SUNHAUS MEDIA LLC PRIVACY
Privacy Policy
This is the plain version. It says what we collect, why we collect it, how long we keep it, and what we never do with it. If something here is unclear, write to contact@sunhausflorida.com and you will get a straight answer.
Who this policy is for
SunHaus Media LLC is a real estate photography business in Central Florida. This policy covers sunhausflorida.com, including the Get a Quote booking flow, and the email and reminder messages we send about a shoot you booked.
It does not cover the photographs themselves once they are delivered to you — that is in the Terms of Service.
What we collect, and why
We collect what a shoot needs. Nothing on this site asks for a Social Security number, a date of birth, a driver's licence or a bank account, and there is no field for any of them.
| What | When you give it | Why it exists |
|---|---|---|
| Your name | Booking flow, contact step | The booking goes under a name |
| Your email | Booking flow, contact step | The quote, the confirmation and the shoot reminders go there. It also links your bookings that fall on the same shoot day, so a travel fee is applied only once, for bookings made from September 26, 2026 |
| Your phone number | Booking flow, contact step | So we can reach you about the shoot itself — access, timing, a change of plans. It also links your bookings that fall on the same shoot day, so a travel fee is applied only once, for bookings made from September 26, 2026. It is not used for sales calls |
| The property address | Booking flow, first step | It sets the coverage area, and it is where the shoot happens |
| Property record data — living area, property type, year built, bedroom count | Looked up from public records through RentCast against the address, then corrected by you | Bedrooms and living area together set the rate |
| What the listing is for — sale, long-term rental, short-term rental | Booking flow | It sets the package |
| Your package choices and the date and time you picked | Booking flow | It is the booking |
| Access instructions for the property — door code, gate code, entry notes | Inside the booking flow, when no one will be at the property — typed there and sent to us only once the booking exists — or on the confirmation screen right after you book. Never by email | Without them the shoot cannot happen. See the section below — this data is handled differently from everything else |
| Marketing consent — yes or no | Booking flow, one optional checkbox | It records whether you asked for occasional notes on coverage and availability. The quote and the confirmation are sent either way |
We do not buy contact lists, and we do not enrich what you type with data brokers.
Access codes to your property
A door code or a gate code is not ordinary contact data. It is physical security for a house that is often empty. It is handled as such.
- Encrypted at rest. Access codes are stored encrypted with AES-256-GCM. The encryption key lives only in the server environment, never in our source code, and each code is cryptographically bound to its own booking.
- Never written to a log. Our logging redacts by field name and by pattern.
- Never sent back to you in clear text. The reminder emails, 24 hours and 1 hour before the shoot, never reprint a code. If you gave us codes, the 24-hour reminder asks you to confirm they are still correct. The 1-hour reminder only asks you to tell us if anything has changed.
- Never shown back to you. Once stored, the code is never reprinted to you — not in an email, not on a screen. The confirmation you receive asks you to keep it current. It is readable only through the admin panel, to get through the door for the shoot — with a written reason for every opening, and every opening logged with the time. No other system — including the ones that handle our correspondence — can reach it.
- Automatically destroyed seven days after the shoot. This is a scheduled job, not a habit. After seven days the code is gone from our system and cannot be recovered, by us or by anyone else.
If you change a code between booking and shoot day, tell us in the reminder. If you want a code deleted before the seven days run out, write to contact@sunhausflorida.com and it is deleted the same business day.
Payment
Nothing is charged to book on this site, and no payment details are collected or stored.
Email and reminders
Transactional email — the quote, the confirmation, the 24-hour and 1-hour reminders — is delivered through Resend, an email service provider. Your name, your email address and the details of your booking pass through Resend so the message can be delivered.
Our messages do not carry tracking pixels or click-tracking redirects.
Analytics
There is no Google Analytics on this site, no Meta pixel, and no third-party advertising cookie. Nothing on these pages reports to an advertising network.
We do not record sessions. Nothing here replays your screen, follows your cursor, or watches you type. That is true of the open pages, and it is true of the booking flow.
Cookies
This site sets no cookies at all, and it stores nothing in your browser between visits. Not for advertising, not for analytics, not for convenience. Your place in the booking flow lives in the memory of that one tab and is gone when you close it — including the token that opens the rate, which is deliberately never saved.
