Privacy Policy

Effective Date: May 22, 2026

Photography by Tracy Ellington ("we," "us," or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.

This policy applies to all information collected through the website photographybytracyellington.com and any related services, communications, or transactions.

This policy is intended to comply with applicable privacy laws, including the General Data Protection Regulation (GDPR) for visitors in the European Economic Area (EEA), the California Consumer Privacy Act (CCPA) for California residents, Canada’s PIPEDA, and other applicable privacy regulations.

Information We Collect

Information You Provide Directly

We collect personal information you voluntarily provide when you:

• Purchase a product or service (name, email address, billing address, payment information).
• Contact us via email, contact forms, or social media (name, email, message content).
• Subscribe to a newsletter or mailing list (name, email address).
• Leave a review or testimonial (name, comments).

Information Collected Automatically

When you visit our Site, certain information is collected automatically, including:

• IP address and approximate geographic location.
• Browser type and version.
• Device type and operating system.
• Pages viewed, time spent on pages, and referring URLs.
• Cookies and similar tracking technologies.

Payment Information

We do not store your full credit card or payment details. Payment transactions are processed by secure third-party payment processors such as Stripe, PayPal, or Square. These processors have their own privacy policies governing the handling of your payment data.

How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders, including delivering digital downloads.
• Send order confirmations, receipts, and customer service communications.
• Respond to your inquiries and provide support.
• Send marketing or promotional communications (only with your consent where required by law).
• Improve our Site, products, and services.
• Detect, prevent, and address fraud, security issues, or technical problems.
• Comply with applicable legal obligations.

Legal Basis for Processing (GDPR)

If you are located in the EEA, we process your personal data under the following legal bases:

• Contract Performance: Processing necessary to fulfill your purchase or service request.
• Legitimate Interests: Improving our services, preventing fraud, and communicating with customers.
• Consent: For marketing emails and non-essential cookies, where required.
• Legal Obligation: Where processing is required by applicable law.

Sharing Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information with trusted third parties only in the following circumstances:

• Service Providers: Payment processors, email platforms, website hosting providers, and analytics services that assist us in operating our business. These parties are contractually obligated to keep your information confidential and use it only for the purposes for which it was disclosed.
• Legal Compliance: When required by law, court order, or government authority.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We do not share your data with advertisers or unrelated third parties for their own marketing purposes.

Cookies & Tracking Technologies

Our Site may use cookies — small text files stored on your device — to enhance your experience.

Types of cookies we may use include:

• Essential Cookies: Required for the Site to function properly (e.g., shopping cart, login sessions).
• Analytics Cookies: Help us understand how visitors use the Site (e.g., Google Analytics). Data is aggregated and anonymized.
• Marketing Cookies: Used to display relevant advertising (only if you have given consent).

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Site. Where required by law, we will obtain your consent before placing non-essential cookies.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including:

• Order records and transaction data: Retained for a minimum of 7 years for tax and accounting purposes.
• Marketing communications data: Retained until you unsubscribe or withdraw consent.
• General inquiries: Retained for up to 2 years unless a longer period is required.

When personal data is no longer needed, we securely delete or anonymize it.

Your Rights

All Users

• The right to know what personal data we hold about you.
• The right to correct inaccurate or incomplete data.
• The right to opt out of marketing communications at any time.

GDPR (EEA Residents)

• Right of Access: Request a copy of your personal data.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data, subject to legal retention requirements.
• Right to Restriction: Request that we limit our processing of your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Lodge a Complaint: File a complaint with your local data protection authority.

CCPA (California Residents)

• Right to Know: Know what personal information is collected, used, shared, or sold.
• Right to Delete: Request deletion of personal information we have collected (subject to exceptions).
• Right to Opt-Out: We do not sell personal information; however, you may submit an opt-out request at any time.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, please contact us at PhotosbyTracyEllington@gmail.com . We will respond within 30 days (or within the timeframe required by applicable law).

Children’s Privacy

Our Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately so we can delete it.

Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, misuse, or disclosure.

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of any account credentials.

International Data Transfers

Our Site is operated from the United States. If you are visiting from outside the U.S., including from the EEA or Canada, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

By using our Site, you consent to such transfer where permitted by law. Where required, we apply appropriate safeguards (such as Standard Contractual Clauses) to protect your data.

Third-Party Links

Our Site may link to third-party websites such as social media platforms. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

Continued use of the Site after changes are posted constitutes acceptance of the revised policy.

For significant changes, we may notify you by email or prominent notice on the Site.

Contact & Data Controller Information

Photography by Tracy Ellington is the data controller for personal information collected through this Site.

For privacy-related questions or to exercise your rights, contact:

Photography by Tracy Ellington
Website: photographybytracyellington.com
Email: PhotosbyTracyEllington@gmail.com