Legal
Privacy Policy
This page explains what personal information this website collects, why it is collected, who else sees it, how long it is kept, and what you can ask us to do with it. It is written in plain language on purpose.
Last updated
The short version
If you only read the site, we do not ask you for anything, we do not build a profile of you, and there is no advertising or analytics tracking here. That is also why there is no cookie banner.
If you send a booking request, you give us your contact details and the details of your event. We use them to reply to you and to arrange the booking. We store them in this site's own database, we forward them to the booking system Affair Production reviews enquiries in, and we never sell them to anyone.
Who is responsible for your information
This website, josephhabchi.com, is operated by Affair Production, and Affair Production is the data controller for the personal information described on this page — it is the business legally responsible for deciding what is collected and what it is used for. Joseph Habchi is the artist you are booking; Affair Production is the entity behind the booking.
Any question, correction or deletion request goes to the email address at the bottom of this page. “We” and “us” throughout this policy mean Affair Production.
This site takes enquiries from visitors in the European Union as well as in Lebanon and elsewhere, so we apply the standards of the EU General Data Protection Regulation (GDPR) to everyone who contacts us, wherever they happen to live.
What you tell us in the booking form
The booking form insists on very little. Only your full name, email address, phone number, event type, event date and your agreement to this policy are required. Every other field can be left blank and your request will still reach us.
- About you
- Your full name, email address and phone number. If you fill them in: the company or organisation you are booking for, and whether you would rather be contacted on WhatsApp, by email or by phone.
- About your event
- The type of event (wedding, engagement, corporate, club night, private party, festival or something else), the date, an alternative date, the start and end time, how many hours you need, and roughly how many guests you expect.
- Where it is happening
- The venue's name and address, and the city and country it is in.
- What you need on the night
- Which artist you would prefer, whether you need sound equipment, whether you need lighting, the music you want played, and any special requests.
- Your budget
- The budget range you have in mind and the currency you quoted it in. This is a number in a text box, not a payment — see “What we never collect” below.
- How you found us
- How you heard about Joseph, and the name of the person who referred you if someone did.
- Anything else you write
- The free-text message and special-requests boxes, and whatever you choose to put in them. Please do not include sensitive information — health details, for example — unless it genuinely matters for the event.
All of that is the answer you typed. We do not buy data about you, we do not add anything to your record from other sources, and we do not guess at what you left blank.
What the site records by itself
When you submit the booking form — and only then — the server records four technical details alongside your answers.
- A one-way fingerprint of your IP address
- Not your IP address. The server combines your IP address with a secret value only the server knows, runs the result through a SHA-256 hash, and stores nothing but that hash. It exists so we can tell that several requests in one hour came from the same connection and stop the form being flooded. It cannot be turned back into your IP address, and the address itself is never written down.
- Your user-agent string
- The line your browser sends describing itself — the browser, its version and the operating system. It helps us tell a real submission from an automated one and reproduce problems people report with the form.
- The language you used
- English, Arabic or French, so that we reply in the language you wrote to us in.
- Where you started from
- A short label for the page or button you opened the form from, so we know which parts of the site actually lead to bookings. It says “the booking page”, not who you are.
What we never collect
No payment information. This site takes no payments: there is no card field, no checkout and no payment processor anywhere in it, and any deposit or fee is arranged with Joseph separately. We do not ask for identity documents, we do not use advertising cookies, and we do not track you across other websites.
Why we use it
Everything above is used for one of four purposes, and nothing else.
- To reply to you
- Answering your enquiry, telling you whether the date is free, and asking the follow-up questions a real quote needs.
- To plan and perform the booking
- Turning an enquiry into an actual event — the venue, the timings, the equipment, the music, the people to coordinate with.
- To keep a record of the booking
- So there is an accurate account of what was agreed, and so we can deal with accounting and with questions about a past event.
- To keep the form usable
- The hashed IP fingerprint and the user-agent string are used to limit how often the form can be submitted from one connection and to filter out automated spam.
The legal basis for using it
Under the GDPR we have to name a lawful basis for each use of your data. For the booking form that basis is your consent: the form will not submit until you tick the box saying you agree to this policy and to being contacted about your event. Nothing is collected before you tick it.
You can withdraw that consent at any time, without giving a reason, and it must be as easy to withdraw as it was to give. Withdrawing stops any further use of your information from that moment. It cannot undo what was lawfully done while the consent stood — an email already sent stays sent.
Where an enquiry becomes a real engagement, we also rely on the necessity of processing your details in order to perform the agreement between us, on our legal obligations for records such as invoices, and on our legitimate interest in keeping the enquiry form free of automated abuse.
How long we keep it
We keep a booking request for as long as we need it to answer your enquiry and, where it becomes a real event, to keep an accurate record of that booking. Records tied to a confirmed event are kept longer than an enquiry that came to nothing, because accounting rules and questions about a past event both reach back further.
A fixed retention schedule has not been set yet; when it is, this page will state it. In the meantime, if you want your request deleted sooner, ask us and we will delete it unless a specific record is one we are legally required to keep.
Your rights over your information
Wherever you live, we will honour the following requests about the information described on this page.
- See what we hold
- Ask for a copy of the personal information we hold about you and an explanation of what it is used for.
- Correct it
- If something is wrong — a misspelled name, the wrong date, an old phone number — tell us and we will fix it.
- Have it deleted
- Ask us to erase your information. We will, unless a specific record is one we are legally obliged to keep.
- Pause its use
- Ask us to hold your information but stop using it while a question about its accuracy or its lawfulness is being resolved.
- Take it with you
- Ask for the details you gave us in a common, machine-readable format that you can pass to someone else.
- Object to a use
- Object to any use of your information that we base on a legitimate interest rather than on your consent.
- Withdraw your consent
- Tell us to stop, at any time and without giving a reason. Withdrawing consent is deliberately no harder than giving it was.
To exercise any of these, email the address at the bottom of this page and say what you want done. We will reply within one month. We may ask you a question or two first to be sure it is really you — we are not going to send someone's booking details to whoever asks for them.
If you are in the European Union or the wider EEA and you believe we have handled your information badly, you also have the right to complain to your national data protection authority.
How your information is protected
The site is served over HTTPS, so what you type into the form is encrypted on its way to us. In the database, the public connection is deliberately one-way: it can add a request and cannot read one. Your IP address is hashed with a server-side secret before anything is written down, so the raw address never exists in our records at all.
The hand-off to Joseph's booking system is signed with a shared secret, so the receiving end can prove the message came from this site and was not tampered with in transit. No system is perfectly secure, but nothing here is stored more openly than it needs to be.
Children
This site is aimed at adults booking events and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us a booking request, tell us and we will delete it.
Changes to this policy
If what we collect or what we do with it changes, this page changes with it and the date at the top is updated. Where a change materially affects a request you have already sent us, we will tell you directly rather than expecting you to notice.
Contact us
For anything on this page — a question, a correction, a deletion request, or withdrawing your consent — write to us and say what you need.
Please include enough for us to find your request: the email address you used and the date of your event are usually plenty.