Privacy Policy

Data controller

S. J. Daniel Photography, a sole proprietor based in Ventura County, California, United States, is the data controller for personal data collected through this website. For privacy-related questions, please use the contact form.

What we collect

When you place an order we collect your name, email address, shipping address, and payment information. Your card details are entered directly on Stripe's servers - we never see or store them.

When you use the contact form we collect your name, email address, and the content of your message.

We do not use cookies for tracking or advertising. We only use essential, non-identifying technical cookies or local storage tokens necessary for website security and core functionality (such as keeping track of your shopping cart).

Because we do not track our visitors across third-party websites, we do not alter our behavior or respond to Do Not Track (DNT) signals from your browser.

Our website is intended for a general audience and is not directed at children. We do not knowingly collect personal information from individuals under the age of 13. If we become aware that a child under 13 has provided us with personal data, we will delete it immediately.

Why we collect it

• Orders: to process payment, fulfil and ship your print, and send you a confirmation email. Legal basis: performance of a contract with you.
• Contact inquiries: to respond to your message. Legal basis: our legitimate interest in responding to customer inquiries.
• Error monitoring: to identify and fix technical problems. Legal basis: our legitimate interest in maintaining a secure and functioning service.

Who we share it with

We share your data only with the service providers needed to fulfil your order:

• Stripe: payment processing and sales-tax calculation. Stripe Privacy Policy.
• Prodigi: professional print fulfillment and worldwide shipping. Your name and shipping address are sent to the lab nearest your destination. Prodigi Privacy Policy.
• Resend: transactional email delivery (order confirmations and contact-form replies). Resend Privacy Policy.
• Sentry: application error monitoring. Error reports may include request metadata but do not include payment or shipping details. Sentry Privacy Policy.
• Vercel: website hosting and serverless functions. Vercel Privacy Policy.
• Cloudflare: privacy-first, cookieless website analytics (aggregate visitor counts and page views). No cookies, no cross-site tracking, and no personal data stored. Cloudflare Privacy Policy.

We do not sell your data to any third party.

How long we keep it

Order and shipping records are retained as required for tax and accounting purposes (typically seven years). Contact-form messages are kept only as long as needed to respond to your inquiry.

International transfers

All service providers listed above (Stripe, Prodigi, Resend, Sentry, Vercel, Cloudflare) are based in the United States. If you are located in the EU or UK, your personal data may be transferred to and processed in the US. These transfers rely on appropriate safeguards, including Standard Contractual Clauses where applicable. You can review each provider's data transfer mechanisms via the privacy policy links above.

Your rights

You may request a copy of the personal data we hold about you, or ask us to delete it, by sending a message via the contact form. We will respond within 30 days. Note that we may need to retain certain records for legal and tax obligations even after a deletion request.

If you are in the EU or UK, you also have the right to lodge a complaint with your local data protection supervisory authority. In the EU, you can find your national authority at edpb.europa.eu. In the UK, the supervisory authority is the Information Commissioner's Office.

Contact

For privacy-related questions, please use the contact form on the About page.