PRIVACY POLICY & CLIENT IMAGE PROTECTION
**Effective Date:** October 28, 2026
**Last Updated:** October 28, 2026
At Shadows and Lace Photography, your privacy is personal. We understand that boudoir photography requires trust, vulnerability, and confidence that your images and personal information will be handled respectfully.
This Privacy Policy explains how we collect, use, store, protect, and disclose personal information and photographs when you visit our website, contact us, book a session, purchase products, or receive photography services.
This policy applies to Shadows and Lace Photography's website and business operations, subject to applicable law and the terms of any separate agreement signed by the client.
1. INFORMATION WE COLLECT
We may collect the following information when you interact with our business.
**Personal and contact information**
* Name, email address, telephone number, and mailing address, when provided.
* Booking details, appointment dates, and client correspondence.
* Payment and transaction records.
* Information provided through questionnaires, consultation forms, contracts, and other client communications.
**Photography and session information**
* Photographs, edited images, original image files, and other media created during your session.
* Wardrobe preferences, creative direction, and posing preferences.
* Information you voluntarily provide about your comfort, boundaries, accessibility needs, or sensitivities relevant to your session.
**Website and technical information**
Depending on the website platform and technologies in use, we or our service providers may collect IP addresses, browser information, device information, pages visited, referral information, and website usage data through cookies or similar technologies.
We seek to collect information that is reasonably necessary for providing our services, managing our business, or meeting legal obligations.
2. HOW WE USE YOUR INFORMATION
We may use your information to:
* Respond to inquiries and communicate about your session.
* Schedule appointments and prepare for your photography experience.
* Create, edit, deliver, and fulfill orders for photographs and products.
* Process payments and maintain financial records.
* Honor your stated image preferences and documented consent choices.
* Maintain client records and provide customer support.
* Operate, maintain, and improve our website and services.
* Send marketing communications where permitted by law.
* Protect against fraud, resolve disputes, and comply with legal requirements.
We do not treat your decision to book a session, pay for a service, or accept this Privacy Policy as permission to publish your photographs.
3. CLIENT CONFIDENTIALITY AND PHOTOGRAPHIC IMAGES
**Your photographs are personal. Your privacy deserves respect.**
We understand that boudoir photographs may be intimate and that clients may reasonably expect them to remain private.
We will take reasonable steps to restrict access to your photographs to authorized individuals and service providers who need access to perform legitimate business functions.
Private image use
Your photographs may be viewed, edited, stored, printed, and delivered as reasonably necessary to provide the services you purchase and fulfill our contractual obligations.
We will not intentionally publish your boudoir photographs on our website, social media, advertising, promotional materials, or public portfolio without your separate, informed, written authorization.
Separate portfolio consent
Portfolio participation is optional and must be documented separately from this Privacy Policy.
A portfolio release should identify the scope of the permission granted, including, where applicable:
* The specific images or categories of images authorized.
* Whether your face, tattoos, identifying features, or name may be shown.
* The intended uses, such as website display, social media, advertising, or printed marketing.
* Whether the permission is limited by time or another condition.
* How withdrawal requests will be handled under the release and applicable law.
Consent to one use does not automatically authorize every other use. We will follow the scope and terms of the signed authorization.
Declining portfolio use will not, by itself, prevent you from booking a session or receiving the photography services you purchase.
Disclosure to third parties
We will not intentionally disclose your intimate photographs to friends, family members, partners, or unrelated third parties without your authorization or another lawful basis.
Authorized service providers may access photographs when reasonably necessary to perform contracted services, such as image editing, secure storage, gallery delivery, printing, or fulfillment. We seek to limit access and use appropriate contractual and technical safeguards.
Once images have been lawfully published with your permission, we cannot guarantee that third parties will not copy, screenshot, download, or redistribute them.
4. ARTIFICIAL INTELLIGENCE AND DIGITAL IMAGE PROCESSING
Shadows and Lace Photography may use professional editing software and AI-assisted tools to help edit, enhance, retouch, organize, or otherwise process photographs as part of delivering photography services.
We recognize that AI processing of boudoir images requires particular care.
Our intended practices are as follows:
* We will use professional tools selected with consideration for privacy, security, and the sensitivity of client images.
* We will review relevant provider privacy terms and available data-protection settings before using services to process client images.
* We will not intentionally upload identifiable boudoir photographs to public AI image-generation services or submit them for AI-model training without separate, informed, written permission.
* We will not intentionally use AI to create synthetic nude or sexually explicit depictions of a client without that client's separate, informed, written authorization and appropriate legal review.
* We will limit access to images and use only the processing reasonably necessary for the agreed services.
AI-enabled service providers may have their own data retention, processing, and security practices. We cannot promise that a provider will never experience a security incident or that every technical process can be fully controlled by us.
If a proposed AI use materially differs from ordinary editing and enhancement, we will seek any additional consent required by law or appropriate to the nature of the proposed use.
5. WHEN WE MAY SHARE PERSONAL INFORMATION
We do not sell your personal information or intimate photographs as a business practice.
We may disclose limited information to service providers or other parties when reasonably necessary for legitimate business purposes, including:
* Payment processing and invoicing.
* Website hosting and technical support.
* Photography editing, cloud storage, and image-gallery services.
* Print labs, album designers, and product fulfillment providers.
* Scheduling, customer management, and communication platforms.
* Professional advisers, insurers, and legal representatives.
* Government authorities or other parties when required or permitted by law.
We seek to use service providers that offer appropriate privacy and security safeguards. Their handling of information may also be governed by their own policies, contracts, and legal obligations.
We may disclose information when necessary to comply with valid legal process, protect rights or safety, investigate suspected fraud, or establish, exercise, or defend legal claims.
