YOUR DATA.
RESPECTED.

This privacy notice explains how personal information is handled when you use the ItsJustHewy website. It is written for a New Zealand audience under the Privacy Act 2020 and should be read before you send an enquiry.

Who is responsible?

ItsJustHewy is the photography practice of Louis Hewitson-Townley, based in Auckland, New Zealand. Privacy questions about this website can be raised through the contact page or Instagram (@itsjusthewy). Please avoid sharing sensitive personal information in an initial Instagram message.

What the enquiry form collects

When you use the Contact form, the following information may be collected:

• Name (required)
• Email address (required)
• Optional photography type / topic
• Optional preferred date
• Message (required)
• Privacy acknowledgement (required)
• A honeypot field used only to discourage automated spam (not intended for human completion)
• A Cloudflare Turnstile challenge response used only to discourage automated spam

This information is collected so Louis can read and respond to your enquiry and keep relevant business records of the conversation. Enquiries are not marketing subscriptions. Please do not send payment card details, government identifiers or other sensitive information through the form.

How enquiries are stored and accessed

The form is submitted to a Cloudflare Pages Function operated for this website. Accepted enquiries are stored in Cloudflare D1 (a managed database) so Louis can recover messages even if email delivery fails. Cloudflare may process and store this data on infrastructure outside New Zealand. When transactional email is configured, a copy may also be sent through Resend to Louis’s chosen notification address after Louis verifies a sending domain with Resend. Enquiry information is retained for as long as reasonably needed to reply, maintain relevant business records, or meet legal obligations — it is not claimed to be deleted immediately on receipt.

Cloudflare Turnstile is used to help block automated spam. Turnstile tokens are verified server-side with Cloudflare; the site does not use Google reCAPTCHA for this form.

Automatic travel calculator

On the Pricing page, when automatic travel estimates are enabled, you may search for a photography location. Search text and selected location coordinates are sent to Cloudflare Pages Functions operated for this website. Those functions call openrouteservice / HeiGIT (Pelias geocoding and Directions APIs), which use OpenStreetMap-based data, to estimate driving distance from a fixed Highland Park, Auckland starting point (503 Pakuranga Road).

This processing is temporary and for the purpose of producing an illustrative travel estimate in your browser session. ItsJustHewy does not intentionally maintain a separate marketing database of searched addresses. Hosting and function providers may retain technical logs for security and operations. Device GPS is not required. The openrouteservice API key is kept server-side and is not exposed in the public website files. openrouteservice is not Google Maps.

Use of openrouteservice is subject to the openrouteservice / HeiGIT terms, and map data to the OpenStreetMap copyright notices. Required attribution appears near the location search.

Website hosting and technical data

This website is a static portfolio hosted on Cloudflare Pages (Free plan). Like most hosts, Cloudflare may process technical request information such as IP addresses, browser details and access logs to deliver and protect the site. Static photograph, CSS, JavaScript and HTML requests are served as static assets and are not billed as Workers Function invocations when Functions routing is limited to API endpoints. The site code does not currently include advertising pixels or separately installed visitor-analytics scripts.

Fonts and social links

This website loads typography from Google Fonts. Opening Instagram sends you to Meta’s platform. Those services may process network information under their own privacy policies.

Photography bookings and identifiable photographs

If you book a session, additional personal information and photographs may be collected through the booking process, correspondence and the shoot itself. How client photographs are stored, delivered, archived or deleted is confirmed as part of the booking relationship. Publication of identifiable client photographs for portfolio or marketing use requires appropriate permission and is not granted merely by browsing this website or accepting the website terms.

Overseas processing

Service providers used by this website — including Cloudflare (Pages, Pages Functions, D1, Turnstile) and, when configured, Resend for enquiry email, and when travel lookup is enabled, openrouteservice / HeiGIT — may process information outside New Zealand. Where overseas disclosure occurs, reasonable steps are taken to use reputable providers and to limit information to what is needed for the service.

Cookies

Aside from technical cookies or storage that hosting or font providers may set, this site does not rely on a separate advertising cookie system. Browser storage used for ordinary site function (if any) is limited to supporting the pages you use.

Your rights

Under the Privacy Act 2020, you may request access to and correction of personal information held about you. Access or correction requests relating to this website can be made through the contact methods above. Responses will be handled in line with applicable law.

Security

Reasonable technical and organisational measures are used to protect information processed through this website, including keeping API credentials server-side and using HTTPS for public pages. No method of transmission or storage is perfectly secure.

Updates

This privacy notice may be updated when hosting, contact, travel or data-handling arrangements change. The date below shows when this page was last revised.

Last updated: 22 October 2026.