Privacy Policy

Last Updated: 3 June 2026

Craig Paul Productions Privacy Policy

Craig Paul Productions (“Company,” “we,” “our,” or “us”) operates a photography-based subscription service (the “Service”). This Privacy Policy
explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your personal data and complying with applicable privacy laws, including the General Data Protection Regulation (GDPR), Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), and applicable Japanese data protection laws.

By using our Service, you agree to the terms of this Privacy Policy.
⸻

1. Information We Collect
   a. Personal Information
   We may collect:
   • Full name
   • Email address
   • Billing and mailing address
   • Account login credentials
   • Any information you provide when booking or subscribing to
   photography services
   b. Payment Information
   We use Stripe, a third-party payment processor, to handle all payment
   transactions. We do not store your full credit card information. Stripe collects
   and processes payment data in accordance with its own privacy policy.
   c. Photography Content
   As a photography business, we may collect, store, and process:
   • Photographs and images of clients
   • Event-related content
   • Metadata associated with images
   This content may be considered personal data under certain laws.
   d. Usage Data
   We automatically collect:
   • IP address
   • Browser type and version
   • Device type
   • Pages visited and time spent
   • Referring URLs
   e. Cookies and Tracking Technologies
   We use cookies and similar technologies to:
   • Maintain your session
   • Analyze traffic
   • Improve user experience
   You may control cookies through your browser settings.
   ⸻
2. Legal Basis for Processing (GDPR)
   If you are located in the European Economic Area (EEA), we process your
   personal data under the following legal bases:
   • Performance of a contract (providing subscription services)
   • Consent (e.g., marketing communications, photography use where
   required)
   • Legitimate interests (improving services, fraud prevention)
   • Legal obligations
   ⸻
3. How We Use Your Information
   We use your information to:
   • Provide and manage your subscription
   • Deliver photography services and digital content
   • Process payments and invoices
   • Communicate with you regarding your account or bookings
   • Send marketing communications (only where permitted)
   • Improve our website and services
   • Ensure security and prevent fraud
   • Comply with legal obligations
   ⸻
4. Sharing Your Information
   We may share your data with:
   a. Service Providers
   • Stripe (payment processing)
   • Cloud storage providers (for image hosting and delivery)
   • Website hosting and analytics providers
   b. Legal Authorities
   If required to comply with applicable laws or legal processes.
   c. Business Transfers
   In the event of a merger, sale, or asset transfer.
   We do not sell your personal data.
   ⸻
5. International Data Transfers
   Your information may be transferred to and processed in the United States or
   other countries where we or our service providers operate.
   For users in the EU and UK, we ensure appropriate safeguards are in place,
   such as:
   • Standard Contractual Clauses (SCCs)
   • Transfers to organizations with adequate data protection certifications
   ⸻
6. Data Retention
   We retain personal data only as long as necessary to:
   • Fulfill the purposes outlined in this policy
   • Maintain business and legal records
   • Comply with legal obligations
   Photography content may be retained longer unless you request deletion,
   subject to contractual or legal limitations.
   ⸻
7. Your Rights
   For EU/EEA Users (GDPR):
   You have the right to:
   • Access your personal data
   • Correct inaccurate data
   • Request deletion (“Right to be Forgotten”)
   • Restrict or object to processing
   • Data portability
   • Withdraw consent at any time
   For Canadian Users (PIPEDA):
   You have the right to:
   • Access and correct your personal information
   • Withdraw consent, subject to legal or contractual restrictions
   For Japanese Users:
   You have rights under the Act on the Protection of Personal Information (APPI),
   including:
   • Access and correction
   • Suspension of use in certain cases
   To exercise your rights, contact us at: [Insert Email]
   ⸻
8. Data Security
   We implement reasonable technical and organizational measures to protect your
   personal data, including secure storage and limited access controls.
   However, no system is completely secure, and we cannot guarantee absolute
   security.
   ⸻
9. Marketing Communications
   We may send you promotional emails if you opt in or where legally permitted.
   You can unsubscribe at any time by clicking the “unsubscribe” link or contacting
   us directly.
   ⸻
10. Third-Party Links
    Our Service may contain links to third-party websites. We are not responsible for
    their privacy practices.
    ⸻
11. Children’s Privacy
    Our services are not directed to individuals under the age of 13 (or applicable
    minimum age in your jurisdiction). We do not knowingly collect personal data
    from children.
    ⸻
12. Changes to This Privacy Policy
    We may update this Privacy Policy from time to time. Updates will be reflected
    by the “Last Updated” date.
    ⸻
13. Contact Information
    Craig Paul Productions
    16820 N. E. 107th St., Richmond, WA 98052
    craigpaularsen@gmail.com
    If you are located in the EU, you also have the right to lodge a complaint with
    your local data protection authority.
    ⸻