Information We Collect
We collect information you provide directly when you interact with our website:
Contact form — Your name, email address, session of interest, and message when you reach out to us.
Booking & payments — Your name, email, phone (optional), session preferences, and scheduling details. Payment processing is handled entirely by Stripe; we never store your credit card information on our servers.
Newsletter — Your email address and first name when you subscribe to our mailing list via Brevo.
Cookies & analytics — We use the Meta (Facebook) Pixel to understand how visitors interact with our site and measure the effectiveness of our advertising. This may collect browsing behavior and device information.
How We Use Your Information
We use the information we collect to:
• Respond to your inquiries and provide customer support
• Process and manage your session bookings and payments
• Send transactional emails (booking confirmations, reschedules, cancellations)
• Send our newsletter (only if you opt in)
• Improve our website and services through analytics
• Comply with legal obligations
Third-Party Services
We work with trusted third-party services to operate our business. Each processes data according to their own privacy policies:
• Stripe — Payment processing (PCI DSS Level 1 certified)
• Supabase — Database and backend infrastructure
• Resend — Transactional email delivery (booking confirmations, contact form)
• Brevo — Newsletter and email marketing
• Meta (Facebook) Pixel — Website analytics and advertising measurement
Cookies
Our website uses a minimal set of cookies:
• Essential cookies — Required for the website to function (session management, language preferences)
• Analytics cookies — The Meta Pixel may set cookies to measure page visits and conversions
We do not use third-party cookies for cross-site tracking.
Your Rights
You have the right to:
• Access — Request a copy of the personal information we hold about you
• Deletion — Request that we delete your personal data
• Newsletter opt-out — Unsubscribe from our newsletter at any time using the link at the bottom of every email
To exercise any of these rights, please contact us at hello@karengranja.com.
Data Security
We take reasonable measures to protect your information:
• All data is transmitted over HTTPS (encrypted connections)
• Sensitive payment data is processed exclusively by Stripe, a PCI DSS Level 1 certified provider
• Access to personal data is restricted to authorized personnel only
While no method of transmission over the internet is 100% secure, we strive to protect your personal information using commercially acceptable means.
Changes to This Policy
We may update this privacy policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
Contact
If you have any questions about this privacy policy or how we handle your data, please contact us:
Email: hello@karengranja.com
Karen Granja Photography — Winter Garden, FL