Privacy Policy

We collect only the information needed to answer inquiries, book sessions, deliver galleries and products, and run the business.

Hicks Photo LLC is a Wyoming limited liability company. It operates kellyhicksphoto.com and provides photography services from its operational and customer-service address in Savannah, Georgia. This Privacy Policy explains what personal information we collect, how we use it, when we share it, and the choices you have. It applies to website visitors, clients, prospective clients, and anyone who contacts us about our services.

Most information comes from you when you contact us or request a session.

We may collect the following categories of personal information:

• Contact information, including name, email address, phone number, mailing address, and communication preferences.
• Booking information, including requested session type, package interest, date preferences, location, group size, message details, event details, and accessibility needs.
• Client content, including photographs, proofs, gallery selections, album notes, print choices, product selections, and image permissions.
• Transaction information, including invoice status, order history, amounts paid, refunds, billing contact details, and limited payment details made available by payment providers.
• Website and device information, including IP address, browser type, device type, pages visited, referring pages, approximate location, and server logs.
• Support information, including questions, complaints, dispute details, rescheduling requests, and records needed to resolve client service issues.

We use personal information to provide services, communicate, process invoices, deliver products, prevent fraud, and meet legal duties.

We use personal information to respond to inquiries, prepare booking summaries, schedule sessions, photograph and edit sessions, deliver galleries and products, send invoices and service messages, process payments and refunds, maintain accounting and tax records, improve the website, protect security, prevent misuse, resolve disputes, enforce our terms, and comply with applicable law.

For privacy laws that require a legal basis, we rely on contract, consent, legitimate interests, and legal obligations.

Where a legal basis is required, we process information based on contractual necessity for requested services, consent for optional image publication or optional cookies, legitimate interests in running and protecting the business, and legal obligations for tax, accounting, payment, dispute, and compliance records.

We do not sell personal information. We share it only with service providers, legal authorities when required, and parties needed to complete your order.

We may share information with the named service providers below, with professional advisors, with authorities when required by law, and with a successor business if Hicks Photo LLC is involved in a merger, acquisition, reorganization, financing, or sale of assets.

• Cloudflare, Inc. — website hosting, DNS, and security.
• Termly, Inc. — cookie consent and preference management.
• Resend — transactional email for inquiries and booking notices.
• Migadu — inbound studio email.
• tawk.to — optional live chat after Performance consent.
• Google Fonts — font delivery.
• Stripe, Inc. — planned hosted checkout when online card payment is turned on. Card numbers are not collected on this website.
• Print, album, gallery, accounting, or shipping vendors only as needed to complete an order you requested.

Card details are handled by secure payment providers. We do not store full card numbers on our website servers.

Invoices, refunds, session fees, product payments, and related transactions may be handled through secure third-party payment providers. Hicks Photo LLC does not store full payment card numbers, card security codes, or bank login credentials on the website. Payment providers may process payment data under their own security and privacy terms and share limited transaction details with us so we can confirm payment, issue refunds, respond to disputes, and keep required records.

Necessary technologies stay on. Functional, Analytics, and Marketing technologies are controlled through Cookie Settings where required.

Our website may use cookies, pixels, local storage, server logs, and similar technologies to operate the site, remember preferences, protect against abuse, understand performance, and improve content.

• Necessary technologies support core site operation, security, form handling, consent storage, invoicing, and fraud prevention.
• Functional technologies support requested features such as support tools, preference storage, accessibility choices, and error diagnostics.
• Analytics technologies help measure traffic and site performance.
• Marketing technologies support ad measurement, retargeting, conversion reporting, and optional third-party review or testimonial widgets.
• If your browser sends a Global Privacy Control signal, Marketing technologies are disabled for that browser.
• You can open Cookie Settings or Do Not Sell or Share My Personal Information from the footer to change optional categories.

We keep records only as long as reasonably needed for services, business records, taxes, disputes, and client support.

We keep personal information for as long as reasonably necessary for the purpose collected, unless a longer period is required or allowed by law.

• Inquiry records are usually kept for up to 24 months after the last communication unless they become client records.
• Booking, invoice, payment, tax, and accounting records are usually kept for up to 7 years.
• Delivered galleries, edited files, and ordering records are kept for a commercially reasonable period for client service, archival, backup, and dispute purposes.
• Website logs are kept for a limited period needed for security, analytics, debugging, and fraud prevention.
• Consent records, including anonymous consent IDs, category choices, policy version, region signals, and privacy-choice events, are usually kept for up to 3 years unless a longer period is needed for legal compliance or dispute handling.
• Image publication permissions are kept until withdrawn or until the relevant images are no longer in active use.

We use reasonable safeguards, but no website or online service can be guaranteed completely secure.

We use reasonable technical, administrative, and organizational safeguards designed to protect personal information. These measures may include HTTPS, access controls, limited staff access, secure third-party service providers, account authentication, backups, logging, and review of unusual activity. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

Depending on where you live, you may be able to access, correct, delete, restrict, object to, or receive a copy of your information.

Depending on your location, you may have rights to request access to personal information, correction of inaccurate information, deletion of certain information, restriction or objection to processing, portability of information, withdrawal of consent, and appeal of certain privacy decisions. We provide at least two request methods: email hello@kellyhicksphoto.com, or write to Hicks Photo LLC, 639 W 38th St, Savannah, GA 31415, USA. Use the subject line “Privacy request — access,” “Privacy request — delete,” or “Privacy request — copy.” We verify identity before responding. We respond within 45 days of a verifiable request, or tell you if a lawful extension of up to 45 additional days applies. For erasure, we delete or de-identify personal information we are not required to keep for tax, accounting, security, or dispute records. For portability, we send a copy of the personal information we hold about you in a common electronic format such as CSV or PDF.

California residents may use Do Not Sell or Share My Personal Information or a Global Privacy Control signal to opt out of sale, sharing, or targeted advertising where those laws apply.

California residents may have rights to know, access, correct, delete, and receive information about categories of personal information collected, sources, purposes, recipients, and retention. Hicks Photo LLC does not sell personal information for money. If advertising or marketing tools are enabled and are considered sharing, sale, or targeted advertising under applicable law, use the footer control labeled Do Not Sell or Share My Personal Information, open Cookie Settings and turn Marketing off, or use a browser that sends a Global Privacy Control signal. We respond to verifiable California requests within 45 days. We do not knowingly use or disclose sensitive personal information for purposes that require a right to limit use under California law.

Our services are booked by adults. We do not knowingly collect website information directly from children under 13.

Our website and booking process are intended for adults. The booking form requires the sender to confirm they are 18 or older, or a parent or guardian booking a session that may include a minor. Family, newborn, senior, and child portrait sessions must be requested and managed by that adult. We do not knowingly collect personal information directly from children under 13 through the website. If we learn we collected website information from a child under 13, we will delete it.

Information may be processed in the United States and other places where our service providers operate.

Hicks Photo LLC is a Wyoming limited liability company with an operational and customer-service address in Savannah, Georgia, United States. If you access the website from outside the United States, including the EEA, UK, or Switzerland, your information is processed in the United States. Where a transfer safeguard is required, we rely on the European Commission’s adequacy decisions when they apply to a destination, and otherwise on the European Commission Standard Contractual Clauses (and the UK International Data Transfer Addendum where required) with our processors. You may request more detail about those clauses by emailing hello@kellyhicksphoto.com.

We may update this policy and will change the date when we do.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new last updated date. If a change is material, we may provide additional notice when reasonable.