Privacy Policy
**Last updated:** August 10th, 2026
Brittany Ann Photography (we, us, and our) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you:
- Visit https://brittanyannphotography.com
- Contact us, request information, or submit an inquiry;
- Book, purchase, or receive photography services;
- Participate in a photography session or event;
- Access an online gallery, download photographs, or order prints and products;
- Subscribe to our emails or other communications; or
- Otherwise interact with our business.
In this Privacy Policy, the website, photography services, online galleries, products, communications, and related activities are collectively called the “Services.”
By using the Services, you acknowledge the practices described in this Privacy Policy. Where required by law, we will ask for your consent before collecting or using certain personal information.
##1. Who We Are
The party responsible for the personal information described in this Privacy Policy is:
**Brittany Ann Photography**
**1427 N Stratton Ave., Castle Rock, CO 80104**
**brittany@brittanyannphotography.com**
**720-810-1299**
**https://brittanyannphotography.com**
Depending on applicable law, we may be referred to as the “controller,” “business,” or similar term for the organization that determines how and why personal information is processed.
## 2. Scope of This Policy
This Privacy Policy applies to personal information handled through the Services. It does not apply to:
- The independent privacy practices of third-party websites, platforms, or vendors;
- Personal information handled solely on behalf of another business when that business controls how the information is used; or
- Employment or contractor records, unless expressly stated otherwise.
Our contracts, booking terms, gallery terms, print releases, copyright notices, and model releases may contain additional terms. Those documents govern subjects such as payment obligations, image licensing, copyright, portfolio use, publication, and cancellation. This Privacy Policy does not itself grant us permission to publish a client’s photographs or change the ownership or permitted use of any image.
## 3. Personal Information We Collect
The information we collect depends on how you interact with us.
### Information You Provide Directly
We may collect information you provide when you contact us, book a session, sign a contract, complete a questionnaire, make a payment, enter a promotion, subscribe to communications, or otherwise use the Services. This information may include:
- Your name, email address, mailing address, and telephone number;
- Names and contact details of other participants, family members, event contacts, vendors, or representatives;
- Account credentials or gallery access information;
- Session or event details, including dates, times, locations, schedules, shot lists, and preferences;
- Information about weddings, engagements, families, pregnancies, births, graduations, businesses, properties, products, or other photographed subjects;
- Messages, correspondence, feedback, testimonials, and customer-service records;
- Contract details, signatures, permissions, model releases, and licensing selections;
- Order history, product selections, delivery information, and transaction records;
- Marketing preferences and communication choices;
- Contest, giveaway, survey, or promotion entries; and
- Any other information you choose to provide.
Please avoid sending sensitive information that is not reasonably necessary for us to provide the Services.
### Photographs, Video, Audio, and Session Materials
When we provide photography or related creative services, we may create or receive:
- Photographs, video recordings, audio recordings, and digital negatives;
- Image metadata, such as capture date, time, camera settings, file information, and, when enabled, location data;
- Proofs, edits, retouched images, albums, slideshows, and other deliverables;
- Names, likenesses, voices, and physical characteristics visible or audible in session materials; and
- Client-provided reference images, inspiration boards, logos, brand materials, or other creative content.
Photographs can reveal information about the people and places depicted in them. Depending on the circumstances, they may reveal approximate age, relationships, location, attendance at an event, religious or cultural activities, health-related details, or other personal characteristics.
We do not use photographs to identify people through facial-recognition technology unless we specifically disclose that practice and obtain any consent required by law. Some gallery, editing, storage, or organizational tools may offer automated grouping, tagging, or image-analysis features. If we use such features, we will do so subject to applicable law and our agreements with the relevant provider.
### Payment Information
Payments may be processed by a third-party payment provider. The provider may collect payment-card details, bank information, billing addresses, and fraud-prevention information directly from you.
We generally receive limited transaction information, such as your name, payment status, amount paid, payment method type, and a transaction identifier. We generally do not receive or store complete payment-card numbers unless expressly disclosed at the point of collection.
