Last Updated 03/20/2026
Purpose and Scope.
Welcome to Alyssa Michelle Photography LLC ("Company," "we," "us," or "our"). This Privacy Policy ("Policy") outlines how we collect, use, share, and protect your personal information when you visit our website www.alyssamichellephotos.com and any related subpages (the "Website").
This Policy applies when you:
Visit or browse our Website.
Opt into email newsletters or marketing communications.
Purchase services via our Website.
Interact with our ads or marketing content on third-party websites or platforms.
This Policy does not cover data collected offline or via third-party websites or platforms, including affiliates or service providers.
This Policy describes our data practices. Where required by applicable law, we will obtain your consent before collecting or processing your personal information. By providing your information through forms, account registration, or purchases on our Website, you consent to the practices described in this Policy. For browsing data and cookies, please see our cookie consent preferences in Section 7.
Age Requirements.
We do not knowingly collect or solicit personal information from anyone under the age of 16. If you are under 16, please do not submit any personal information to us. If we learn that we have inadvertently collected personal information from someone under 16, we will promptly delete it.
If you believe we have collected such information, please contact us at alyssa@alyssamichellephotos.com.
Legal Bases for Processing.
We process your personal information only when we have a valid legal basis to do so. Depending on the circumstances, we rely on one or more of the following:
Contract Performance. Processing that is necessary to take steps prior to entering into a contract or to fulfill a contract with you, such as responding to inquiries, managing bookings, delivering photography services, and handling payments or galleries through our booking platform.
Legitimate Interests. Processing that is necessary for our legitimate business interests, such as operating and maintaining our Website, displaying our photography portfolio, responding to inquiries submitted through our contact form, ensuring website security, and understanding general website usage. We only process information in this way when those interests are not overridden by your rights.
Consent. Where you have given clear, affirmative consent for us to process your personal information for a specific purpose, such as opting into marketing communications or other voluntary communications. You may withdraw consent at any time.
Legal Obligation. Processing that is necessary to comply with applicable laws, regulations, tax requirements, or legal processes.
Information We Collect.
We collect limited personal information from you in order to operate our Website, respond to inquiries, and provide photography services. This may include:
Personal Identifiers. Name, email address, phone number, and any information you voluntarily provide when contacting us or booking a session through our booking platform.
Payment and Booking Information. Payment and billing details are collected and processed securely through our third-party booking platform. We do not directly store full payment card information on our Website.
Geolocation Data. We may collect basic device information such as IP address, which may provide general location data for security and website analytics purposes.
Internet and Device Activity. Information about how you interact with our Website, such as pages visited and browser type, typically collected through basic analytics tools or website hosting services.
Media. Photos or files you choose to submit through our contact form or booking process.
Referral Information. Information provided when you refer a friend or participate in a referral program, including the name and email address of the person you refer.
This information is collected directly from you when you voluntarily provide it (such as when you submit a contact form or communicate with us regarding a booking), or automatically through basic cookies and similar technologies when you browse our Website (for example, through website analytics or hosting services).
Sensitive Personal Information.
We do not intentionally collect sensitive personal information such as financial account credentials or account login details. Any payment-related information provided during booking or purchase is collected and processed securely by our third-party booking platform in accordance with their privacy policy.
We may receive limited technical data such as general IP-based location information, which is used for website security and basic analytics purposes.
Any sensitive data related to payments or transactions is collected and processed securely by our third-party booking platform in order to provide the services you request, process bookings, maintain security, and comply with legal obligations.
We do not use or disclose sensitive personal information for purposes beyond those necessary for service fulfillment, security, or compliance with applicable law.
If you are a California resident, you have the right to limit our use and disclosure of your sensitive personal information. To exercise this right, please see Section 10 (Consumer Rights) below.
Sources of Information.
Your personal information may be collected from the following sources, including, but not limited to:
Directly from You. When you submit a contact form, inquire about a session, or communicate with us regarding photography services through our Website or booking platform (Cloudspot).
Third-Party Service Providers. We use trusted third-party services to operate our business, which may collect or process information on our behalf, including:
Booking and Client Management Platforms: For inquiries, bookings, payments, and client communications.
Website Hosting and Analytics Providers: To help us understand basic website traffic and performance.
