Legal

Privacy Policy

Last updated 3 October 2026

The texts and photographs on this site are protected under the laws in force on copyright, patents and intellectual property. Unauthorized use is strictly prohibited.

This policy explains what this site collects, why, and who else sees it. It covers danielgrandstudio.com and nothing else — pages we link to elsewhere have their own policies.

When you book a session we ask for your name, email address and phone number, and for a shoot outside New York, the city. You may also leave a note about what the shoot is for. We keep these to arrange and deliver the session, and to contact you about it. Nothing here is used for advertising and nothing is sold.

Photography booking and enquiry records are stored in our database hosted on Railway. Resend delivers booking emails, and Telegram sends the photographer booking and enquiry notifications, including the contact details needed to follow up. Vercel hosts the website, and Sentry helps us diagnose technical errors.

The call calendar on the contact page is provided by Acuity Scheduling. When you arrange a call, Acuity receives the contact and appointment details you enter and manages the appointment and its notifications. Our site records an appointment reference and alerts the photographer. Acuity's own privacy policy also applies to its service.

Payment is taken by Stripe on Stripe's own pages. Card numbers are never entered on this site and never reach it. Stripe is the controller of what you type there, under its own privacy policy; we receive only the fact of payment and the amount.

If you subscribe to the newsletter, your email address is held by Brevo, which sends the mail. Subscription is double opt-in — you receive an email asking you to confirm, and until you do, nothing is sent. Every newsletter carries an unsubscribe link, which takes effect immediately.

We use Cloudflare Turnstile to protect forms against automated submissions. It processes browser and device signals for security verification. Third-party services, including Stripe, Acuity and Cloudflare, may use cookies or browser storage as part of their services, under their own policies. We do not add advertising or analytics cookies of our own.

We keep booking records while they are needed to run and account for the session, and as long afterwards as tax and accounting rules require. Unsubscribing stops newsletter delivery; Brevo may retain an opt-out record so that we can respect that choice.

You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted, by writing to the address on the contact page. Deleting a record we are required to keep for accounting is the one thing we may have to refuse, and we will say so if it applies.