Privacy Policy

Information we collect

Inquiries ask for your name, email, session type and permission to respond. Phone, preferred date, location and planning notes are optional. Booking collects contact and scheduling details needed for your selected service. Wedding coverage selections can include the date, location, time zone, consecutive coverage and estimated price.

Studio records can include correspondence, client and project details, questionnaire answers, schedules, contracts, invoices, payment status, photographs and gallery selections. You may also provide information about other participants; share only what is needed and make sure you have authority to provide it.

Website and security providers process technical information such as network addresses, browser or device details, requested pages and security events. Optional analytics and advertising tools are described in the Cookie & Tracking Policy. Do not send card numbers, passwords, identity documents or unnecessary sensitive information in a message.

Why we use information

We use information to answer inquiries, arrange and provide photography services, plan sessions, deliver photographs and products, manage agreements and payments, prevent misuse, maintain reliable systems and respond to privacy questions. We also retain records needed for accounting, legal obligations and resolving disputes.

An inquiry or booking does not subscribe you to a marketing email list. If we introduce a newsletter, its marketing permission and unsubscribe process will be separate from service communications.

Who receives information

Cloudflare provides website hosting, security, performance analytics and private media storage. Supabase supports the studio database and authentication. Stripe processes hosted payments and related payment records. Card details are entered with Stripe; the studio receives payment and transaction information rather than collecting card numbers in its forms.

Email providers process correspondence. Google Analytics and Meta receive information only when their optional tools are allowed on eligible marketing pages. Meta may receive page content, browser information and events and use them for advertising. We do not sell client contact details or photographs for money. Depending on applicable law, optional advertising disclosures may be considered sharing or targeted advertising; you can reject them in Cookie preferences.

Information may also be disclosed when necessary to meet legal obligations, protect rights or address security incidents. External client-gallery, Instagram and gift-payment destinations have their own privacy practices. Service providers may process information in the United States and other countries; we do not promise that every copy remains in one country.

How long information is kept

Delivered photo galleries remain available for at least one month after delivery, with longer availability at the studio’s discretion. Download and keep your delivered photographs. This availability minimum is not an automatic deletion date, a permanent-storage promise or a substitute for your own copies, and does not override a valid privacy request or legal requirement.

Other records are retained according to their purpose: inquiries and correspondence while needed for follow-up or an ongoing client relationship; planning details and photographs while needed to perform the service and handle agreed requests; contracts, invoices and payment records for applicable accounting, tax, legal, insurance and dispute-resolution needs; and publication-permission records while we rely on that permission and as required to document it.

We consider the information’s sensitivity, the relationship and service status, applicable requirements and whether a less identifying record will meet the need. Information no longer needed is reviewed for deletion or de-identification. Photograph archives have no promised minimum storage period beyond agreed deliverables and gallery availability. External backups and provider records follow their separate operational and legal constraints; a deletion request is not a promise of immediate erasure from every copy.

Security and private links

The studio uses administrator authentication with MFA, server-side access permissions and private storage controls. No system is absolutely secure. Keep gallery, questionnaire and payment links with their intended recipients and tell us if a private link has reached the wrong person. Do not send sensitive files until a suitable way to provide them has been agreed.

Photograph and testimonial publication

Portfolio, social media and advertising use of client photographs requires separate, optional permission; declining it does not prevent booking. Appropriate parent or guardian permission is required for publishing children’s photographs. Publication permission is separate from the client’s personal-use license and from information needed to provide the service.

Contact us about a published photograph, testimonial or permission you wish to change. We will review your request, the relevant permission and applicable rights. We cannot promise removal of copies independently shared by others or materials already distributed.

Children and family services

This website is intended for adults arranging photography services, including family and newborn sessions. It is not designed for children to create accounts or submit personal details independently. A parent or guardian can contact us about a child’s information. We do not require routine age-verification documents or medical records for session changes.

Your privacy choices

You may leave optional inquiry fields blank, use Cookie preferences to reject optional tracking, and contact us about access, a copy, correction or deletion of your information. Supported Global Privacy Control and Do Not Track signals keep optional Google and Meta tools off. We do not require you to consent to optional advertising to book.

Applicable privacy rights depend on your location and the processing involved. We respect rights required by applicable law and explain any lawful limits. The Privacy Requests page describes the available channels, verification, timing and appeal process.

Data deletion and privacy requests · Cookie and tracking details

Contact and policy updates

Mando Gallegos handles privacy questions at [email protected]. Updates will be posted here with a new effective date. Where a new use requires notice or permission, it will be addressed before that use; a website update does not remove rights already provided by law.