Social Media Platforms. If you interact with our content on social media, those platforms may share your data with us.
Email Marketing Platforms. We collect data through email marketing providers (e.g., Mailchimp, ConvertKit) when you subscribe to our newsletter or download resources.
Advertising Networks. When you interact with our ads on third-party platforms (e.g., Google Ads, Facebook Ads), those platforms may share information on your engagement with our advertisements.
Automated Data Collection. Our Website may automatically collect limited technical information such as IP address, browser type, and general browsing activity through cookies or similar technologies used for basic website functionality and analytics.
For more information about cookies and tracking technologies, please see Section 7 below.
Cookies, Tracking Technologies, and Affiliate Marketing.
We use cookies and similar tracking technologies (such as pixels and web beacons) to operate our Website, analyze performance, and support our marketing efforts.
We use the following categories of cookies:
Strictly Necessary Cookies.
Required for the Website to function properly (such as security and basic site functionality). These cookies cannot be disabled.
Analytics Cookies.
Help us understand how visitors use our Website (for example, through Google Analytics) so we can improve performance and content.
Marketing and Advertising Cookies.
Used to help us deliver and measure advertising campaigns on platforms such as Facebook, Instagram, and other social media platforms, and may be used in the future for Google Ads. These cookies may track activity such as page visits and interactions to help us show relevant ads and measure their effectiveness.
Third-party services (including Meta/Facebook, Google, Cloudspot, and WordPress tools) may also use cookies or similar technologies in accordance with their own privacy policies.
You can manage your cookie preferences through our cookie consent tool on the Website or through your browser settings. For information on opting out of the sale or sharing of your personal information through cookies and tracking technologies, see Section 9 (Data Sharing, Sale, and Sharing).
How We Use Your Information.
Your personal information may be used for the following purposes:
To operate and maintain our Website.
We use basic technical data to ensure our Website functions properly and to display content such as our photography portfolio and blog.
To respond to inquiries and provide services.
We use your information to respond to contact form submissions, communicate with you about photography services, and manage client bookings through our third-party platform.
To provide and manage photography services.
If you book a session, we use your information to manage scheduling, contracts, galleries, and delivery of final images.
To process payments.
Payments are processed securely through our third-party booking platform. We do not directly store full payment information on our Website.
To communicate with you.
We may use your contact information to send important updates related to your inquiry, booking, or services.
To improve our Website and marketing efforts.
We use analytics tools (such as Google Analytics) and advertising platforms (such as Meta/Facebook and Instagram, and potentially Google Ads) to understand website performance and run marketing campaigns.
To comply with legal obligations.
We may use your information when required to comply with applicable laws, regulations, or legal processes.
Data Sharing, Sale, and Sharing.
We do not sell your personal information. We may share your information only in the following limited circumstances:
Service Providers.
We may share personal information with trusted third-party service providers who help us operate our business, including:
Website Hosting and Platform Services (Showit and WordPress blog tools): to host and maintain our Website and blog content.
Payment Processors. Companies such as Stripe, PayPal, or other financial institutions that handle payments securely on our behalf.
Booking and Client Management Platform (Cloudspot): to manage inquiries, bookings, contracts, payments, and client galleries.
Analytics Providers (Google Analytics): to help us understand how visitors use our Website and improve performance.
Advertising Platforms (Meta/Facebook, Instagram, and potentially Google Ads): to measure and optimize advertising campaigns.
Legal Compliance and Protection.
We may disclose personal information if required by law, regulation, or legal process, or to protect our rights, property, or safety, or that of our clients or others.
Business Transfers.
If our business is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you if such a change occurs.
Consent-Based Sharing.
We may share your information in other cases where you have given us explicit consent.
Sale and Sharing of Personal Information
We do not sell your personal information for monetary compensation.
However, we may use third-party advertising tools (such as Meta/Facebook, Instagram, and similar platforms, and potentially Google Ads in the future) that collect information about your activity on our Website through cookies or similar technologies. Under certain privacy laws, this may be considered “sharing” of personal information for cross-context behavioral advertising.
You may opt out of the use of cookies and similar technologies for advertising purposes at any time through our cookie consent tool (Enzuzo) or your browser settings.
We also honor applicable browser-based opt-out signals, such as Global Privacy Control (GPC), where required by law.
