Privacy Policy

This privacy policy is provided to help visitors understand how their Personally Identifiable Information (PII) is collected, used, and protected when visiting this website. PII, as described in U.S. privacy law and information security standards, is information that can be used on its own or with other data to identify, contact, or locate an individual. By using this website, you agree to the practices described in this privacy policy.

What personal information do we collect?
When visiting, contacting us, or submitting information on this website, you may be asked to enter your name, email address, phone number, mailing address, inquiry details, or other information to help us respond to your inquiries or provide services. Our contact forms may also collect non-sensitive behavioral information such as website referrer, pages visited, approximate geographic location based on IP, and on-site activity for the purpose of analytics, marketing optimization, and improving user experience. We use tools including Google Analytics, Google Search Console, Meta Pixel (Facebook/Instagram), Pinterest Tag, Google Tag Manager, Microsoft Clarity, and occasionally HotJar to understand how users interact with the site. By using this site, you agree that these platforms may collect and process usage data according to their respective privacy policies.

When do we collect information?
We collect information when you fill out a contact form, subscribe to messages, request information, submit inquiries, engage with ads, interact with the site, or otherwise enter information. We use analytics and tracking tools (Google Analytics, Meta Pixel, Pinterest Tag, Microsoft Clarity, and related technologies) to capture behavioral metrics, heatmaps, scroll activity, click actions, and session interactions to improve our website, enhance performance, monitor advertising effectiveness, and ensure site security. Data may be gathered using first-party and third-party cookies, pixels, and similar tracking technologies. For details on how Microsoft uses collected data, refer to the Microsoft Privacy Statement. For information on how Meta, Google, and Pinterest track and use data, please review their respective privacy policies.

How do we use your information?
We may use the information collected in the following ways:
• To personalize your experience and deliver relevant content.
• To improve our website functionality and user experience.
• To respond to customer service requests, inquiries, or booking questions.
• To administer promotions, surveys, or features.
• To process transactions, bookings, or service-related communication.
• To request reviews or feedback.
• To follow up after inquiries via live chat, email, phone, or SMS.
• To analyze marketing performance and optimize advertising campaigns.
• To create aggregated, non-identifiable data models for improving services.

How do we protect your information?
Our website is regularly scanned for security vulnerabilities. Personal information is stored on secured systems accessible only by individuals with authorized access rights, who are required to keep the information confidential. All sensitive information transmitted through this website is encrypted via Secure Socket Layer (SSL) technology. Financial transactions are processed through secure third-party providers such as Stripe, Dubsado, or other payment processors. We do not store or have access to financial information, saved credit cards, or payment credentials. Two-factor authentication is used where available to protect account access. Only limited professionals (such as tax professionals or marketing agencies) may access necessary information, and they are required to keep all client information confidential.

Do we use cookies?
Yes. Cookies, pixels, and similar technologies are used for analytics, advertising, tracking, and site functionality. Users may disable cookies through their browser settings; however, some website functionality may be limited. Users can control personalized advertising through tools such as Google Ad Settings, the Network Advertising Initiative Opt Out page, or the Google Analytics Opt Out Browser Add-On.

Third-party disclosure
We do not sell, trade, or otherwise transfer your PII to outside marketers. Trusted third parties may process or access information only as necessary to operate the website, manage analytics, support advertising campaigns, or perform essential business functions, including hosting providers, CRM tools (such as Dubsado), payment processors (such as Stripe), accounting tools (such as QuickBooks), gallery providers (such as Pic-Time), and analytics platforms. These parties are required to keep information confidential. We may release information when necessary to comply with legal requirements, enforce our site policies, or protect rights, property, or safety. Non-PII may be shared with partners for marketing or analytics purposes.

Third-party links and embedded content
This site may include external links or embedded content (videos, galleries, articles). External sites have separate privacy policies. Embedded content behaves as if you visited the external site directly and may collect data, use cookies, or track interactions.

Advertising & remarketing practices
We use Google Ads, Meta (Facebook/Instagram) Ads, and Pinterest Ads for remarketing and displaying relevant promotions. These platforms use cookies, pixels, and identifiers to display ads based on past interactions with this site. We may use customer lists to create audience-matching or lookalike audiences in advertising platforms. Emails or phone numbers used for this purpose are hashed/encrypted before upload, are not visible to advertisers, are not used for direct messaging, and are not shared or sold. You may opt out of interest-based advertising through the ad preference settings on Google, Meta, Pinterest, or through industry opt-out programs.

California Online Privacy Protection Act (CalOPPA)
We comply with CalOPPA by making this privacy policy easily accessible on our site and by allowing anonymous site visits. We honor Do Not Track (DNT) signals where technically feasible and do not plant cookies when a valid DNT method is enabled.

Does our site allow third-party behavioral tracking?
Yes. Third-party behavioral tracking is used solely for analytics and advertising purposes.

Children’s Online Privacy Protection Act (COPPA)
We do not knowingly collect personal information from children under 13, nor do we market to children under 13. We do not knowingly permit third parties to collect PII from users under 13.

Fair Information Practices
In compliance with Fair Information Practice Principles, we will notify users via email within 7 business days if a data breach occurs. We support the Individual Redress Principle, allowing individuals to pursue legally enforceable rights against data processors who fail to adhere to the law.

CAN-SPAM Act
We may collect your email to:
• Respond to inquiries or requests
• Process bookings or provide service-related communication
• Send updates related to your service or purchase
• Provide marketing content to subscribers

To comply with CAN-SPAM, we agree to:
• Avoid misleading or false subject lines
• Identify marketing emails clearly
• Include our physical mailing address
• Monitor third-party email services for compliance
• Honor unsubscribe requests promptly
• Provide an unsubscribe link in all marketing emails
Users may unsubscribe at any time by emailing malachi@shellcreekphoto.com or using the opt-out link in emails.

SMS communication
SMS communication may occur either directly from our business phone number or through authorized CRM systems used for appointment reminders, confirmations, or opt-in marketing messages. Standard messaging rates may apply. SMS communication is only sent with explicit user consent, and users may opt out at any time by following the instructions provided in the message.

How long we retain data
Contact form submissions, emails, and inquiry data are retained for a minimum of 1 year after the event date. Financial records and transaction-related information are retained for at least 7 years to comply with tax and accounting requirements. Photo galleries and client files may be retained longer when necessary for business operations or backup purposes.

Data storage
Photos are stored in Pic-Time, Amazon Photos, and local/on-site hard drives. Client data may be stored in Dubsado, QuickBooks, Google Sheets (non-financial information only), or secured cloud services. All systems used to store data require secure login credentials and are protected by authentication methods such as two-factor authentication.

Your privacy rights & data deletion requests
You may request access to your personal information or request that your data be deleted. Requests may be sent to malachi@shellcreekphoto.com. Please allow up to 7 business days to process deletion requests unless additional time is required by law.

Contacting Us
If you have questions about this privacy policy, you may contact us at:
Shell Creek Photography
19826 SE 300th Street, Kent, WA 98042
malachi@shellcreekphoto.com
1-402-615-3061