Privacy Policy
Last updated: July 17, 2026
This Privacy Policy describes how AV Photo LLC, doing business as "AV Photo" ("we," "us," or "our"), collects, uses, and shares personal information when you visit av-photo.com and photos.av-photo.com (the "Site") or place an order.
1. Information we collect
Information you provide to us:
- When you order: your name, email address, shipping address, billing address, and order details. Your payment-card details are entered directly with our payment processor, Stripe — we never receive or store your full card number.
- When you contact us: your name, email address, the subject you select, and the contents of your message.
- When you send a copyright notice: the contact and claim information described in our Terms of Service, including your name, physical address, telephone number, and email address.
Information collected automatically:
- Server and security logs: our content-delivery and security provider, Cloudflare, processes basic technical data such as your IP address, browser type, and request timestamps to deliver the Site and protect it from abuse.
- Fonts: the Site loads web fonts from Google Fonts, which may receive your IP address in order to serve the font files.
- Your shopping cart is stored locally in your own browser
(
localStorage) and is not transmitted to us until you proceed to checkout.
2. How we use your information
- To process, fulfill, and ship your order;
- To process payment through Stripe;
- To send transactional emails (order confirmation, shipping and tracking updates, and responses to your inquiries);
- To prevent fraud and secure the Site;
- To comply with our legal, tax, and accounting obligations.
We do not use your information for advertising and we do not send marketing or newsletter emails.
3. Cookies and tracking
We do not use advertising or analytics cookies, web beacons, or tracking pixels. Our payment processor or security provider may set strictly necessary cookies required to complete a transaction or protect the Site. Your browser's local storage is used only to remember the items in your cart on your device. We do not track users across third-party websites, we do not permit third parties to collect personal information about your activity across other sites through our Site, and therefore we do not respond to "Do Not Track" browser signals differently.
4. How we share your information (service providers)
We share personal information only with the service providers that help us operate the store, and only as needed to perform their function:
- Stripe — payment processing (name, email, billing/shipping details, card data handled directly by Stripe).
- Printful — print production and shipping (recipient name, shipping address, and email address as part of the shipment record).
- Resend — delivery of transactional emails (your name, email, and order details).
- Cloudflare — content delivery, DNS, and security (technical/traffic data, including IP address).
- Google Fonts — web-font delivery (IP address).
In addition to what our service providers hold, we keep our own internal records of orders and correspondence — including an order log and records in the workflow system that processes orders and messages — and copies of these records may exist in our routine backups. We may also disclose information if required by law or to protect our rights. We do not sell your personal information.
5. Where your information is processed
We ship to and serve customers in the United States, and your information is processed and stored in the United States.
6. Data retention
We retain records for no longer than we reasonably need them, by category:
- Order and transaction records — up to approximately 7 years, to meet tax and accounting obligations;
- Contact-form messages and correspondence — up to approximately 2 years after your inquiry is resolved;
- Server and security logs — short-lived, per our infrastructure providers' standard retention.
Copies of records may persist for a limited additional period in routine backups before those backups are cycled.
7. Security
We use reasonable safeguards, including encryption in transit (TLS) and Stripe's PCI-compliant payment handling. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Your rights and choices
Regardless of whether any particular privacy statute applies to us, we extend the following rights to all customers: you may request to access, correct, or delete the personal information we hold about you by emailing [email protected]. We will verify your request by matching the email address associated with your order or message, and we will respond within 45 days. Deletion requests are subject to legal exceptions: we may retain records we are required or permitted to keep — for example for tax, accounting, fraud-prevention, or dispute purposes — and in that case we will delete what we can and tell you what we retained and why.
- California residents: we extend the core rights of the CCPA/CPRA — to know, correct, and delete personal information — to everyone, as described above. We do not sell or share personal information as those terms are defined in the CCPA/CPRA.
We will not discriminate against you for exercising any of these rights.
9. Children's privacy
The Site is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
10. Third-party links
The Site may link to third-party services (such as Stripe, Printful, or our Instagram page). Their privacy practices are governed by their own policies, which we encourage you to review.
11. Changes to this Policy
We may update this Policy from time to time. Changes are effective when posted with an updated "Last updated" date above. If a change materially affects how we handle personal information connected to a pending order, we will also notify you by email where we have your email address.
12. Contact
Questions or requests about your privacy? Email us at [email protected].