International Data Transfers
If you are located outside the United States, your personal data may be transferred to and processed in the United States or other countries where our third-party service providers operate. We take steps to ensure such transfers comply with applicable data protection laws, such as the GDPR, by implementing standard contractual clauses or similar legal mechanisms.
Consumer Rights.
You have certain rights regarding your personal data under applicable privacy laws. The specific rights available to you depend on your jurisdiction.
Rights Available to All Users
Right to Access. Request access to the personal data we hold about you.
Right to Correction. Request correction of inaccurate or incomplete data.
Right to Deletion. Request the deletion of your personal data (subject to legal exceptions).
Right to Opt-Out. Opt out of the sale or sharing of your data or targeted advertising. See Section 9 for available opt-out methods.
Right to Data Portability. Request transfer of your data to another provider in a commonly used format.
Additional Rights for California Residents (CCPA/CPRA)
Right to Know. Request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share your data.
Right to Limit Use of Sensitive Personal Information. Direct us to limit the use and disclosure of your sensitive personal information to purposes necessary to provide the services you request.
Right to Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights.
Right to Opt Out of Sale and Sharing. Opt out of both the sale of your personal information and the sharing of your personal information for cross-context behavioral advertising.
Additional Rights for EU/UK Residents (GDPR/UK GDPR)
Right to Restrict Processing. Request that we restrict the processing of your personal data in certain circumstances (e.g., while we verify the accuracy of your data).
Right to Object. Object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent. Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of processing conducted before withdrawal.
Right to Lodge a Complaint. File a complaint with your local data protection supervisory authority.
How to Exercise Your Rights
To exercise any of these rights, please contact us at alyssa@alyssamichellephotos.com or use the contact methods listed in Section 15 (Contact Us) below. We will respond to verifiable requests within the timeframes required by applicable law (generally 45 days for CCPA/CPRA requests and 30 days for GDPR requests, with extensions permitted where necessary).
We may need to verify your identity before processing your request. If you use an authorized agent to submit a request on your behalf, we may require proof of authorization.
Right to Appeal
If we decline to take action on your request, you have the right to appeal our decision. To submit an appeal, contact us at alyssa@alyssamichellephotos.com with the subject line "Privacy Rights Appeal." We will respond to appeals within the timeframe required by applicable law. If your appeal is denied, you may contact your state attorney general or applicable data protection authority.
Do Not Track and Global Privacy Control (GPC).
Our Website honors Global Privacy Control (GPC) signals. When we detect a GPC signal from your browser, we will treat it as a valid opt-out request for the sale and sharing of personal information associated with that browser, as required by applicable law.
With respect to Do Not Track (DNT) browser signals, there is currently no industry-wide standard for how websites should respond to DNT signals. We will update this Policy if a uniform standard is adopted.
For more details on GPC, visit https://globalprivacycontrol.org.
Data Retention.
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including providing services, maintaining business records, and complying with legal obligations.
Client and transaction data: Retained for up to 3–7 years for tax, accounting, and business recordkeeping purposes.
Marketing data: Retained until you unsubscribe or request deletion, or after a period of inactivity.
Analytics and cookie data: Retained for up to 26 months or as configured through our analytics tools.
Legal records: Retained as required by applicable law.
After the applicable retention period, we will securely delete or anonymize your personal data unless retention is required by law. You can request deletion of your data by contacting us, except in cases where retention is required by law.
Data Security.
We implement appropriate technical and organizational security measures to protect your data from unauthorized access, loss, or misuse, including encryption, access controls, and secure data storage. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee the absolute security of your data.
You are responsible for keeping your account credentials secure. We are not liable for any unauthorized access resulting from your failure to safeguard your login information.
Changes to This Policy.
We may update this Privacy Policy periodically to reflect changes in our practices or legal obligations. The "Last Updated" date at the top of this page reflects the latest version. If material changes are made, we will notify you via email or post a notice on our Website.
Your continued use of the Website following such changes indicates your acceptance of the updated Policy.
Contact Us.
If you have any questions, concerns, or would like to exercise your privacy rights, you can reach us using the following contact methods:
Email: alyssa@alyssamichellephotos.com.
Contact Form: https://www.alyssamichellephotos.com/inquire.
Privacy Policy