### Information Collected Automatically
When you visit our website, open an email, or use an online gallery, we and our technology providers may automatically collect information such as:
- Internet Protocol address;
- Browser type, device type, operating system, and language;
- Approximate location derived from an IP address;
- Referring and exit pages;
- Pages or galleries viewed and links selected;
- Dates, times, and duration of visits;
- Cookie identifiers and similar device identifiers;
- Email delivery, opening, and engagement information; and
- Website performance, error, security, and diagnostic information.
We may use cookies, pixels, tags, local storage, software development kits, and similar technologies for these purposes.
### Information From Other Sources
We may receive personal information from:
- A client who books a session or event involving you;
- Wedding planners, event organizers, venues, schools, employers, real estate professionals, creative agencies, or other coordinating parties;
- Family members, friends, or representatives who purchase a gift or arrange a session;
- Social-media platforms when you interact with our pages or authorize an integration;
- Gallery, scheduling, customer-management, payment, print-lab, delivery, and marketing providers;
- Publicly available sources; and
- Referral partners or other third parties, where permitted by law.
If you provide us with another person’s information, you should have authority to do so and, when appropriate, inform that person about this Privacy Policy.
## 4. How We Use Personal Information
We may use personal information to:
- Respond to inquiries and provide estimates or proposals;
- Schedule, plan, photograph, edit, and deliver sessions or events;
- Create proofs, galleries, albums, prints, videos, and other products;
- Communicate with clients, participants, vendors, and event contacts;
- Create and administer contracts, releases, licenses, and orders;
- Process payments, deposits, refunds, and accounting records;
- Authenticate gallery visitors and manage downloads;
- Arrange printing, framing, shipping, storage, and fulfillment;
- Provide customer service and resolve disputes;
- Maintain business, tax, insurance, and legal records;
- Protect our website, galleries, systems, clients, and business;
- Detect or prevent fraud, misuse, unauthorized access, and security incidents;
- Analyze and improve our Services, workflow, communications, and website;
- Send administrative messages, booking reminders, and service updates;
- Send marketing communications when permitted by law;
- Administer promotions, surveys, or referral programs;
- Display photographs, testimonials, or reviews when authorized;
- Establish, exercise, or defend legal claims;
- Comply with applicable laws, regulations, court orders, and lawful requests; and
- Carry out any other purpose disclosed when information is collected or authorized by you.
We may combine information collected through different parts of the Services when permitted by law.
## 5. Legal Bases for Processing
Where applicable law requires a legal basis, we process personal information based on one or more of the following:
- **Contract:** Processing is necessary to take steps at your request, enter into a contract, or perform our contractual obligations.
- **Legitimate interests:** Processing is necessary for legitimate business purposes, such as operating our business, communicating with clients, securing our systems, improving our Services, collecting amounts owed, and protecting legal rights, provided those interests are not overridden by your rights.
- **Consent:** You have given permission for a particular use, such as certain marketing communications or authorized publication of photographs. You may withdraw consent prospectively, subject to legal and contractual limitations.
- **Legal obligations:** Processing is necessary to comply with tax, accounting, consumer-protection, court, regulatory, or other legal requirements.
- **Protection of rights and safety:** Processing is necessary to protect a person’s vital interests or the rights, property, and safety of our business or others.
The legal basis that applies will depend on the information and the circumstances in which it is used.
## 6. Cookies and Similar Technologies
We may use the following types of cookies and similar technologies:
- **Essential technologies:** Necessary for website operation, security, gallery access, shopping carts, bookings, and requested features.
- **Preference technologies:** Remember settings such as language, region, or gallery preferences.
- **Analytics technologies:** Help us understand website traffic, visitor interactions, and performance.
- **Advertising technologies:** Help measure campaigns or present advertising that may be more relevant to visitors.
- **Social-media technologies:** Support embedded content, sharing tools, or interactions with social platforms.
Where required, nonessential technologies will be used only after you provide consent. You can manage available choices through [COOKIE SETTINGS LINK OR DESCRIPTION]. You may also be able to block or delete cookies through your browser settings. Blocking some technologies may affect website or gallery functionality.
Third parties may collect information through their own technologies when their services appear on our website. Their collection and use of information are governed by their own privacy notices.
## 7. Analytics and Advertising
We may use analytics providers to understand how visitors find and use our website. These providers may collect device, usage, and approximate-location information.