The site links to our Instagram profile. It is a plain link: no Instagram script runs on these pages, and nothing is loaded from Instagram until you choose to go there.
What we never do
- We never sell your personal information. We have never done it and there is no arrangement under which we would.
- We never rent, trade or share your contact details with another photographer, brokerage, vendor or lead broker.
- We never publish an address you typed into the booking flow. Photographs on this site and on our social accounts are captioned by region — city and state — never by street address, and the files carry no location metadata.
- We never write personal information into our server logs. Names, emails, phone numbers and access codes are redacted before a line is written.
- We never collect payment details on this site.
Your IP address
Your IP address is used for one purpose: to stop a robot from flooding the booking form. It is hashed, held in memory, and it is never written to our database and never written to a log.
How long we keep things
| Data | Kept for |
|---|---|
| Access codes and entry instructions | 7 days after the shoot, then automatically destroyed |
| Marketing contact, if you consented | Until you unsubscribe |
| Delivered photographs in our archive | Kept as part of our own portfolio and business records — see the Terms |
Who else touches your data
The short list, and what each one is for:
| Service | What it handles | When |
|---|---|---|
| DigitalOcean | The server the site, the booking API and the database run on — one machine, in the United States | Now |
| Resend | Transactional email — the quote, the confirmation and the reminders | Now |
| RentCast | Property record lookup — the address you type, and nothing else | Now |
| Photon (OpenStreetMap) | Address suggestions while you type — the partial address, asked by our server | Now |
| U.S. Census Bureau Geocoder | Address checking — the address you type, asked by our server, to confirm it while you type and to locate the property for the travel distance in the rate | Now |
Each one receives only what its job needs. None of them receives your access codes, which are encrypted and stored on our own server.
Property record data comes from RentCast (api.rentcast.io). The address you type is sent to RentCast to look up public facts about the property — bedroom and bathroom count, living area, property type, year built. Nothing else about you goes with it: the address is the entire request. RentCast answers with more than we ask for; anything about the property’s owner is cut at the edge of our server and never reaches our database or your browser.
Address suggestions come from Photon (photon.komoot.io), an open geocoder built on OpenStreetMap — and it is our server that asks it, not your browser: the partial address you have typed leaves from us, so your IP address, your cookies and the page you are on never reach them. Nothing from that step is written down — the suggestions never enter our database and the text you type is not logged; our server holds the answers in memory for a day so the open service is not asked the same question twice.
Address checking comes from the U.S. Census Bureau Geocoder (geocoding.geo.census.gov), the public address register of the United States — and here too it is our server that asks it, not your browser. It is asked at two moments: while you type, to confirm that a suggestion is a real address, and at the rate step, to locate the property so the travel distance can be measured. The address is the entire request; nothing else about you goes with it.
Security
The connection to this site is encrypted. The connection between our application and our database is either local to one machine or certificate-verified — the application refuses to start if it cannot verify a remote database. Access codes are encrypted with a key that lives outside the database. Personal information is kept out of logs by construction.
No system is perfect, and we will not pretend otherwise. What we can say is what is written above, and it is true of the code that is running.
Your rights
Write to contact@sunhausflorida.com and you can:
- Ask what we hold about you. You get the list.
- Correct it. A wrong bedroom count, a wrong phone number, a wrong address.
- Delete it. We delete what we are not legally required to keep — tax and accounting records for a completed transaction are the exception, and we will tell you exactly what stayed and why.
- Stop the marketing. Unsubscribe from any note, or ask us directly. This does not stop the messages about a shoot you actually booked.
We honour these requests whether or not a statute obliges us to.
Children
This is a business service for property professionals. The site is not directed to children and we do not knowingly collect information from anyone under 18.
Where we are
SunHaus Media LLC operates in Florida, United States, and the data described here is stored in the United States. If you are writing to us from outside the United States, understand that this is where it lands.
Changes to this policy
If this policy changes, the date at the top changes with it, and the previous version does not quietly disappear. If a change affects how we handle something you already gave us — a new processor, a longer retention — you get an email about it before it takes effect.
Contact
SunHaus Media LLC Kissimmee, Florida contact@sunhausflorida.com