Privacy Policy

What Data We Collect

When you contact us, place an order, or make a payment, we may collect:

• Your name and email address
• Shipping address (for print orders)
• Payment information (processed securely by Stripe; we never store card numbers)
• Messages you send via the contact form
• Your phone number, if you opt in to text messages
• If you use our text preference form: your selected text topics, the exact consent language shown, consent timestamp and source, and a one-way server-peppered hash of your IP address. We do not store the raw IP address in the SMS consent record.
• Site-use information such as pages visited, referral source, browser or device characteristics, and interactions such as clicks or scrolling, depending on your analytics choice and the provider involved.

How We Use Your Information

• To fulfill print orders and process payments
• To respond to inquiries and booking requests
• To send order confirmations and shipping updates
• To understand site traffic, improve the website, and measure the results of our own outreach, subject to the analytics choices described below
• We disclose information to the service providers listed below only as needed for the services described in this policy.

SMS / Text Messaging

Our Text Message Preferences page has three separate, unchecked choices: booking and service messages; gallery/show invitations and photography updates; and post-service feedback or Google review requests. We use your mobile number only for the categories you affirmatively select. Texting us first allows us to reply to that inquiry, but does not enroll you in the promotional or review-request categories.

• No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
• Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the text message services.
• Message frequency varies, and message and data rates may apply.
• You can opt out of all categories at any time by replying STOP, or get assistance by replying HELP. START clears Twilio’s carrier-level STOP block; it does not by itself grant or restore permission for a text category. Each category must also have a current, active topic-specific consent record.
• We retain an append-only consent and revocation audit record, including the normalized phone number, optional name/email, selected topics, exact consent text, timestamps, source, hashed IP, and STOP/START state. This lets us honor suppression requests and demonstrate the scope of consent even after a preference changes.
• Full SMS Program terms are in our Terms of Service.

Third-Party Services

• Stripe: handles all payment processing. Your card data is transmitted directly to Stripe and is subject to Stripe's privacy policy.
• Backblaze B2: used for image storage and delivery.
• Gelato: handles print fulfillment and shipping for orders placed in our shop.
• Twilio: provides SMS delivery, delivery status, and STOP/START/HELP handling. Twilio acts as our text messaging service provider, not as an independent marketing recipient.
• Cloudflare Turnstile: helps prevent automated abuse of public forms. Cloudflare processes connection data for verification; our SMS consent database stores only the one-way hashed IP described above.
• Google Analytics 4: measures website use. It starts with Google Consent Mode analytics storage denied; accepting analytics changes that setting to granted.
• Microsoft Clarity: provides interaction and session analytics, and loads only after you accept analytics.
• Pinterest tag: when configured, measures visits and conversions and loads only after you accept analytics.
• Cloudflare Web Analytics: provides aggregate traffic and performance measurements as part of our website hosting. It is separate from the consent-gated Clarity and Pinterest tools and is designed to operate without cookies.

Data Retention

We retain order and contact records for as long as necessary to fulfill orders and comply with applicable laws. SMS consent and revocation records may be retained as needed to honor opt-outs and document compliance. You may request deletion of other data at any time by contacting us; we may retain the minimum suppression record needed to ensure we do not text you again.

Browser Storage, Cookies, and Analytics

We use localStorage to keep your shopping cart and remember whether you accepted or declined analytics. Google Analytics 4 is initialized under Google Consent Mode with analytics storage denied. Before acceptance, it may send limited measurement signals without using analytics cookies; if you accept, we update analytics storage to granted. Microsoft Clarity and the Pinterest tag (when configured) load only after acceptance. Cloudflare Web Analytics is separate from that choice and provides aggregate, cookie-free traffic and performance measurements through our hosting provider.