Privacy Policy

What Data We Collect

When you contact us, place an order, or make a payment, we may collect:

• Your name and email address
• Shipping address (for print orders)
• Payment information (processed securely by Stripe; we never store card numbers)
• Messages you send via the contact form
• Your phone number, if you opt in to text messages
• If you use our text preference form: your selected text topics, the exact consent language shown, consent timestamp and source, and a one-way server-peppered hash of your IP address. We do not store the raw IP address in the SMS consent record.

How We Use Your Information

• To fulfill print orders and process payments
• To respond to inquiries and booking requests
• To send order confirmations and shipping updates
• We do not sell or share your information with third parties for marketing purposes

SMS / Text Messaging

Our Text Message Preferences page has three separate, unchecked choices: booking and service messages; gallery/show invitations and photography updates; and post-service feedback or Google review requests. We use your mobile number only for the categories you affirmatively select. Texting us first allows us to reply to that inquiry, but does not enroll you in the promotional or review-request categories.

• No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
• Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the text message services.
• Message frequency varies, and message and data rates may apply.
• You can opt out of all categories at any time by replying STOP, or get assistance by replying HELP. START clears Twilio’s carrier-level STOP block; it does not by itself grant or restore permission for a text category. Each category must also have a current, active topic-specific consent record.
• We retain an append-only consent and revocation audit record, including the normalized phone number, optional name/email, selected topics, exact consent text, timestamps, source, hashed IP, and STOP/START state. This lets us honor suppression requests and demonstrate the scope of consent even after a preference changes.
• Full SMS Program terms are in our Terms of Service.

Third-Party Services

• Stripe: handles all payment processing. Your card data is transmitted directly to Stripe and is subject to Stripe's privacy policy.
• Backblaze B2: used for image storage and delivery.
• Gelato: handles print fulfillment and shipping for orders placed in our shop.
• Twilio: provides SMS delivery, delivery status, and STOP/START/HELP handling. Twilio acts as our text messaging service provider, not as an independent marketing recipient.
• Cloudflare Turnstile: helps prevent automated abuse of public forms. Cloudflare processes connection data for verification; our SMS consent database stores only the one-way hashed IP described above.

Data Retention

We retain order and contact records for as long as necessary to fulfill orders and comply with applicable laws. SMS consent and revocation records may be retained as needed to honor opt-outs and document compliance. You may request deletion of other data at any time by contacting us; we may retain the minimum suppression record needed to ensure we do not text you again.

Cookies

This site uses localStorage to maintain your shopping cart between visits. No third-party tracking cookies are set by this site.