1. Information we collect

Depending on how you interact with us, we may collect:

• Your name, email address, telephone number, mailing address, and social-media account information.

• Information submitted through website forms, email, text messages, social-media messages, referrals, consultations, and other communications.

• Photography interests, desired session dates, locations, budgets, preferences, accessibility needs, and other information relevant to planning or providing photography services.

• Information about family members, children, guests, or other session participants that an authorized adult provides.

• Contracts, model releases, permissions, invoices, payment status, scheduling information, session status, and client-service records.

• Photographs, video, audio, galleries, image selections, editing instructions, testimonials, and related creative materials.

• Communication history, internal notes, relationship summaries, commitments, follow-up tasks, lead sources, referrals, and client or inquiry status.

• Marketing preferences, mailing-list status, unsubscribe requests, and email engagement information.

• Website and device information, including browser type, device type, pages viewed, approximate location derived from an internet address, referring pages, cookies, and analytics information.

• Operational and security information, such as timestamps, provider identifiers, error records, authentication events, and logs.

We do not intentionally request Social Security numbers, account passwords, medical records, or other information that is not reasonably necessary for photography or client service. Please do not send highly sensitive information unless we specifically request it and explain why it is needed.

2. Information about children

Only adults may submit inquiries, enter contracts, schedule services, make payments, or provide legal permissions.

Photography services may involve children. A parent, legal guardian, or other authorized adult may provide basic information reasonably necessary to plan and deliver a session, such as a child’s name, age, interests, relationships, accessibility needs, or relevant scheduling considerations.

Do not provide information about a child unless you are authorized to do so. We do not knowingly invite children to submit information directly through our websites or business systems.

3. How we use information

We may use personal information to:

• Respond to inquiries and communicate with prospective, current, and former clients.

• Recommend, plan, schedule, provide, and follow up on photography services.

• Prepare proposals, contracts, releases, invoices, galleries, artwork, and other deliverables.

• Maintain contact and relationship history across email, forms, scheduling tools, social media, referrals, and other communication channels.

• Record commitments, questions, preferences, and appropriate next actions.

• Provide customer service and maintain business and accounting records.

• Process payments and monitor transaction status.

• Administer referrals and document lead sources.

• Send studio news, photography information, invitations, promotions, and other marketing communications where permitted by law.

• Operate, secure, troubleshoot, analyze, and improve our websites, services, and internal workflows.

• Detect misuse, protect our systems and clients, enforce agreements, resolve disputes, and comply with legal obligations.

• Create aggregated or reasonably de-identified business information that does not reasonably identify an individual.

Where applicable law requires consent for marketing, cookies, or another particular use, we will seek that consent. You may unsubscribe from marketing email using the link in an email or by contacting us. Unsubscribing from marketing does not prevent service-related messages concerning an inquiry, session, contract, payment, gallery, security issue, or request.

4. Internal business and relationship-management tools

We use private internal tools to organize inquiries, clients, communications, relationship history, commitments, and follow-up.

These tools may combine information received through different channels when trustworthy identifiers, such as an exact email address or telephone number, establish that the records concern the same person. Uncertain identities are not merged solely because names are similar and may require human review.

Internal tools may help summarize communications, identify unanswered messages, organize follow-up, and prioritize business tasks. They are not authorized to independently send customer communications, promise availability or pricing, change bookings, offer discounts, or make financial commitments.

5. Google and Gmail data

When an authorized Google account is connected to our internal business tools, we request read-only Gmail access.

The system may access or store:

• Sender and recipient information.

• Email addresses.

• Subject lines and message dates.

• Message bodies and snippets.

• Gmail labels.

• Thread and message identifiers.

• Attachment metadata, such as filenames, file types, and sizes.

Attachment contents are not initially downloaded through this integration.

Google data is used to maintain communication and relationship history, associate communications with existing contacts using trustworthy identifiers, identify messages that may require attention, prepare internal summaries, and create internal follow-up tasks.

The Gmail integration does not send messages, create drafts, change labels, delete Gmail messages, modify bookings, or make commitments on anyone’s behalf.

Copied Gmail message bodies are retained for up to 12 months unless deleted sooner. Message metadata and relationship history may be retained for as long as reasonably necessary for client service, legitimate business records, legal obligations, security, or dispute resolution.

Deleting information from our internal system does not delete or modify the corresponding information in Gmail. Google access may be revoked through the applicable Google Account permissions settings.

Google user data obtained through API access is not:

• Sold.

• Used for advertising.

• Used to add people to marketing lists solely because they appeared in imported email.

• Used to produce Photoshoot Oracle creative work.

• Used to train generalized artificial-intelligence models.

• Used for purposes unrelated to the visible communication and relationship-management features.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

6. Photographs, portfolio use, and privacy arrangements

Photography contracts, releases, and other agreements may grant Erin Paris Photography permission to display, publish, reproduce, and promote photographs, including through portfolios, websites, social media, advertising, competitions, publications, and other business materials.

The applicable contract governs image-use permissions for a particular session. Alternative privacy arrangements may be available for an additional charge when agreed to before the session or as otherwise stated in the applicable contract.

