Legal · version 2026-08-24.2
Privacy Policy
What data we keep, what for, and what you can ask of us.
This English version is a courtesy translation. If it differs from the Spanish version, the Spanish version prevails.
01 What we keep
For each user: name, email, role and the cryptographic hash of their password. For each booking: who booked, when, for how long and the name of the person who will record. For each administrative action: author, action and date. For anyone who writes to us through the form: the details they choose to give us.
02 Your password is not stored
We never store the password. We keep a hash derived with PBKDF2, with a different salt for each person and a server secret. It is a one-way process: neither the administration nor the coordination team can see anyone's password. If it is forgotten, a temporary one is issued — the previous one is not recovered.
03 What we use it for
To provide access, manage the studio calendar, answer inquiries and keep a record of who did what within the system. We do not sell personal data or share it with third parties for commercial purposes.
04 How long
User data is kept while the account is active. The audit log and the booking history are kept for the period the office sets for accounting and security purposes. Encrypted backups rotate and may retain copies for a limited period after deletion.
05 Your rights
You can request access to your data, its correction or its deletion by writing to the coordination team. The Florida Digital Bill of Rights does not apply to this operation because of its revenue threshold; even so, we adopt its structure.
06 Cookies and analytics
This site uses the minimum cookies it needs to work: your session cookie when you sign in and the one that remembers your display preferences. We also measure how many people visit the site and which pages they use, with Google Analytics, in order to improve it. That measurement starts OFF: no analytics cookie is written until you accept it in the notice, your IP address is sent anonymized, and declining takes exactly the same effort as accepting. Your choice is kept for six months and you can change it by clearing this site's cookies. We do not use advertising cookies, we do not sell or cross-match this data, and we do not track your browsing outside this site.
07 Who it is shared with
The platform runs on Cloudflare infrastructure, which processes data on our behalf to serve the site, store the database and the images, and send the system's emails. If you accept analytics, Google Analytics receives anonymized usage data from the site. We do not sell personal data to anyone, and we would only hand it over to an authority in response to a valid legal request.
08 Minors
The platform is a work tool for adults: it is not directed at anyone under eighteen and we do not create accounts for minors. A minor's participation in a studio recording is governed by the image release, which requires written permission from their parent or guardian.
09 Security
Revocable sessions, limits on sign-in attempts, role-based separation of permissions and an audit log. No system is infallible. If a security incident affecting personal data occurs, we assess it immediately and notify the affected people as soon as possible and no later than thirty days after the incident is determined, as Florida law requires (Fla. Stat. 501.171). If the incident affects five hundred or more Florida residents, the State Department of Legal Affairs is notified as well.