If we use advertising or social-media pixels, those technologies may allow a third party to associate activity on our website with activity elsewhere. Depending on the technology and applicable law, this may be considered targeted advertising, cross-context behavioral advertising, a “sale,” or “sharing” of personal information.
You can exercise any applicable opt-out rights through [COOKIE SETTINGS OR “YOUR PRIVACY CHOICES” LINK]. Where required, we also recognize qualifying browser-based opt-out preference signals, such as Global Privacy Control.
Our website does not presently respond to older “Do Not Track” browser signals because there is no universally accepted standard for those signals. This does not affect any rights you may have regarding legally recognized opt-out preference signals.
## 8. How We Disclose Personal Information
We may disclose personal information to the following recipients when reasonably necessary:
### Service Providers
We may use vendors that provide:
- Website hosting and content-management services;
- Client relationship management and scheduling;
- Electronic contracts and signatures;
- Online galleries, image delivery, and cloud storage;
- Editing, retouching, album design, or post-production;
- Payment processing, bookkeeping, and accounting;
- Print labs, album makers, framing companies, and fulfillment;
- Email, messaging, and marketing services;
- Analytics, advertising, and social-media tools;
- Cybersecurity, backup, fraud-prevention, and technical support;
- Shipping, courier, and postal services; and
- Professional advice, including legal, insurance, and financial services.
These providers may process information for us or for purposes described in their own privacy notices.
### People Involved in a Session or Event
When needed to provide the Services, we may share relevant information with clients, session participants, second photographers, assistants, editors, planners, venues, coordinators, stylists, laboratories, and other vendors involved in the project.
### Client-Authorized Recipients
We may disclose photographs or other information to a person or organization at the client’s direction, including family members, event participants, employers, publishers, venues, schools, vendors, social-media platforms, or commercial partners.
### Legal, Safety, and Compliance Disclosures
We may disclose information when we reasonably believe disclosure is necessary to:
- Comply with applicable law, legal process, court orders, or governmental requests;
- Enforce contracts, licenses, policies, or other agreements;
- Protect our rights, property, security, or safety;
- Protect clients, participants, visitors, or other people;
- Detect, investigate, or prevent fraud, misuse, or unlawful activity; or
- Establish, exercise, or defend legal claims.
### Business Transactions
If our business is involved in a merger, acquisition, financing, reorganization, sale of assets, transfer of contracts, bankruptcy, or similar transaction, personal information may be reviewed or transferred as part of that transaction, subject to appropriate confidentiality protections.
### With Consent or at Your Direction
We may disclose information for another purpose with your consent or at your direction.
## 9. Photographs, Portfolio Use, and Publicity
Whether we may display or publish photographs depends on the applicable contract, model release, consent, license, law, and circumstances of the session.
When authorized, photographs may appear in places such as:
- Our website or online portfolio;
- Social-media accounts;
- Studio samples, albums, or printed displays;
- Advertising, editorial features, competitions, exhibitions, or publications;
- Educational materials, presentations, or workshops; and
- Vendor portfolios or collaborative features.
This Privacy Policy does not independently authorize portfolio, advertising, or promotional use. Any such authorization should be addressed in an appropriate contract or release.
Withdrawing consent does not necessarily affect uses that occurred lawfully before withdrawal. It may also be impossible to retrieve photographs already printed, downloaded, republished, or shared by independent third parties. We will consider valid withdrawal or objection requests in accordance with applicable law and contractual rights.
## 10. Online Galleries
Online galleries may be public, unlisted, password-protected, access-controlled, or otherwise configured according to the service selected.
If you receive a gallery link, password, download code, or other access credential, you are responsible for using it appropriately and for considering the privacy of people shown in the gallery before sharing it. Anyone who receives a working link or credential may be able to view, download, purchase, or share gallery content, depending on the gallery settings.
No internet-based gallery can be guaranteed to be completely private or secure. Contact us promptly at brittany@brittanyannphotography.com if you believe gallery access has been compromised.
Gallery providers may collect information directly from visitors, including account, device, purchase, and usage information, as described in their own privacy notices.
## 11. Marketing Communications
With your consent or as otherwise permitted by law, we may send news, session announcements, promotions, or other marketing communications.
