What is collected
Consultation, bridal/group, and contact forms collect only the contact and service context needed for human follow-up. Free text should not include health records, payment details, passwords, or other secrets.
Privacy summary - approval required
Clear choices for personal details and images.
Plain-language product intent for this independent demo. This is not legal advice and must not replace approved production privacy wording.
Why it is used
The intended purpose is to review a guest request, ask useful follow-up questions, prepare a human reply, and record the approved next step.
Photo controls
Reference photos are optional. The production design requires private storage, consent linkage, file validation, metadata removal, short-lived staff reads, retention controls, and deletion workflows.
Retention and rights
Retention length, access/correction requests, deletion process, legal hold, and incident contacts remain placeholders requiring qualified Canadian privacy and business review.
Photo upload is disabled in this build. No private Blob capability, content validation pipeline, or approved retention period is configured. The interface will not pretend to store a filename as an upload.