Privacy Policy

Barry S. Allen Photography ("we", "us", "our") respects your privacy and is committed to protecting the personal information of visitors and users ("you", "your") who access BSAphoto.com (the “Site”). This Privacy Policy outlines how we collect, use, store, share, and protect your information, and what rights you have regarding your personal data in compliance with applicable laws, including but not limited to:

  • The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)

  • The General Data Protection Regulation (GDPR) (for EU residents)

  • Applicable U.S. state privacy laws and data protection regulations

By accessing or using this Site, you agree to the terms set forth in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the Site.

1. Information We Collect

We collect both personally identifiable information (PII) and non-personal data through voluntary submission and automated technologies. This includes:

  • Personal Identifiers: Full name, email address, phone number

  • Internet/Device Data: IP address, geolocation, browser type, device type, time zone

  • User Behavior Data: Pages viewed, session duration, clicks, and referral URLs

2. Methods of Collection

We collect data through:

  • Contact and booking forms

  • Newsletter and email marketing sign-ups

  • Membership or account registration (where applicable)

  • Cookies and tracking technologies

  • Email correspondence

  • Analytics and behavioral tools (e.g., Google Analytics)

By submitting any form or using this Site, you consent to the collection and use of your information as described in this policy.

3. Purpose and Legal Basis for Processing

We process your personal data under one or more of the following legal bases:

  • Consent – You have voluntarily provided information for a specific purpose (e.g., newsletters, inquiries)

  • Legitimate Interests – To improve services, monitor usage, and market our offerings

  • Contractual Necessity – To fulfill obligations related to bookings, memberships, or service delivery

  • Compliance with Legal Obligations – As required by applicable law

The data is used for the following purposes:

  • Responding to inquiries and client communication

  • Sending marketing materials or newsletters (if opted in)

  • Facilitating bookings and client management

  • Website performance tracking and service improvement

  • Ad targeting and remarketing

4. Sharing and Disclosure of Information

We do not sell your personal data for monetary compensation. However, we do share data with trusted third-party service providers and partners for the following purposes:

  • Website analytics and behavioral tracking (e.g., Google Analytics)

  • Email marketing distribution (e.g., Squarespace Email Campaigns)

  • Data hosting and security services

These third parties are bound by contractual obligations to protect your data and may only use it as directed by us.

We may also disclose personal data if required by law, subpoena, court order, or governmental request.

5. Cookies and Tracking Technologies

The Site uses cookies and similar technologies to collect user data for performance, analytics, and marketing purposes. Cookies may track session activity, behavioral patterns, and geolocation data.

Upon visiting the Site, you are presented with a cookie consent banner allowing you to accept or manage your preferences in accordance with applicable regulations, including GDPR and CCPA.

6. User Rights

You may exercise the following rights at any time:

  • Right to Access: Request a copy of your personal data held by us

  • Right to Rectification: Request corrections to inaccurate or outdated information

  • Right to Deletion: Request erasure of personal data, subject to legal exceptions

  • Right to Data Portability: Request a copy of your data in a portable format

  • Right to Object/Restrict Processing: Object to the processing of your data for marketing or analytics

  • Right to Withdraw Consent: At any time, without affecting the lawfulness of processing before withdrawal

Please Note: We are unable to retrieve or delete anonymized, hashed, or aggregated data that is not linked to your identity.

To submit a data request, please use the Contact Form on our website and include “Privacy/Data Request” in the subject.

7. CCPA & CPRA Compliance (California Residents)

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have the following additional rights:

  • To know what categories of personal data are collected and the purpose

  • To opt out of the “sale” or “sharing” of personal data for behavioral advertising

  • To request access, deletion, or correction of personal data

  • To designate an authorized agent to act on your behalf

  • To be free from discrimination for exercising these rights

Do Not Sell or Share My Personal Information

Barry S. Allen Photography does not directly sell your data for profit. However, certain data (e.g., browser behavior, IP address) may be shared with third-party analytics and ad partners that may qualify as a “sale” under the CCPA/CPRA.

You may opt out of this data sharing at any time by:

  • Using the cookie management tool upon visiting the Site

  • Adjusting your browser settings to block tracking technologies

  • Submitting a request through our Contact Form

8. International Users & GDPR Compliance

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) applies to your data. By accessing this Site, you consent to the transfer of your data to servers located in the United States, where privacy laws may differ.

We will take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy and GDPR standards.

9. Children's Privacy

This Site and its services are intended for users 18 years and older. We do not knowingly collect or store data from minors. If we become aware that data from a child under 18 has been collected, we will delete it immediately.

10. Data Retention and Security

We retain personal information only as long as necessary for the purposes outlined in this Policy, unless otherwise required by law.

We implement commercially reasonable physical, administrative, and technical safeguards to protect your data. However, no transmission over the internet or storage system is guaranteed to be 100% secure.

You agree to use this Site at your own risk.

11. Policy Updates

We reserve the right to update this Privacy Policy at any time. Updates will be posted on this page with an updated effective date. If the changes are material, we may notify users via email or a prominent notice on the Site.

We encourage you to review this Privacy Policy regularly.

12. Contact Us

For questions regarding this Privacy Policy, or to make a data-related request, please contact us through our Contact Form on the Site.