Natasha Staszak Photography, LLC

Effective date: September 2, 2026

Natasha Staszak Photography, LLC (“Natasha Staszak Photography,” “we,” “our,” or “us”) respects the personal nature of the information entrusted to us. This Privacy Policy explains how we collect, use, retain, and disclose personal information when you visit our website, use one of our landing pages, submit a form, schedule a consultation, enter a client area, purchase photography services or products, or otherwise communicate with us.

This Policy applies to natashastaszak.com, related landing pages, and the online services we use in connection with our photography business. Together, we refer to them as the “Sites.”

Our Sites and services are intended for adults in the United States. By using the Sites, you acknowledge the practices described in this Policy.

1. Information We Collect

The information we collect depends on how you interact with us.

Information you provide

You may provide personal information when you:

• Submit an inquiry or request a resource

• Schedule or attend a consultation

• Book a photography session or related service

• Sign a contract or complete a client questionnaire

• Use a password-protected client preparation area

• Purchase products, make a payment, or arrange a limited payment plan

• Communicate with us by email, telephone, text message, or social media

• Provide photographs, reviews, or testimonial material under a separate written release

This information may include:

• Your name and contact details, including your email address, telephone number, and mailing or delivery address

• Information you choose to share about your inquiry, session, preferences, or order

• Appointment details and communications related to a consultation or photography service

• Contract information, electronic signatures, and related records

• Account information used to access a client preparation area

• Billing, invoice, transaction, and order information

• Photographs and other content created or provided as part of our services

• Your email or text communication preferences

Please do not send information through a general inquiry form that is not reasonably needed for us to respond to your request.

Information collected automatically

When you visit the Sites, we and our approved service providers may automatically collect limited technical and usage information, including:

• Internet Protocol address

• Browser, device, and operating system information

• Approximate geographic area derived from technical information

• Pages viewed, links selected, and time spent on the Sites

• Mouse movements, clicks, taps, scrolling, navigation patterns, and other interactions with selected landing pages

• Date and time of a visit

• Referring page, campaign information, and landing page source

• Form completion and other conversion events

This information is collected through cookies and similar technologies. It helps us understand how the Sites are used, maintain their operation, and measure the results of our advertising.

Information from service providers

We may receive limited information from companies that help us provide our services. Examples include appointment status from a scheduling provider, payment confirmation from a payment processor, delivery information from a product provider, or website analytics reports. We do not receive full payment card or bank account details from our payment processor in the ordinary course of business.

2. How We Use Personal Information

We use personal information for the purposes described below:

• To respond to inquiries and provide requested resources

• To schedule consultations and create video-conferencing links

• To prepare for and provide photography services

• To manage contracts, client access, product orders, and delivery

• To create invoices, process payments, and maintain financial records

• To provide customer service and respond to reorder requests

• To send a short email follow-up series, occasional updates, and related offers when the recipient has agreed to receive them

• To send manual text messages when the person has separately agreed to text communication

• To operate, maintain, and improve the Sites

• To understand site use, identify usability or friction points, improve our landing pages, and measure inquiry or resource-request conversions

• To protect our business, clients, Sites, and service providers from misuse or security threats

• To comply with contracts, tax rules, legal duties, and valid government requests

• To establish or defend legal claims and resolve disputes

Video consultations are not recorded by us.

3. Email and Text Communications

When you submit an inquiry or request a resource through a form that includes email consent, we may send the information you requested, a related follow-up series, occasional updates, and relevant offers. You may unsubscribe from marketing emails at any time through the link in the email or by contacting us.

An unsubscribe request stops future marketing emails. We may still send messages needed to complete a transaction, administer a booking, provide a purchased service, or respond to a direct request.

Text-message permission is separate from email permission. We send text messages manually and do not use automated marketing text messages. We may contact you by text when you provide an optional telephone number and indicate that you prefer a text reply, when you select a text-message consent checkbox, when you contact us by text, or in connection with a consultation, booking, or service you requested. You can ask us to stop texting at any time by replying STOP or telling us directly. Message and data rates may apply.

