EJM Photography – Privacy Policy for Pixieset Galleries
Last updated: April 12, 2025
EJM Photography ("EJM Photography," "we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what data we collect when you use our photography services and Pixieset galleries, why we collect it, how we use it, and the choices you have regarding your information.
1. Scope of This Policy
This Policy applies to information we collect through:
Photography Services – booking, contracting, and providing photographic services.
Pixieset Galleries – online galleries where clients view, download, and order images.
Print Storefront – orders placed through Pixieset’s integrated print‑fulfillment platform.
Payments – transactions processed via Pixieset/Stripe.
Communication – email, contact forms, or other direct interactions with us.
It does not apply to any third‑party websites or services that we do not own or control, even if linked from our gallery.
2. Information We Collect
CategoryExamplesSourceIdentity & ContactName, email address, postal addressYou (booking forms, contracts, gallery login)Session DetailsSession date, location, package typeYouGallery ActivityImage views, downloads, favorites, print ordersAutomatically via PixiesetPayment DataLast 4 digits of card, transaction ID, amountStripe (we never see full card details)Technical DataIP address, device/browser type, cookiesAutomatically via Pixieset
We do not intentionally collect sensitive data (e.g., health, biometric, or children’s data beyond images captured with parental consent).
3. How We Use Your Information
We use personal information to:
Provide Services – deliver, manage, and secure your Pixieset gallery and print orders.
Communicate – send gallery links, order confirmations, and respond to inquiries.
Fulfill Contracts – perform obligations under your Photography Services Agreement.
Process Payments – via Pixieset/Stripe.
Improve Services – monitor usage trends and troubleshoot technical issues.
Marketing (Optional) – with your explicit opt‑in, send newsletters or promotions.
4. Legal Bases for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your data under the following legal bases:
Contractual necessity – to provide the services you request.
Legitimate interests – to improve our services and secure our platform.
Consent – for optional marketing communications.
Legal obligation – to comply with applicable laws.
5. Sharing & Disclosure
We share data only when necessary:
Pixieset – hosts galleries and storefront; acts as our data processor.
Stripe – processes payments.
Professional Print Labs – fulfill product orders.
Service Providers – IT or legal advisors bound by confidentiality.
Legal Requirements – if compelled by law or to protect our rights.
We do not sell or rent your personal information.
6. Cookies & Similar Technologies
Pixieset uses cookies to enable gallery functionality, shopping carts, and analytics. You may disable cookies in your browser, but some features may not work properly.
7. Data Retention
Galleries – active for 90 days (or as specified in your contract), then archived for up to 1 year before deletion.
Contracts & Invoices – retained for at least 7 years to satisfy accounting obligations.
Marketing Lists – retained until you unsubscribe or we discontinue the list.
8. Data Security
We employ administrative, technical, and physical safeguards, including SSL encryption, access controls, and regular backups. While we strive to protect your data, no system is 100% secure.
9. Your Rights
Depending on your jurisdiction, you may have rights to:
Access or obtain a copy of your data.
Correct inaccurate information.
Delete your data (subject to legal/contractual obligations).
Object to or restrict processing.
Withdraw consent at any time.
To exercise these rights, email us at info@erikmaasch.com.
10. Children’s Privacy
Our services are not directed to children under 13. Any images of minors are captured with parental consent. If we learn we have collected personal data from a child without consent, we will delete it.
11. International Transfers
Your information may be transferred to—and maintained on—servers located outside your jurisdiction, including the United States and Canada (where Pixieset is headquartered). We rely on Standard Contractual Clauses or equivalent safeguards for such transfers.
12. Third‑Party Services
This site may include links to third‑party sites (e.g., print labs). We are not responsible for their privacy practices. Review their policies before providing data.
13. Updates to This Policy
We may revise this Policy from time to time. The "Last updated" date will change accordingly. Material changes will be communicated via email or gallery notice.
14. Contact Us
EJM Photography
Winnabow, NC 28479
Email: info@erikmaasch.com
If you have questions about this Policy or our data practices, please reach out. We are happy to help.