Privacy Policy

• Contact & Account Info: name, email, phone, company, and messages when you inquire or subscribe (e.g., via our HubSpot form at /contact/).
• Order/Service Info: job details you submit (address, access notes, preferences) if you book services (covered further in our Service Terms).
• Device & Usage: IP address, browser/device type, pages viewed, and interactions collected via cookies and analytics (GA4, now or in the future).
• Cookies & Similar Tech: small files used for site functionality and analytics (no ad pixels are used at this time).
• Embeds: if you view embedded content (Google Maps, YouTube, Vimeo, HubSpot), those providers may collect information under their own policies.

Special categories: we do not knowingly collect sensitive personal information through the Site.

• Respond to inquiries, provide quotes, and schedule services.
• Send service updates, tips, and occasional promotions (rarely; you can opt out anytime).
• Operate, secure, troubleshoot, and improve the Site.
• Measure traffic and content performance (Google Analytics).
• Comply with legal, tax, and record-keeping obligations.

Where GDPR applies, we rely on: (a) contract necessity (responding/fulfilling requests), (b) legitimate interests (site security, analytics, improvement, portfolio communications), (c) consent (email marketing; non-essential cookies), and (d) legal obligation (tax/records).

• Service Providers:
  • CRM & emails: HubSpot (current/primary) and AgileCRM (legacy/rare use) for forms and email campaigns.
  • Analytics: Google Analytics (GA4).
  • Payments: PayPal (and possibly QuickBooks Payments in the future) if you pay online/off-site.
  • Hosting/CDN/security: our web host and security tools.
  • Embeds: Google Maps, YouTube, Vimeo, HubSpot.
• Legal/Compliance: if required by law, to protect rights/safety, or in connection with a business transfer.

Selling/Sharing: we do not sell personal information and do not share it for cross-context behavioral advertising. If we add ad pixels in the future, we will update this Policy and provide a “Do Not Sell/Share My Information” link.

If we display ads, they may be served by Google and other ad technology providers.

• Third-party cookies/identifiers: Google and its partners may use cookies or device identifiers to serve ads based on your visits to this and other sites.
• Personalized ads: where allowed, ads may be tailored to your interests. You can manage ad personalization in your Google Ad Settings, via recognized industry opt-out tools, and in your browser cookie settings.
• Consent: in regions where required (e.g., EEA/UK), we obtain consent for non-essential cookies and personalized ads.

Note: As of the date above, ad pixels are not in use on this Site. This section will apply if/when ads are enabled.

We use cookies and similar technologies to run the Site, remember preferences, and measure performance. Non-essential cookies (e.g., analytics) are used with consent where required.

• Simple notice: we display a short cookie notice. If you prefer granular controls, contact us and we can provide a preferences page.
• Manage: use your browser settings and (if added later) our Cookie Preferences page.
• Do Not Track: we do not currently respond to DNT signals.

• Inquiries & subscriptions: typically kept for 24 months from last interaction (for follow-ups and opt-out management).
• Client/order records: up to 7 years for tax and accounting.
• Analytics data: per provider defaults (e.g., GA4 up to 26 months, configurable).

We may retain information longer if required by law or to resolve disputes.

• Unsubscribe: every marketing email includes an opt-out link; or email support@nycrephoto.com.
• Access/Update/Delete: request a copy, correction, or deletion of your personal information at support@nycrephoto.com.
• State privacy laws: if you are a resident of CA/CO/CT/VA/UT and we engage in targeted advertising or “sharing,” you may have additional rights. We do not sell/share personal information at this time.

We use reasonable administrative, technical, and physical safeguards appropriate to the nature of the information. No method of transmission or storage is 100% secure.

The Site is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided personal information, contact us to request deletion.

We are based in the United States. If you access the Site from outside the U.S., your information may be transferred to, stored in, or processed in the U.S. or other countries which may have data-protection laws different from your jurisdiction.

We may update this Privacy Policy by posting a new version with an updated “Last updated” date. Your continued use of the Site means you accept the updated Policy.

NYC RE Photo
Kerdos Media & Marketing, LLC
support@nycrephoto.com

If you prefer, you may also contact us through the form at nycrephoto.com/contact/.