and anonymized interaction data such as mouse movements, clicks, and scroll depth. No personally identifiable information is captured in recordings. Subject to Microsoft's Privacy Policy.
• ProvenExpert — A review and reputation platform. We display a ProvenExpert rating badge on our website. When this badge loads, ProvenExpert's servers may receive your IP address and browser information. Subject to ProvenExpert's Privacy Policy.
• IONOS — Our web hosting and email provider. When you submit a contact or quote request form, your name, email address, and phone number pass through IONOS's mail servers to reach our inbox. Subject to IONOS's Privacy Policy.
• Cloudflare Turnstile — An invisible security check that protects our contact and quote forms from automated abuse. It runs in the background when you submit a form and requires no action from you. To tell real visitors apart from bots, Cloudflare may collect your IP address, browser and device characteristics, and interaction signals. It does not use this information to track you across websites or serve advertising. Subject to Cloudflare's Privacy Policy and the Cloudflare Turnstile Privacy Addendum.

For brand activations, data collected specifically for the event host will be shared with that host as part of our service agreement with them.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. A cookie is a small text file placed in your browser when you visit a site. We use them to understand how visitors use our website and to improve the experience we provide.

The technologies currently active on our site include:

• Google Analytics cookies (_ga, _gid, _gat) — Track page views, session length, and general usage patterns. Data is aggregated and anonymized. These cookies expire between 24 hours and 2 years depending on type.
• Microsoft Clarity cookies — Enable session recording and heatmap features. Interaction data is anonymized and used only to improve our website. Clarity cookies expire within 1 year.
• WordPress session cookies — Our blog sets functional cookies for basic site operation (for example, recognizing a logged-in administrator). These are not used for tracking or advertising.

You can control or disable cookies at any time through your browser settings. Disabling analytics cookies will not affect your ability to browse our site, though some features of our blog may require functional cookies to work correctly. Most browsers support Do Not Track signals, which our analytics providers respect where applicable.

How Long We Keep Your Information

We keep your information only as long as it is useful for serving you:

• Booking and inquiry data (name, email, phone, event details) — kept for up to 2 years so we can assist with future bookings and referrals.
• Instagram and social media messages — kept for up to 12 months in our CRM.
• Event media (photos, videos, GIFs) — online galleries are typically available for 90 days after your event, after which they are removed from our servers unless you request otherwise.
• Website analytics — Google Analytics data is retained according to Google's standard settings (up to 14 months). Microsoft Clarity session data is retained for up to 13 months.

After these periods, your data is deleted or anonymized. You can always ask us to delete your information sooner — see the section below.

How We Protect Your Information

We take reasonable steps to keep your information safe. This includes:

• All data transmitted between your device and our systems is encrypted in transit (HTTPS/TLS).
• Access to our CRM and backend systems is restricted to authorized team members only, protected by strong passwords and access controls.
• We use reputable cloud providers (listed above) that maintain their own security certifications and practices.
• We do not store credit card numbers or full payment details on our own servers — payments are processed by Square, which is PCI-compliant.

No system is 100% foolproof, but we do our best to protect your data and will notify you promptly if we ever become aware of a breach that affects your information.

Your Rights and Data Deletion

You are in control of your personal information. At any time, you have the right to:

• Access — Ask us what information we hold about you.
• Correct — Ask us to update or fix any inaccurate details.
• Delete — Ask us to remove your personal information from our records.
• Opt out — Ask us to stop contacting you at any time.

To make any of these requests, simply reach out to us by phone or email. We will respond within 10 business days and action your request as quickly as possible — usually within 30 days. There is no fee to make a request.

If you would like your Instagram message history removed from our CRM, just message us directly on Instagram or call us and we will take care of it.

Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us.

Shooting Stars Photo Booth Ltd.
Kelowna, BC, Canada
Phone: 250-859-3990
Email: imastar@shooting-stars.ca
Website: www.shooting-stars.ca