4. Cookies, Analytics, and Advertising Measurement

The Sites use cookies and similar technologies that allow pages and forms to function and help us understand site activity. Some technologies are provided by companies that operate our website, landing pages, analytics, advertising measurement, or embedded media.

We use Google Analytics 4 to receive reports about site use. Google Analytics may collect first-party cookie information, device and browser details, site activity, and related technical information. We use these reports to understand visits and improve the Sites.

Our Google Analytics account is linked to Google Ads. Inquiry and resource-request events may be reported to Google Ads as conversions so we can measure whether an advertisement resulted in a completed form. We do not currently use a separate advertising remarketing tag to target visitors with personalized advertisements based on their activity on the Sites.

Hotjar behavioral analytics

For a limited diagnostic period, we use Hotjar on selected Buffalo and Rochester landing pages to help us understand how visitors interact with those pages and identify usability or conversion issues. Hotjar may create heatmaps and session recordings showing interactions such as mouse movements, clicks, taps, scrolling, navigation, and time spent on a page.

Hotjar uses first-party cookies and similar technologies and may process limited technical and behavioral information on our behalf, including a pseudonymous visitor identifier, device and browser information, screen size, country-level location, and interactions with the landing pages. Form entries, keystrokes, and designated content that could reveal personal information are suppressed or masked before being transmitted to Hotjar. We do not use Hotjar to intentionally collect names, email addresses, telephone numbers, or the contents of submitted forms.

We use this information only to evaluate and improve the selected landing pages. Hotjar processes the information as our service provider and may use it to maintain, develop, and improve its services as described in Hotjar’s Privacy Policy. Data collected through Hotjar is retained only as long as reasonably needed for this analysis and is then deleted or allowed to expire under the applicable Hotjar retention settings.

The Sites may also contain videos or other content hosted by third-party providers, including YouTube or another embedded video service. When you load or interact with that content, the provider may receive technical information and place cookies according to its own privacy practices.

You can adjust your browser to block or delete cookies. Blocking some cookies may affect the way a page, form, video, or client area works. You can also use the Google Analytics Opt-out Browser Add-on to limit Google Analytics activity in supported browsers. Information about Google’s practices is available in Google’s Privacy Policy.

Do Not Track and other browser signals

Some browsers offer a “Do Not Track” setting. There is no single accepted standard that tells every website how to respond to that signal. Our Sites do not generally change their operation in response to Do Not Track; however, while Hotjar is enabled, Hotjar states that it recognizes supported browser Do Not Track signals and will not collect information about that visit when such a signal is detected.

Some browsers also offer other privacy preference signals. We do not sell personal information. Our current use of analytics and advertising measurement is described above. The Sites do not currently have a separate mechanism that changes their operation in response to these other signals. If applicable law requires us to recognize a legally valid preference signal, we will do so and update this Policy as needed.

Other third-party providers may process browser signals according to their own policies.

5. How We Disclose Personal Information

We disclose personal information only as reasonably needed for the purposes described in this Policy.

Service providers

We use service providers that assist with:

• Website and landing-page operation

• Form processing, email delivery, and contact management

• Analytics and advertising measurement

• Appointment scheduling and video conferencing

• Client preparation areas, contracts, galleries, and occasional digital delivery

• Invoicing, payment processing, bookkeeping, and transaction records

• Data hosting, cloud storage, backup, and security

• Professional printing, product manufacturing, shipping, and delivery

These providers receive only the information reasonably needed for their work. For example, a professional print laboratory may receive selected image files and the order or delivery details needed to produce and deliver purchased artwork.

Authorized contractors

Authorized contractors or consultants may have limited access to personal information when they assist with website management, marketing, analytics, administration, or client service. They are expected to protect the information and use it only for the work they perform for us.

Legal and business reasons

We may disclose information when reasonably necessary to comply with law, respond to valid legal process, protect rights or safety, investigate misuse, collect amounts owed, or address a business transaction such as a reorganization or sale. Any recipient in a business transaction would remain subject to applicable privacy duties.

We do not sell or rent personal information. We do not provide client contact lists to unrelated businesses for their own marketing.

