Introduction and Data Controller

• Data Controller: Eric Fromson, operating under [Your Business Name, e.g., Eric Fromson Photography], is the data controller responsible for the processing of your personal information. This policy describes how we collect, use, store, and protect your personal information in compliance with applicable laws, including the EU's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

• Scope: This policy applies to personal data collected through our website, client forms, emails, and during our photography services.

2. Information We Collect

• Personal Information: We collect information that you voluntarily provide to us, such as your name, email address, phone number, and physical address. We also collect specific details relevant to your session, such as dates, locations, and personal preferences, to perform our services effectively.

• Financial Information: For payment processing, we collect billing details. This information is securely handled by our third-party payment processors ([e.g., Stripe, PayPal]), and we do not store your full financial details on our servers. For cash payments, only the transaction amount is recorded for accounting purposes.

• Images (Biometric Data): Photographs of you contain your likeness, which is considered personal data. The images we capture are stored securely and processed according to the terms of this policy and your signed model release.

• Technical Data: We automatically collect certain information when you visit our website, including your IP address, browser type, operating system, and browsing activity. This data is collected using cookies and similar tracking technologies.

• Source of Information: We collect data directly from you, from your device via our website, and potentially from third-party partners (e.g., social media sites) if you interact with our pages.

3. Legal Basis and How We Use Your Information

We use your information based on the following legal bases:

• Performance of a Contract: We process your personal information to fulfill our obligations under our contract with you, such as conducting photoshoots, processing your order, and delivering your images.

• Legitimate Interests: We may process your information for our legitimate business interests, such as marketing our services, improving our website, and conducting internal analytics. For example, using images for our portfolio and website is a legitimate business interest.

• Consent: Where required, we will obtain your explicit consent for processing your data, such as for marketing communications. You have the right to withdraw your consent at any time.

• Legal Obligations: We may process your data to comply with legal requirements, such as tax obligations or responding to legal requests.

4. How We Share Your Information

We do not sell your personal data. We may share your information with the following parties:

• Service Providers: We use third-party services for tasks such as website hosting, online gallery delivery, client management, and payment processing. We only share the necessary information to perform these functions and require these providers to protect your data.

• Legal Compliance: We may disclose your information to law enforcement, government agencies, or legal authorities if required by law or to protect our rights or property.

• With Your Consent: We will share your images for promotional purposes only if you have provided explicit consent via a signed model release.

5. Data Storage and Security

• Storage Location: Your data is stored on secure servers located in the United States. We take reasonable precautions to ensure your information is protected.

• Data Security: We implement appropriate technical and organizational security measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized access, and disclosure.

• Disclaimer: While we strive to protect your data, no security system is completely impenetrable. We cannot guarantee the absolute security of your information.

6. Your Rights Under GDPR and CCPA

Depending on your location, you may have the following rights:

• Access: You can request a copy of the personal data we hold about you.

• Rectification: You can request that we correct any inaccurate or incomplete data.

• Erasure (Right to Be Forgotten): You can request the deletion of your personal data under certain conditions.

• Restriction of Processing: You can request that we restrict the processing of your personal data.

• Data Portability: You can request to receive your personal data in a structured, machine-readable format.

• Objection to Processing: You can object to the processing of your data for certain purposes, including marketing.

• “Do Not Sell My Personal Information” (CCPA): California residents have the right to opt out of the sale of their personal information. We do not sell your data.

• Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will be posted on our website with the updated date. We encourage you to review this policy periodically.

8. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact Eric Fromson at:

• Email: ericfromson@yahoo.com

• Phone: 3016931584