A privacy request does not automatically modify a signed photography agreement. Please contact us to discuss concerns or request a different arrangement.

7. Marketing communications

Contact information collected through inquiries and ordinary business interactions may be used to send studio news, photography information, promotions, offers, and invitations where permitted by law.

Where affirmative consent is legally required, we will seek it before sending marketing communications. Recipients may unsubscribe at any time through the link provided in a marketing email or by contacting us.

We may retain limited suppression-list information after an unsubscribe request so that we can continue honoring it.

8. Cookies and analytics

Our websites may use cookies and similar technologies needed for functionality, security, preferences, and analytics.

We use Wix Analytics and Google Analytics to understand matters such as website traffic, referring pages, general geographic regions, device types, and how visitors interact with our websites. These providers may receive device, cookie, usage, and network information according to their own privacy policies.

Where required, we will provide cookie choices or obtain consent before activating nonessential analytics technologies. Browser settings may also allow you to restrict or delete cookies, although doing so may affect website functionality.

We do not currently state that we sell personal information for money. If our advertising or analytics practices materially change, we will update this policy and provide any choices required by law.

9. Payments, scheduling, and service providers

We use third-party providers to operate our business. Depending on the service involved, these may include:

• Wix, for website hosting, forms, and analytics.

• Google, for email, Workspace services, and analytics.

• Sprout Studio, for scheduling and studio-management functions.

• Stripe, for payment processing.

• Cloudflare, for application infrastructure and data storage.

• OpenAI, for specifically disclosed automated or artificial-intelligence functions.

• Resend or other email providers, for service or marketing email.

Payment-card information is generally submitted directly to Stripe or another payment processor. We may receive transaction identifiers, payment status, limited billing information, and records needed for accounting and client service, but we do not intend to store complete payment-card numbers in our internal business systems.

Providers process information under their own agreements, systems, privacy policies, retention practices, and security controls. They may use subprocessors or process information in locations outside your state or country.

We may also disclose information when reasonably necessary to comply with law, respond to valid legal process, investigate fraud or security incidents, protect clients or business rights, obtain professional advice, or complete a business reorganization or transfer.

10. Photoshoot Oracle

The Photoshoot Oracle is an optional creative service that processes questionnaire responses and other submitted information to generate creative concepts and related materials.

Its collection, AI processing, generated outputs, sharing options, referrals, and service-specific terms are explained in the separate Photoshoot Oracle Privacy Policy and Terms of Use.

Information obtained through read-only Google API access is not used to generate Oracle creative work.

11. Retention

We retain personal information for as long as reasonably necessary to:

• Respond to inquiries and provide client service.

• Maintain relationship and photography history.

• Deliver galleries, artwork, and other services.

• Maintain contracts, permissions, accounting, tax, and transaction records.

• Document marketing preferences and consent.

• Protect legal rights and resolve disputes.

• Maintain security and prevent fraud.

• Comply with legal obligations.

Retention periods vary according to the type of information and purpose for which it is held. Provider copies, logs, archives, caches, and backups may remain until overwritten or expired under the provider’s normal practices.

Aggregated or reasonably de-identified information may be retained longer when we do not reasonably attempt to reidentify it.

12. Your choices and privacy requests

Depending on applicable law, you may have rights to request access, correction, deletion, or information about how personal information is used or disclosed.

You may also request:

• A change to marketing preferences.

• Removal from a mailing list.

• Correction of contact information.

• Discussion of photograph-use concerns.

• Deletion of information within our reasonable control.

• Revocation of connected Google access through Google Account settings.

Requests may be sent to studio@erinparis.com. We may need to verify your identity or authority before acting.

Deletion may be limited or delayed where information is needed for contracts, accounting, taxes, legal compliance, security, fraud prevention, dispute resolution, backups, or other lawful purposes. Deleting information from our systems does not automatically delete information held independently by Gmail, payment processors, schedulers, galleries, social-media platforms, or other providers.

13. California and other privacy rights

California residents and residents of certain other jurisdictions may have additional privacy rights under applicable law.

Erin Paris Photography does not currently sell personal information for money. Whether particular analytics or advertising practices constitute “sharing,” targeted advertising, or another regulated activity can depend on applicable law and provider configuration.

Where required, we will provide applicable notices and methods to exercise privacy choices. We will not unlawfully discriminate against someone for exercising a privacy right.

International visitors acknowledge that information may be processed in the United States and other countries where our providers operate. Where applicable law grants additional rights, requests may be sent to the contact address below.

14. Security

We use practical administrative and technical measures intended to protect personal information and limit access to authorized purposes.

However, no website, email account, cloud service, payment system, transmission method, or storage system can be guaranteed completely private, secure, or error-free. Please use care when choosing what information to send electronically.

15. Changes to this policy

We may update this policy as our services, providers, technology, or legal obligations change. The “Last updated” date identifies the current version.

If a change materially affects how previously collected information is used, we will provide any notice or obtain any consent required by applicable law.

16. Contact

Questions, privacy requests, correction requests, and deletion requests may be sent to:

Erin Paris Photography
California, United States
studio@erinparis.com