6. Payments

Payments are processed by third-party payment providers. Depending on the transaction, you may pay through an emailed invoice, an authorized limited payment plan, an online payment link, or an in-person payment processed through a card reader, mobile device, or similar payment technology.

The payment provider collects and processes payment card or bank information under its own privacy and security practices. We retain ordinary client, invoice, order, and transaction records needed for accounting, customer service, and legal purposes. We do not ordinarily receive or store the full card number or full bank account details used to complete a payment.

7. Client Photographs, Reviews, and Model Releases

Boudoir and maternity photographs are handled as private client information. We publish recognizable client photographs, reviews, or testimonial material only when the client has given permission through a separate model release or other written authorization.

Accepting this Privacy Policy or our website Terms of Use does not give us permission to publish your photographs or testimonial material.

Selected image files may be provided to professional laboratories or product manufacturers when needed to create purchased artwork. Client photographs may also be stored using providers that assist with secure backup, galleries, or digital delivery.

8. Data Retention

We retain personal information for as long as reasonably needed to provide services, respond to inquiries, support reorder requests, keep required business records, honor written permissions, resolve disputes, and meet contractual or legal duties.

The length of time varies by the type of information. Contract and transaction records may be kept for tax, accounting, or legal purposes. Marketing contact information may be retained so that we can document consent and honor an unsubscribe request.

Client image retention is also governed by the photography contract. Files may be deleted after the periods stated in that contract. We do not guarantee indefinite archival storage, and clients are responsible for safeguarding delivered digital files. Images authorized for portfolio or promotional use may be retained while that permission remains valid or as otherwise allowed by the release.

When information is deleted from active systems, limited copies may remain for a period in routine backups, transaction records, or records that we must retain. We do not promise indefinite retention. Information may be deleted or anonymized when it is no longer reasonably needed, subject to these limits.

9. Security

We use reasonable safeguards suited to the nature of the information and the size of our business. These measures include limiting access to people who need the information for authorized work and using established providers for services such as payment processing, hosting, and storage.

No method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security. Please use care when sending private information by email, text message, or a general website form.

10. Your Choices and Requests

You may contact us to:

• Ask what personal information we hold about you

• Request correction of inaccurate information

• Request deletion of information

• Withdraw a permission that you previously gave, where withdrawal is available

• Ask a question about how your information is used or disclosed

We may need to verify your identity before completing a request. We may also retain information when required by law, needed to complete a transaction, necessary to protect legal rights, or permitted under an applicable exception. A request to delete information from our active records may not immediately remove limited information from routine backups.

You can unsubscribe from marketing emails through the link in any marketing email. You can also contact us using the email address below.

If a privacy law that applies to you provides additional rights, we will respond as required by that law.

11. Client Areas and Passwords

Clients invited to a preparation area receive a link to create their own password. Access is provided for a limited period. You are responsible for keeping your password private and for notifying us if you believe someone else has accessed your account.

The provider that operates the client area may process account and technical information under its own privacy practices.

12. Adults Only

Our inquiry, booking, boudoir, and maternity services are intended only for people who are at least 18 years old. The Sites are not directed to children, and we do not knowingly collect personal information online from anyone under 18.

If you believe a person under 18 has provided personal information to us, please contact us. We will review the information and take appropriate steps to delete it.

13. Third-Party Sites and Social Media

The Sites may link to social media pages or other websites that we do not operate. Their privacy practices are governed by their own policies. A link from our Sites does not mean that we control or accept responsibility for another site’s privacy practices.

Information you post publicly on social media, a public review service, or another public site may be visible to others. Please review the privacy settings and policies of those services before posting.

14. Visitors Outside the United States

Our Sites and services are directed to adults in the United States, with photography services offered locally in the Buffalo and Rochester, New York areas. If you access the Sites from another country, your information may be processed in the United States, where privacy laws may differ from those in your location.

15. Changes to This Policy

We may update this Policy when our practices, services, or legal duties change. The revised version will be posted on this page with a new effective date. If a change materially affects how we use information already collected, we will provide any additional notice required by law.

16. Contact Us

For privacy questions or requests, contact:

Natasha Staszak Photography, LLC

New York, United States

natasha@natashastaszak.com