You can unsubscribe from marketing emails by using the link included in the message or contacting us at brittany@brittanyannphotography.com. Even if you opt out of marketing, we may continue sending non-promotional communications relating to inquiries, bookings, payments, galleries, purchases, legal matters, or changes affecting the Services.
Opting out of our communications does not automatically unsubscribe you from messages sent independently by a gallery provider, event organizer, social-media platform, or other third party.
## 12. Retention of Personal Information
We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing Services, maintaining business records, resolving disputes, enforcing agreements, and meeting tax, insurance, accounting, and legal requirements.
Retention periods may vary based on:
- The type and sensitivity of the information;
- The length of the client relationship;
- Contractual commitments;
- Backup and archival practices;
- Limitation periods and potential disputes;
- Legal, tax, insurance, and accounting obligations; and
- Whether retention is necessary to protect clients, subjects, or our business.
Unless a different period is stated in a contract or required by law, we generally retain:
- **Inquiry and correspondence records:** 7 years;
- **Contracts, invoices, and transaction records:** 7 years
- **Unselected or rejected image files:** Indefinitely
- **Selected, edited, or delivered images:** Indefinitely;
- **Online galleries:** 1 year;
- **Marketing records:** Until you unsubscribe or the information is no longer needed; and
- **Cookie and analytics information:** According to the settings of the relevant technology or provider.
Photography services are not a permanent backup service unless a contract expressly states otherwise. Clients should download delivered files promptly and maintain their own backups.
When information is no longer required, we may delete, destroy, de-identify, or anonymize it, subject to technical limitations and legal requirements. Residual copies may remain temporarily in backups until overwritten through ordinary backup processes.
## 13. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information. Depending on the nature of the information and our operations, these safeguards may include access controls, passwords, encryption, secure vendors, backups, device protections, staff or contractor confidentiality obligations, and procedures for responding to security incidents.
No storage system, transmission method, website, email service, or online gallery can be guaranteed to be completely secure. You provide information and use the Services at your own risk.
If we become aware of a security incident involving personal information, we will investigate and provide notices when required by applicable law.
## 14. International Data Transfers
We and our service providers may process or store personal information in countries other than the country where it was collected. Those countries may have different privacy laws.
Where required, we use an approved legal mechanism or other appropriate safeguards for international transfers. You may contact us for more information about safeguards applicable to your information.
## 15. Children and Minors
Our website is intended for a general audience and is not directed to children under [13 OR OTHER APPLICABLE AGE]. We do not knowingly collect personal information online directly from children below the applicable age without authorization from a parent or legal guardian.
Children and minors may appear in photographs when a parent, guardian, school, organization, event host, or other authorized client arranges or approves the photography. The client is responsible for obtaining any permission required from parents, guardians, participants, venues, or organizations unless our agreement states otherwise.
If you believe a child has submitted personal information to us without appropriate authorization, contact us at brittany@brittanyannphotography.com We will review the request and take appropriate action.
## 16. Your Privacy Rights and Choices
Depending on where you live and subject to legal exceptions, you may have the right to:
- Request information about the personal information we collect, use, or disclose;
- Access or receive a copy of your personal information;
- Correct inaccurate or incomplete information;
- Request deletion of personal information;
- Restrict or object to certain processing;
- Withdraw consent for future processing;
- Receive certain information in a portable format;
- Opt out of targeted advertising or certain disclosures;
- Opt out of the sale or sharing of personal information, where those terms are legally defined;
- Limit certain uses of sensitive personal information;
- Appeal our response to a privacy request; and
- Lodge a complaint with a privacy or data-protection authority.
These rights are not absolute. For example, we may retain information needed to complete a transaction, comply with law, maintain tax or accounting records, exercise freedom of expression, establish or defend legal claims, enforce a contract, prevent fraud, or protect security.
A request to delete personal information does not necessarily require deletion of photographs or records that we may lawfully retain under a contract, release, legal obligation, exception, or other valid basis.
### Submitting a Request
To make a privacy request, contact us using:
**Mail: 1427 N Stratton Ave., Castle Rock, CO 80104**
Please describe your request and the information or interaction involved. We may need to verify your identity before completing a request. Verification may require confirming information already associated with you. We will use verification information only to process the request.