If the business is involved in a sale, merger, or similar transaction, information may be handled as part of that transaction, subject to applicable law and appropriate safeguards.
6. IMAGE STORAGE, DELIVERY, AND RETENTION
We may use multiple systems to store, process, back up, and deliver photographs. These may include local storage devices, secure cloud services, editing platforms, and online client galleries.
The specific systems used may change as our business operations evolve.
We seek to maintain reasonable safeguards, limit unnecessary duplication, and restrict access to authorized individuals and service providers.
Retention policy
Our planned practice is to retain original photographs, edited images, and related client files until the client requests deletion, subject to applicable legal obligations and legitimate business needs.
We may retain certain records for as long as reasonably necessary to fulfill contractual obligations, maintain tax and accounting records, resolve disputes, address claims, or comply with law.
A deletion request will be reviewed and processed within a reasonable period, subject to applicable law and any necessary verification of identity.
Where deletion is appropriate, we will take reasonable steps to remove the relevant images from active systems under our control and, where appropriate, instruct relevant service providers to do the same.
Deletion may not immediately remove copies held in backup systems, transaction records, or systems controlled by third-party providers. Such copies may remain until they are overwritten or can be deleted in accordance with applicable retention practices.
We cannot delete copies independently retained by clients or third parties outside our control.
**Important:** Clients who require a guaranteed retention period or a particular deletion deadline should request written clarification before booking. Any specific contractual retention commitment will be governed by the applicable client agreement.
7. INFORMATION SECURITY
We use reasonable administrative, technical, and physical safeguards designed to protect personal information and photographs against unauthorized access, disclosure, alteration, loss, and misuse.
Depending on the systems used, these safeguards may include:
* Strong passwords and access restrictions.
* Multifactor authentication where available.
* Secure storage and transmission methods where supported.
* Limited access to client files.
* Review of service-provider security and privacy practices.
* Reasonable procedures for managing and deleting records.
No electronic storage system or internet transmission is completely secure. We cannot guarantee absolute security.
If a security breach occurs, we will assess the incident and provide notifications or take other actions required by applicable law, including applicable New York data-breach notification requirements.
8. COOKIES, TRACKING, AND WEBSITE ANALYTICS
Our website may use cookies and similar technologies to support functionality, measure performance, understand visitor activity, or support marketing.
The technologies used will depend on the website platform and third-party services installed.
You may be able to manage cookies through your browser or any cookie-preference tool offered on our website. Disabling some cookies may affect website functionality.
Where required, we will provide appropriate disclosures and choices for nonessential tracking technologies.
9. EMAIL AND MARKETING
We may use your contact information to respond to inquiries, provide booking confirmations, communicate about your session, deliver order information, and provide other service-related updates.
We may also send promotional communications where permitted by law.
You may unsubscribe from marketing emails through an available unsubscribe link or by contacting us directly. We may continue sending necessary service-related communications.
We will not use your boudoir photographs in marketing simply because you receive promotional emails or have subscribed to our communications.
10. YOUR PRIVACY REQUESTS
You may contact us to request access to, correction of, or deletion of personal information we maintain about you, or to ask questions about our privacy practices.
Depending on applicable law and the circumstances, you may also request to withdraw previously granted promotional-use permission or opt out of marketing communications.
To protect your confidentiality, we may request reasonable verification of your identity before acting on a request involving sensitive information or photographs.
We will review and respond to requests in accordance with applicable law. Some information may need to be retained for legal, accounting, contractual, security, or dispute-resolution purposes.
Withdrawal of portfolio permission
If you previously authorized promotional use of your photographs and wish to withdraw that permission, contact us in writing.
We will review your request according to the terms of your signed release and applicable law, including any reasonable steps required for future use or removal of materials under our control.
Withdrawal may not undo uses that were lawful before withdrawal, and we cannot guarantee removal of printed materials already distributed or copies independently retained by third parties. Any additional rights or obligations will depend on the applicable agreement and law.
11. NEW YORK PRIVACY AND DATA SECURITY
Shadows and Lace Photography intends to handle personal information in accordance with applicable New York law, including relevant data security, consumer protection, breach-notification, and privacy requirements.
Where applicable, we will maintain reasonable safeguards for covered private information as required by New York's SHIELD Act and comply with applicable breach-notification obligations.
We will also respect applicable legal restrictions on the unauthorized use or disclosure of intimate images and the commercial use of a person's name, portrait, picture, or likeness.
Nothing in this policy waives or limits rights that cannot lawfully be waived.
12. THIRD-PARTY WEBSITES AND SERVICES
Our website, booking communications, or client galleries may link to third-party websites or services.
Those services operate under their own privacy policies and terms. We do not control every aspect of their operations and cannot guarantee their privacy or security practices.
We encourage clients to review relevant third-party terms before submitting information, creating accounts, or uploading photographs.
13. AGE REQUIREMENT
Boudoir photography services are available only to adults aged 18 or older.
We do not knowingly accept boudoir bookings for minors. If we become aware that information has been submitted by a minor in connection with a boudoir inquiry or booking, we will take appropriate steps to address it.
14. CHANGES TO THIS POLICY
We may update this Privacy Policy when our business practices, service providers, website technologies, or legal obligations change.
The current version will be published on our website with its effective or revision date. Where required by law, we will provide additional notice or obtain consent before implementing changes.
15. CONTACT INFORMATION
For privacy questions, requests concerning photographs, or concerns about the handling of personal information, contact:
**Shadows and Lace Photography**
Privacy Contact: Micheal Trahan
Email: micheal.trahan87@gmail.com
Website: Shadowsandlace.com
We understand the trust involved in boudoir photography and are committed to treating our clients and their photographs with dignity, care, and respect.
**Shadows and Lace Photography**
*Your confidence. Your story. Your privacy.*