Privacy Policy
Effective date: 21 September 2026
I'm Maya, and I run Maya Gray Photography, a wedding, family and portrait photography business based in San Diego, California. This policy explains what personal information I collect, why I collect it, who I share it with, and what control you have over it.
It applies to mayagrayphotography.com, to my social media pages, to enquiry and lead forms I run on Facebook and Instagram, and to the way I handle information from people who contact me or book me.
If anything here is unclear, email me at mayagrayphoto@gmail.com and I'll explain it plainly.
1. Information you give me
Contact and enquiry details — your name, email address, phone number, and anything else you type into an enquiry form, a Facebook or Instagram lead form, or an email to me.
Event details — your wedding or session date, venue or location, and the budget range you select, so I can tell you whether I'm available and what fits.
Booking and contract information — the details needed for a photography agreement, including names, addresses, event schedules, and the names of other vendors or family members you ask me to coordinate with.
Payment information — I use a third-party payment processor. Card numbers go to them, not to me. I keep records of what was invoiced and paid, not your card details.
Anything you choose to send me — messages, mood boards, shot lists, questions.
2. Information collected automatically
When you visit my website, some information is collected by the platforms I use:
Website and hosting data — my site runs on Pixieset, which collects standard log and analytics information such as IP address, browser and device type, pages viewed, and referring site.
Cookies and similar technologies — used to keep the site working, to understand which pages people actually read, and to measure advertising.
Advertising and measurement tools — I advertise on Facebook and Instagram. Meta's tools may record that you visited my site or interacted with an ad, and may link that to your Meta account. See §6 and §11 for what that means and how to limit it.
3. Information from Facebook and Instagram lead forms
If you fill in one of my lead forms on Facebook or Instagram, Meta passes me the information you submitted — typically your name, email address, phone number, wedding date, location and budget range. Meta may pre-fill some of those fields from your profile; you can edit them before submitting.
That information comes into my customer relationship system so I can reply to you, send you pricing, and follow up. Meta's own handling of your data is governed by Meta's Privacy Policy, not by mine.
4. How I use your information
To answer your enquiry and send you pricing and package information.
To arrange and confirm consultations, sessions and weddings.
To prepare contracts and invoices, and to take payment.
To deliver your photographs and give you access to your online gallery.
To send you follow-up emails and text messages about my services, if you've asked for information or booked with me — see §5.
To keep my own business records, including tax and accounting records.
To improve my website and understand which of my ads are working.
To meet legal obligations and to establish or defend legal claims if I ever have to.
5. Emails and text messages
When you submit an enquiry or lead form, you're asking me to get back to you, and I'll reply by email, by text message, or by phone using the details you gave me. That includes an automatic first email and text with my pricing, and a short series of follow-ups if I don't hear back.
You can stop these at any time:
Email — click the unsubscribe link at the bottom of any marketing email, or reply and ask me to stop.
Text messages — reply STOP to any text.
Opting out of marketing doesn't stop messages I need to send you about a booking you've already made — confirming a date, sending a contract, or delivering a gallery. Message and data rates may apply. I don't charge for these messages, but your carrier might.
6. Who I share your information with
I don't sell your personal information for money.
I do share it with the services I use to run the business, and only so they can do their job:
What Why
Website and gallery hosting (Pixieset) Running my site and delivering your photographs
Customer relationship and marketing platform Storing your enquiry, sending email and texts, booking calls
Email and text message providers Actually delivering those messages
Payment processor Taking payment securely
Cloud storage and backup Storing and backing up photographs and files
Meta (Facebook and Instagram) Running and measuring my advertising
Accountant, and legal advisers if needed Business records and legal obligations
A second photographer or assistant, where one is booked Photographing your event
I may also disclose information if the law requires it, to protect my rights or someone's safety, or if the business is ever sold or transferred.
About advertising specifically: when I use Meta's advertising tools — including the website pixel and, where applicable, customer lists used to build audiences — California law treats that as "sharing" your personal information for cross-context behavioral advertising, even though I receive no money for it. §11 explains how to opt out.
7. Photographs and your likeness
This one matters more in my line of work than in most.
Photographs of you are personal information too. If you book me, my photography contract — not this policy — governs how your images may be used, including whether I may show them in my portfolio, on social media, on my website, in advertising, or in competition and publication submissions.
If you'd rather I didn't use your photographs publicly, tell me. I'll honor that, and we'll put it in the contract. If you've already agreed to public use and change your mind later, email me and I'll remove what I reasonably can going forward — though I can't always retract images already printed, published by a third party, or shared onward by other people.
8. How long I keep your information
Enquiries that don't become bookings — up to two years, then deleted, in case you come back or your date moves.
Client records, contracts and invoices — for as long as needed to run the business and to meet tax and legal record-keeping requirements, typically at least seven years.
Photographs — archived for a period after delivery. Galleries expire, so please download and back up your images. I'm not able to guarantee I'll still hold your files years later, and you should not treat my archive as your only copy.
9. How I protect your information
I use reputable service providers, keep accounts protected with strong passwords and two-factor authentication where it's offered, and limit access to files to me and anyone actually working on your booking. No system is completely secure, and I can't guarantee absolute security, but I take it seriously.
10. Children
My services aren't directed at children, and I don't knowingly collect personal information online from anyone under 13. I do photograph children at family sessions and weddings — with their parent's or guardian's arrangement and consent. If you believe a child has given me information online, email me and I'll delete it.
11. Your rights
Depending on where you live, you may have the right to:
Know what personal information I hold about you and how I use it.
Access a copy of it.
Correct anything inaccurate.
Delete it, subject to records I'm legally required to keep.
Opt out of marketing emails and text messages at any time (§5).
Opt out of "sharing" for targeted advertising — if you'd rather your information wasn't used to build or match advertising audiences, email me and I'll remove you. You can also limit ad tracking in your Facebook and Instagram ad settings, and through your browser and device privacy settings.
Not be discriminated against for exercising any of these rights. Asking me to delete your data won't change the price I quote you or the service you get.
To exercise any of these, email mayagrayphoto@gmail.com. I may need to confirm who you are before I act, so that I'm not handing your information to someone else. I'll respond within the time the law allows — generally 45 days in California.
If you're in the UK or the European Economic Area, you may also have the right to object to or restrict certain processing, to data portability, and to complain to your local data protection authority.
12. Links to other sites
My site and emails link to other places — my galleries, my booking calendar, social media, and vendors I recommend. Once you're on someone else's site, their privacy policy applies, not mine.
13. Changes to this policy
I'll update this policy when how I work changes. The effective date at the top tells you when it last changed. If I make a significant change, I'll say so on this page.
14. Contact
Maya Gray Photography - mayagrayphoto@gmail.com