Last updated: 04-26-2026

Quick summary

We collect basic information when you contact us or book a session — name, email, phone, travel dates. We never sell your data. We never share photographs of you publicly without your consent. You can request deletion of your information at any time. Full details below.

1. Who we are

Roots Photography is a destination photography studio based in Cancún, Quintana Roo, Mexico, operated by Lucas Serpa and Jazmin Alderete since 2024. We provide lifestyle, family, couple, proposal, weddings and maternity photography for travelers visiting the Riviera Maya from the United States, Canada, Mexico and other countries.

If you have any questions about this policy or how we handle your data, write to us at info@roots.photography

2. Information we collect

When you interact with us through our website, social media, or our advertising on Meta (Facebook and Instagram), we may collect:

• Contact information: full name, email address, phone number, WhatsApp.

• Booking information: travel dates, requested package, session location preferences, group size, any specific notes you share with us.

• Payment information: processed securely through Stripe and Squarespace Commerce. We never see or store your full credit card details.

• Communication records: messages exchanged through email, WhatsApp, Instagram DM, Facebook Messenger, and our website contact forms.

• Photographs and video: images created during your scheduled session — this is the product you hire us for.

• Technical data: IP address, browser type, device, pages visited, time on site, traffic source. Collected via cookies, Meta Pixel, and similar standard web tools.

3. How we use your information

We use the information you give us only for these purposes:

• To deliver the photography service you booked: schedule the session, communicate before and after, deliver your gallery, follow up.

• To respond to inquiries that come in through our website, ads, social media, or referrals.

• To process payments and issue receipts as required by Mexican tax law.

• To send you transactional updates about your booking (date confirmation, gallery delivery, location details).

• To improve our service, using aggregated and anonymized usage data.

• To run advertising on Meta. We may share hashed versions of your email and phone with Meta to help us reach similar audiences or to retarget visitors who explored our site without booking. You can opt out of this at any time — see Section 8.

• To comply with our legal and tax obligations under Mexican law.

We do not use your information to make automated decisions that would significantly affect you.

4. Your photographs — what you should know

This section is specific to photography businesses and matters to you as a client.

• All photographs taken during your session are delivered to you in a private online gallery, downloadable in high resolution.

• Copyright of the images remains with Roots Photography. This is standard practice in professional photography.

• You are granted a personal-use license: you can print, share on personal social media, and reproduce the images for any non-commercial purpose, indefinitely.

• We may use a selection of photographs from your session in our portfolio, on our website (roots.photography), our Instagram (@rootsphotographymx), our Facebook page, and in our paid advertising — unless you opt out in writing before or after the session. Just send us an email and we will respect your choice.

• We will never sell your photographs to third parties for stock, editorial, or any commercial purpose without your explicit written consent.

• For sessions involving minors (children under 18): we will never publish photographs that include children publicly without explicit written consent from a parent or legal guardian. By default, we treat children's images with extra care and avoid using them in advertising unless we have your direct go-ahead.

• If you ever change your mind and want a photograph removed from our public-facing portfolio, social media, or any other channel we control, write to us. We will comply within 30 calendar days.

5. Who we share your information with

We only share your information with the following third-party service providers, and only to the extent necessary to operate our business:

• Squarespace — our website and online booking host.

• Meta Platforms (Facebook, Instagram, WhatsApp Business) — for advertising, retargeting, Conversions API tracking, and client communication.

• Google (Workspace, Analytics) — for email correspondence and basic site analytics.

• Stripe and Squarespace Commerce — for processing payments.

• Zapier — for connecting our tools and automating notifications.

• Pixieset (or equivalent gallery software) — for delivering your private gallery.

Each of these providers has their own privacy policies and security standards. We choose providers we believe to be trustworthy.

We never sell your personal information to anyone, ever.

6. International data transfers

We operate from Mexico, and many of our clients live in the United States or Canada. By contacting us or booking a session, you understand that your information will be processed in Mexico and may be transferred to and stored on servers located in the United States, where Meta, Google, Squarespace, Stripe and similar providers operate.

We rely on the safeguards required under:

• Mexican Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

• Standard practices compatible with the European Union General Data Protection Regulation (GDPR), where applicable to clients located in the EU.

• The Personal Information Protection and Electronic Documents Act (PIPEDA) for Canadian residents.

7. How long we keep your data

• Booking and contact records: 5 years (required for Mexican tax and accounting).

• Photographs from your session: indefinitely, unless you request deletion.

• Marketing communications data: until you unsubscribe.

• Website analytics data: 14 months (default retention for Meta and Google tools).

8. Your rights

Depending on where you live, you have the right to:

• Access the personal information we hold about you.

• Correct or update inaccurate information.

• Request deletion of your data — with limited exceptions for legal or tax records.

• Withdraw consent for marketing communications at any time. You can unsubscribe from any marketing email by clicking the link at the bottom of the email, or by writing to us.

• Request that we stop using your photographs in our portfolio or advertising.

• Opt out of Meta advertising: you can disable personalized ads in your Facebook and Instagram ad settings, and you can clear your cookies anytime.

• Lodge a complaint with the data protection authority in your jurisdiction (in Mexico: INAI; in the United States: state-level offices and the FTC; in Canada: Office of the Privacy Commissioner).

To exercise any of these rights, email us at info@roots.photography . We will respond within 30 calendar days.

9. Cookies and tracking technologies

We use cookies and similar technologies on roots.photography to:

• Make the site work properly (essential cookies).

• Understand how visitors use the site (analytics).

• Show you relevant ads on Facebook and Instagram (Meta Pixel and Conversions API).

• Remember your preferences.

You can disable cookies in your browser settings. Some features of the site may not work as expected if cookies are disabled. To opt out of Meta personalized advertising specifically, adjust your settings inside Facebook or Instagram, or use the opt-out tools at youradchoices.com or networkadvertising.org.

10. Children's privacy

Our website and services are not directed to children under 13, and we do not knowingly collect personal information from children. We do photograph children during family sessions, but only with the explicit booking and consent of a parent or legal guardian, and we treat their images with extra care (see Section 4).

11. Updates to this policy

We may update this policy from time to time as our practices evolve or as required by law. When we make significant changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or a banner on our website. Your continued use of our services after a policy update means you accept the updated terms.

12. Contact us

For any privacy-related question, request, or to exercise any of your rights:

Roots Photography Cancún, Quintana Roo, Mexico

Email: info@roots.photography

WhatsApp: +52 1 984 453 3472

Instagram: @rootsphotographymx

This policy was last updated on 04-26-2026