Privacy Policy

The short version

This website does not use advertising trackers, analytics cookies, remote fonts, or third-party runtime scripts. It does not sell personal information. When you submit an inquiry, the form securely sends the details to a Cloudflare Pages Function and stores the lead in a Cloudflare D1 database so the business can respond.

Information you submit

The inquiry forms ask for a name, email address, phone number, session type, consent, and a description of the requested photography. The full contact form also asks for an Arkansas city or preferred area. Preferred timing and information about who will be photographed are optional. The source page and limited browser information may also be recorded for security and troubleshooting.

Submitted information is used to answer questions, send an inquiry receipt, assess availability, prepare a quote, plan a session, provide photography services, maintain necessary business records, and resolve service or legal issues. If secure submission is unavailable and you choose the direct-email or Instagram fallback, that provider processes the message under its own practices.

Avoid including sensitive personal, financial, medical, account, or government-identification information in an initial inquiry.

Cloudflare hosting, storage, and delivery data

This website is hosted and delivered through Cloudflare. Cloudflare Pages Functions processes inquiry submissions, Cloudflare Turnstile checks submissions for automated abuse, Cloudflare D1 stores submitted lead records, and Cloudflare Email Service sends the inquiry to the business and delivers a transactional receipt to the email address supplied by the visitor. The receipt repeats selected inquiry details so the visitor can verify what was submitted. Turnstile may process browser, device, network, and interaction signals needed to provide the security check. Cloudflare may also process technical information such as IP address, traffic-routing data, system or browser configuration, requested URLs, request times, and security signals to deliver, protect, and maintain the site. Rate limiting uses a salted cryptographic hash rather than storing the visitor’s raw IP address in the inquiry database. Cloudflare handles information under its own service terms and privacy practices. Read the Cloudflare Privacy Policy ↗.

How information is used

Information received by the business is used only for legitimate photography and business purposes, including responding to inquiries, communicating with clients, providing requested services, scheduling and planning, preparing agreements and invoices, delivering galleries, protecting the website and business, maintaining records, and complying with applicable obligations. Personal information is not used for automated decision-making or interest-based advertising.

Sharing and sale of information

Vasu’s Portraits and Candids does not sell or rent personal information. Information may be handled by providers a visitor chooses to use, such as an email provider or Instagram, and by service providers reasonably needed to operate the business, such as hosting, contract, payment, accounting, or gallery services when those services apply. Information may also be disclosed when reasonably necessary to comply with law, enforce an agreement, protect rights or safety, or respond to a valid legal request.

Service providers control their own systems and may process information in other locations. Only information reasonably necessary for the relevant service should be shared.

Retention and secure disposal

Inquiry messages, client correspondence, agreements, invoices, releases, delivery records, and related business information are retained only as long as reasonably necessary for the purpose collected and for contractual, accounting, tax, dispute-resolution, backup, security, or legal requirements. Records that no longer need to be retained are deleted, erased, or otherwise disposed of using measures appropriate to the nature of the information.

Security

Reasonable administrative, technical, and physical safeguards are used for information under the business’s control. The public site uses encrypted HTTPS delivery, strict security headers, server-side validation, prepared database statements, submission throttling, and minimized data collection. No internet transmission, email account, device, or storage system can be guaranteed completely secure, so visitors should not send sensitive information through an initial inquiry.

Photography and children

The website is intended for adults arranging or evaluating photography services; it is not directed to children under 13. The business does not knowingly request personal information directly from a child under 13 through this website. A parent or legal guardian should submit and manage inquiries involving a minor.

The portfolio includes published photographs of people, including children. The website does not identify private individuals, infer relationships, or attach private session details. Publication, model-release, client-agreement, and gallery-access decisions are handled separately from a public website inquiry.

If a parent or guardian believes a child has submitted personal information directly, contact the business so the information can be reviewed and, where appropriate, deleted.

External services and links

Email providers and Instagram process messages under their own terms and privacy policies. The website may also link to maps, Google reviews, and neutral reference sources. Visiting or communicating through an external service is governed by that service’s practices. See the Google Privacy Policy ↗ and Instagram Privacy Policy ↗.

Your choices and privacy requests

You can browse without preparing or sending an inquiry and clear local or session data through your browser. You may ask the business to provide, correct, or delete personal information it controls. A request may be limited when information must be retained for an agreement, transaction, tax or accounting record, legal obligation, security purpose, dispute, or another lawful reason.

To make a request, email portraitsbyvasu@gmail.com. Describe the information or communication involved. Reasonable verification may be requested before acting on a request so that information is not disclosed or deleted for the wrong person.

Contact

Privacy questions can be directed to Vasu’s Portraits and Candids at portraitsbyvasu@gmail.com or by telephone at (501) 912-7415.

Policy changes

Material changes will be reflected by the updated date on this page. Analytics, payment tools, booking software, gallery providers, or other new data-handling services must be added to this policy before those services go live.