Privacy Policy

The short version

Where Is The Photobooth is a vintage photobooth rental business based in New York City. This site offers three forms — a mailing list signup, a rental inquiry form, and a location suggestion form. What we collect depends on which you use, plus a small amount of technical metadata submitted automatically with any form. We don't sell your data, we don't run ads, and we don't track you around the web.

What we collect

Mailing list signup — we store your email address.

Rental inquiry — we store your name, email address, event date, event type, event location, optional guest count, and any optional notes you write.

Location suggestion — we store the ZIP code you submit. This form collects no email address.

Submitted automatically with every form:

• IP address — captured with each submission. Also used transiently for rate limiting and spam prevention.
• Browser and device information — the user-agent string your browser sends.
• Marketing attribution — if you arrived through a tracked link, we store the UTM parameters (source, medium, campaign, term, content) and the page that referred you. Only present when those values exist in the URL.
• Submission timestamp — when the form was sent.

How we use it

• To send your signup confirmation and announce upcoming pop-up locations and events.
• To respond to your rental inquiry and, if it leads to a booking, to coordinate your event.
• To decide where the booth pops up next, using aggregated ZIP suggestions.
• To notify our team about new signups, inquiries, and suggestions.
• To prevent spam and abuse of the forms (reCAPTCHA and rate limiting).
• To understand which channels bring people to the booth (UTM and referrer data, reviewed in aggregate).

We do not use your information for automated decision-making or profiling.

Third parties that process your data

• Google reCAPTCHA — we use reCAPTCHA v3 to keep bots off the signup form. It runs invisibly and may collect device and behavioral data subject to the Google Privacy Policy and Terms of Service.
• Email delivery provider — the email address you provide is passed to our transactional email service solely to deliver confirmations, inquiry replies, and announcements.
• Hosting and database infrastructure — your submission records are stored in a database on our hosting provider's servers.

We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

Cookies and tracking

This site does not set its own tracking cookies. reCAPTCHA sets a cookie (_GRECAPTCHA) required for its fraud detection — that's Google's, not ours.

Data retention

We keep your submission records until you ask us to remove them or we no longer need them — for example, an inquiry record is kept while your event is being coordinated — whichever comes first.

Security

Consistent with the New York SHIELD Act, we maintain reasonable administrative, technical, and physical safeguards for the data we hold: encrypted transport (HTTPS), rate limiting, bot protection, and access limited to the systems that need it. If a breach ever affects your private information, we'll notify you as required by New York law.

Your rights

You can ask us at any time to confirm what we hold about you, correct it, or delete it entirely. Email [email protected] and we'll take care of it. You can also unsubscribe from announcements using the link in any email we send.

Children

This site isn't directed at children under 13, and we don't knowingly collect their information. If you believe a child has submitted a form, contact us and we'll delete the record.

Changes to this policy

If we change what we collect or how we use it, we'll update this page and revise the date at the top. Significant changes will be announced to the list.

Contact

Questions about this policy or your data? Email [email protected] or reach us on Instagram.