Privacy

Privacy policy.

JODANI Photography respects your privacy. This page describes what we collect, how we use it, and the rights you have regarding it. We're a single-photographer studio in Kirkland, Washington — we don't sell data, we don't run ad networks of our own, and we keep this short on purpose.

Last updated: May 9, 2026

01. Who we are

JODANI Photography is owned and operated by Jordan Nilsen in Kirkland, Washington, USA. The website jodaniphoto.com and any related services are operated by us. Questions about this policy should go to jordan@jodaniphoto.com.

02. Information we collect

Information you give us directly

• Contact and booking details — name, email address, phone number, company or organization, and the content of any messages you send through our contact form, intro-call form, or by email.
• Session information — the type of session you're booking (executive headshot, team day, personal branding), preferred dates, location, wardrobe notes, and any creative direction you share before, during, or after a session.
• Payment information — invoices and payments are processed through a third-party processor (currently Stripe). We do not store full credit card numbers. We keep records of transactions and amounts for tax and accounting purposes.
• Lead-magnet sign-ups — when you download a guide or other resource through a LinkedIn Lead Gen Form or a form on our website, we receive the profile fields you authorize (typically first name, last name, email, job title, company, country) plus your answers to any custom questions on the form.

Information we collect automatically

• Website analytics — we use website analytics tools (currently Vercel Analytics and, where enabled, Google Analytics) to understand traffic patterns, page performance, and which content is useful. These tools collect aggregated, mostly non-identifying information like browser type, device type, referrer, and pages viewed.
• Advertising pixels — we use the LinkedIn Insight Tag to measure the effectiveness of our LinkedIn ad campaigns and to build retargeting audiences. See Section 6.
• Server logs — standard web-server logs (IP address, timestamp, requested URL) for security and abuse detection.

Photographs

When you book a session, the resulting photographs are personal data. They depict you, and we treat them with care:

• We store your gallery on a secure cloud platform for the active delivery period and a reasonable archival window thereafter.
• We do not publish your images on the JODANI portfolio, social media, or marketing materials without your explicit written permission. Your booking confirmation includes a portfolio-use opt-in; you can decline at the time of booking or revoke permission later.
• Images are stored on our local backup drives and a cloud backup service for as long as we operate the business, unless you ask us to delete them earlier (see Section 8).

03. How we use your information

We use the information we collect to:

• Respond to your inquiries and confirm bookings.
• Schedule, coordinate, and deliver photography sessions.
• Process payments and maintain financial records as required by tax law.
• Send transactional emails about your session — gallery delivery, retouching status, file delivery, and similar.
• Send occasional marketing emails about new offerings or seasonal promotions, only if you've opted in. Every marketing email includes an unsubscribe link; you can also reply directly to opt out.
• Improve our website, services, and marketing through analytics and direct feedback.
• Protect against fraud, abuse, and unauthorized access.
• Comply with applicable laws.

04. Legal basis for processing (EU/UK residents)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Performance of a contract — responding to inquiries, delivering sessions, processing payments.
• Legitimate interests — improving the website, marketing to existing clients in compatible ways, fraud prevention.
• Consent — marketing emails, portfolio use of your images, certain cookies.
• Legal obligation — tax records, compliance with court orders.

05. Sharing with third parties

We do not sell your personal information. We share it only with:

• Service providers that help us operate the business — including Calendly (scheduling), Stripe (payments), Resend or a similar transactional email provider, our gallery host, our cloud backup provider, our website host (Vercel), our content management system (Sanity), Google (analytics), and LinkedIn (advertising). These providers are contractually limited to using your data only for the services they provide to us.
• Legal authorities, when required by law, court order, or to protect against legal claims, fraud, or safety threats.
• A successor entity, if we ever sell or transfer the business — subject to the same protections this policy describes.

We do not share or sell your information to advertisers, data brokers, or third-party marketers.

06. Cookies and tracking

We use cookies and similar technologies to operate the site and understand how it's used. The categories we use:

• Essential — required for the site to function (e.g., remembering you've completed a form).
• Analytics — aggregate data on how visitors use the site (Vercel Analytics, Google Analytics).
• Advertising — the LinkedIn Insight Tag, used to measure the performance of LinkedIn ad campaigns and to show retargeting ads to people who have visited the site.

You can disable cookies in your browser settings. You can opt out of LinkedIn ad personalization through your LinkedIn account settings. You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-on at tools.google.com/dlpage/gaoptout.

07. Data retention

We keep your information only as long as we need it for the purposes described above:

• Booking and contact records — retained for the duration of our active relationship and for up to seven years afterward to satisfy tax and legal requirements.
• Photographs from your session — retained indefinitely on our backup systems unless you request deletion. Your active gallery is typically available for one year after delivery.
• Marketing email lists — retained until you unsubscribe.
• Lead-magnet sign-ups (LinkedIn LGF, website downloads) — retained for up to two years from the date of submission unless you become a client (in which case the booking-record retention applies) or unsubscribe earlier.
• Website analytics — retained per the default settings of the analytics tools we use, typically 14–26 months.

You can request earlier deletion at any time (Section 8).

08. Your rights

Regardless of where you live, you can:

• Access the personal information we have about you.
• Correct inaccurate or incomplete information.
• Delete your information from our records (subject to legal retention obligations such as tax records).
• Withdraw consent for marketing communications or portfolio use of your images at any time.

If you live in the European Union, the United Kingdom, or California, you may have additional rights under the GDPR, UK GDPR, or CCPA — including the right to data portability, the right to object to certain processing, and the right not to be discriminated against for exercising your rights.

To exercise any of these rights, email jordan@jodaniphoto.com. We respond to verified requests within 30 days.

09. Children's privacy

JODANI Photography is a business-to-business and adult-portrait service. We do not knowingly collect personal information from children under 13 through our website or marketing forms. When photographing minors (e.g., teen models, family members of clients), we require parental consent before photographing, and parents control any portfolio use of those images. If you believe we have inadvertently collected information about a child under 13, contact jordan@jodaniphoto.com and we will delete it.

10. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information from unauthorized access, disclosure, alteration, and destruction. No system is perfectly secure, but we take this seriously. Cloud storage is encrypted in transit and at rest; access is limited to Jordan and any contractors actively working on a project.

11. International transfers

We are based in the United States. If you contact us from outside the United States, your information will be transferred to and processed in the United States. We rely on standard safeguards — including service providers' standard contractual clauses where applicable — to protect international transfers.

12. Updates to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. For material changes, we'll notify active clients by email.

13. Contact

Questions, requests, or concerns about this policy: