01 Identity of the Controller
The data controller for information collected through this booking system is:
- House of Motion Entertainment (H.O.M.E)
- Office 7B, ORYX Middle East, 13 Salwa Rd, Doha, Qatar
- Email: studio@houseofmotionent.com
All questions about this policy, or requests relating to your personal data, should be directed to the email above.
02 Purpose of Processing
We collect and process personal data for the following specific, legitimate purposes:
- Coordinating and confirming studio session and DJ booking requests
- Delivering the booked service (recording, editing, photography, DJ set) and any deliverables that follow
- Sending booking confirmations, schedule changes, invoices and related operational communications
- Direct electronic marketing about HOME releases or offers — only where you have given explicit prior consent, per PDPL Article 18
03 Legal Basis for Processing
We rely on the following legal bases, as applicable to each purpose above:
- Consent — for marketing communications, and for photo/video recording of your session where applicable
- Contract performance — for processing your booking request, communicating about your session and issuing invoices
- Legitimate interest — for basic operational record-keeping needed to run the studio safely and reliably
04 Categories of Data Collected
Depending on which service you book, we may collect:
- Contact details — name, email address, phone number
- Booking details — service selected, requested date/time, party size, notes you provide
- Payment information — invoicing details for paid sessions (processed via our payment/invoicing tools; card numbers are never stored by HOME directly)
- Images / audio / video — for services that include recording (e.g. DJ Set Recording, HOME-Assisted Photography), we capture photo, video and/or audio of your session as part of delivering that service
05 Recipients of Your Data
We share booking data only with the service providers needed to run the booking system and deliver your session:
- Supabase — our database processor, storing your booking record
- Google / Gmail (via Maton gateway) — sends booking confirmation and admin-notification emails
- Payment processors (e.g. Stripe) — where a paid session requires online payment or invoicing
We do not sell personal data, and we do not share it with any third party outside the operational chain above. Because some of these processors operate outside Qatar, we apply data-protection safeguards proportionate to the sensitivity of the data being transferred.
06 Your Rights as a Data Subject
Under PDPL Article 8, you have the right to:
- Be notified of the purposes for which your data is processed
- Access the personal data we hold about you
- Request correction (rectification) of inaccurate data
- Request erasure of your data, where applicable
- Request restriction of, or object to, processing
- Request a copy of your data (a reasonable service charge may apply)
- Withdraw consent at any time, without affecting processing carried out before the withdrawal
To exercise any of these rights, email studio@houseofmotionent.com.
07 Retention Periods
We retain booking records (contact details, booking history, invoices) for as long as needed to deliver the service and satisfy any related accounting or legal obligation, and then delete or anonymize them.
08 Complaints
If you believe your data has been processed unlawfully, you may lodge a complaint with:
- Compliance & Data Protection Department (CPD), Ministry of Transport and Communications (MoTC) / National Cyber Security Agency (NCSA), State of Qatar
We also encourage you to contact us directly first at studio@houseofmotionent.com so we can try to resolve it quickly.
09 Security Measures
We apply the following technical and organizational precautions:
- Booking data is stored in a database protected by row-level security; only server-side, service-role access can read or write booking records — no public/anonymous access is possible
- All data transmission between your browser, our booking API and our database/email providers is encrypted in transit (HTTPS/TLS)
- Admin access to the booking queue is protected by a private admin key, never exposed in client-side code
- We limit data collection to what is necessary for each service, and do not collect data we do not need
Cookies
This site does not use tracking or advertising cookies. Standard hosting-infrastructure logs (e.g. Vercel) may be generated for security and performance monitoring.
Automated Decision-Making
We do not use automated decision-making or profiling on booking data. All booking approvals are reviewed and confirmed manually by HOME staff.