Privacy Policy

Contact details you submit through our inquiry form (name, email, city, project details); account details if you create a client account (email address and a password we never see in readable form); profile details you choose to add (name, company, phone); booking records such as service type, date, location, deposit amount, and payment status; and messages you send us through your client area.

Our servers also record standard technical information such as IP address and browser type in short-lived security logs.

• To answer inquiries and prepare quotes — steps taken at your request before a contract.
• To schedule, deliver, and support your booking — performance of our contract with you.
• To take deposits and issue receipts — performance of our contract and our legal accounting duties.
• To keep accounts and payments secure — our legitimate interest in preventing fraud and misuse.
• Optional analytics — only with your consent, which you can withdraw at any time.

We do not sell your information or share it for advertising.

We use strictly necessary storage to keep you signed in, hold your booking details between steps, and remember your cookie choice. Nothing optional runs unless you select "Allow all" in the consent banner. To change your mind, clear this site's storage in your browser and the banner will appear again.

• Stripe — deposit payments, receipts, and refunds.
• Supabase — database, authentication, and file storage for this site.
• Our email delivery provider — confirmations, receipts, and notifications.
• Twilio — text alerts to the studio about new payments.

Each is bound by its own data-processing terms. If you are in the EEA or UK, transfers to US-based providers rely on their standard contractual clauses.

Deposits are processed by Stripe. Card numbers are entered directly into Stripe's secure checkout and are never stored on our servers. We retain only the receipt reference, amount, and status needed to service your booking.

Inquiries that do not become projects: up to 24 months. Client accounts and project records: for the life of the relationship and then up to 7 years where invoices, deposits, or refunds are involved, because tax records require it. Security logs: a short rolling window. Delivered creative files are archived per your project agreement.

Traffic is encrypted in transit, data is stored in an access-controlled managed database with row-level rules so clients can only reach their own records, staff access is limited to named administrator accounts, and administrative actions taken through our internal tools are logged. See our security practices.

Depending on where you live, you may ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or receive it in a portable format. You can also withdraw consent for anything based on consent, and complain to your local data protection authority. Signed-in clients can download their own data instantly from the client area. We answer every request within 30 days and never charge for it.

Our services are sold to adults. When we photograph minors — senior portraits, family and event work — we work through a parent or guardian, who provides the booking details and any usage permission.

Phosphor Digital, privacy contact: contact@phosphordigital.com. Serving Pierce and King County, with design work delivered anywhere in the world.