You may use an authorized agent where permitted by law. We may request proof of the agent’s authority and may need to verify your identity directly.
We will respond within the period required by applicable law. If we deny a request, we will provide an explanation and information about any available appeal process when required.
We will not unlawfully discriminate against you for exercising a privacy right.
## 17. Supplemental Notice for Certain U.S. Residents
This section applies only when a U.S. state privacy law applies to our business and grants the relevant rights to the person making the request.
During the preceding 12 months, we may have collected the categories of personal information described in Section 3, including:
- Identifiers and contact information;
- Customer, transaction, and commercial information;
- Payment-related information handled by payment providers;
- Internet or electronic network activity;
- Approximate geolocation information;
- Photographs, video, audio, and similar sensory information;
- Professional or employment-related information when relevant to commercial photography;
- Inferences based on preferences or interactions; and
- Sensitive personal information only when reasonably necessary and lawfully permitted.
We collect this information from the sources described in Section 3, use it for the purposes described in Section 4, and disclose it to the recipients described in Section 8.
**Choose and retain the statement that accurately describes the business:**
[WE DO NOT SELL PERSONAL INFORMATION OR SHARE IT FOR CROSS-CONTEXT BEHAVIORAL ADVERTISING AS THOSE TERMS ARE DEFINED BY APPLICABLE LAW.]
We do not knowingly sell or share the personal information of individuals under 16 without the affirmative authorization required by applicable law.
We use sensitive personal information only for permitted purposes, such as providing requested Services, processing payments, maintaining security, or complying with law, unless we provide a separate notice.
If we offer a financial incentive or price or service difference related to personal information, we will provide the legally required notice before you enroll.
## 18. Third-Party Websites and Services
The Services may link to or integrate with social networks, gallery platforms, payment providers, scheduling tools, print labs, map services, video platforms, or other third parties.
We do not control the privacy, security, or content practices of independent third parties. Their privacy policies govern the information they collect. We encourage you to review those policies before providing personal information or using an external service.
## 19. Social Media
If you interact with us through a social-media platform, both we and the platform may receive information about the interaction. Information you post publicly may be viewed, copied, downloaded, or shared by others.
Your use of a social-media platform is governed by the platform’s own terms and privacy policy. Privacy choices made directly with us may not change information independently retained by the platform.
## 20. Testimonials and Reviews
We may display testimonials, reviews, names, business names, or related photographs when authorized or otherwise permitted by law.
Reviews submitted to an independent platform are also governed by that platform’s policies. If you ask us to remove a testimonial from a channel we control, we will consider the request in light of applicable law and our contractual rights. We may not be able to remove copies controlled by third parties.
## 21. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, Services, or legal obligations.
The “Last updated” date at the beginning of the policy indicates when it was most recently revised. We may provide additional notice of material changes when required by law. Unless otherwise stated, an updated policy takes effect when posted.
We encourage you to review this Privacy Policy periodically.
## 22. Complaints
If you have a concern about our privacy practices, please contact us first so we can try to resolve it.
Depending on your location, you may also have the right to complain to your state attorney general, privacy regulator, consumer-protection authority, or data-protection supervisory authority.
## 23. Contact Us
Questions, concerns, and privacy requests may be directed to:
**Brittany Ann Photography**
1427 N Stratton Ave., Castle Rock, CO 80104
brittany@brittanyannphotography.com
720-810-1299
https://brittanyannphotography.com
This is a starting template, not legal advice. It must accurately describe the business’s real practices—especially portfolio use, advertising pixels, image retention, and vendor sharing. Official guidance emphasizes transparent disclosure, data minimization, security, retention, and accessible rights procedures. See the [FTC’s privacy and security guidance](https://www.ftc.gov/business-guidance/privacy-security), the [European Commission’s required privacy-notice information](https://commission.europa.eu/law/law-topic/data-protection/rules-business-and-organisations/principles-gdpr/what-information-must-be-given-individuals-whose-data-collected_en), and the [California Attorney General’s CCPA overview](https://oag.ca.gov/privacy/ccpa?bot_detected=1). A local attorney should review the final version for the photographer’s jurisdiction and actual setup.