Privacy Policy

Privacy Policy

Last updated: August 1, 2026

This Privacy Policy describes how AV Photo LLC, doing business as "AV Photo" ("we," "us," or "our"), collects, uses, and shares personal information when you visit av-photo.com and photos.av-photo.com (the "Site") or place an order.

Our privacy commitment. We do not use advertising or analytics cookies, third-party analytics, web beacons, or tracking pixels, and we do not sell your personal information, use analytics for advertising, or send marketing emails. We collect limited information to operate and secure the Site, fulfill orders, answer inquiries, and understand how visitors use the Site.

1. Information we collect

Information you provide to us:

  • When you order: your name, email address, shipping address, billing address, and order details. Your payment-card details are entered directly with our payment processor, Stripe — we never receive or store your full card number.
  • When you contact us: your name, email address, the subject you select, and the contents of your message.
  • When you send a copyright notice: the contact and claim information described in our Terms of Service, including your name, physical address, telephone number, and email address.

Information collected automatically:

  • Server and security logs: our content-delivery and security provider, Cloudflare, processes basic technical data such as your IP address, browser type, and request timestamps to deliver the Site and protect it from abuse.
  • Fonts: the Site loads web fonts from Google Fonts, which may receive your IP address in order to serve the font files.
  • Site interface files: the Site loads scripts and styles from jsDelivr to provide search and account-interface features. jsDelivr receives technical request data, including your IP address, in order to deliver those files.
  • Your shopping cart is stored locally in your own browser (localStorage) and is not transmitted to us until you proceed to checkout.
  • Site analytics: we use analytics software hosted on equipment under our control. It records pages viewed; referring pages; browser, operating system, device type, screen size, language, and approximate location; and interactions with our products and ordering process, such as the product, finish, size, displayed price, crop status, cart activity, checkout steps, and completed-purchase metrics. We do not send the analytics system your name, email address, postal address, or payment-card information. Your IP address and browser user-agent are processed to create a pseudonymous session identifier and derive approximate location, but the raw IP address is not stored in the analytics database. Additional details appear in section 3.

2. How we use your information

  • To process, fulfill, and ship your order;
  • To process payment through Stripe;
  • To send transactional emails (order confirmation, shipping and tracking updates, and responses to your inquiries);
  • To prevent fraud and secure the Site;
  • To understand Site usage and improve the shopping and ordering experience;
  • To comply with our legal, tax, and accounting obligations.

We do not use your information for advertising and we do not send marketing or newsletter emails.

3. Cookies and analytics

We do not use advertising or analytics cookies, web beacons, or tracking pixels. Our payment processor or security provider may set strictly necessary cookies required to complete a transaction or protect the Site. Your shopping cart is stored in your browser's local storage on your device.

To understand how the Site is used, we operate our own instance of Umami analytics on equipment under our control. The analytics tracker sets no cookies and stores no analytics identifier in your browser. It collects the limited usage information described in section 1.

Umami processes the request IP address, browser user-agent, and website identifier to create a pseudonymous session identifier using a salt that changes at the beginning of each month. The raw IP address is not stored in Umami. The identifier helps us understand activity during that period, but is not designed to identify you by name or track you across unrelated websites.

We do not sell analytics information, use it for advertising, or provide it to a third-party analytics provider.

We do not track visitors across unrelated websites, and therefore we do not respond to "Do Not Track" browser signals differently.

4. How we share your information (service providers)

We share personal information only with the service providers that help us operate the store, and only as needed to perform their function:

  • Stripe — payment processing (name, email, billing/shipping details, card data handled directly by Stripe).
  • Printful — print production and shipping (recipient name, shipping address, and email address as part of the shipment record).
  • Resend — delivery of transactional emails (your name, email, and order details).
  • Cloudflare — content delivery, DNS, and security (technical/traffic data, including IP address).
  • Google Fonts — web-font delivery (IP address).
  • jsDelivr — delivery of scripts and styles used by Site search and account-interface features (technical request data, including IP address).

In addition to what our service providers hold, we keep our own internal records of orders and correspondence — including an order log and records in the workflow system that processes orders and messages — and copies of these records may exist in our routine backups. We may also disclose information if required by law or to protect our rights. We do not sell your personal information.

5. Where your information is processed

We ship to and serve customers in the United States, and your information is processed and stored in the United States.

6. Data retention

We retain records for no longer than we reasonably need them, by category:

  • Order and transaction records — up to approximately 7 years, to meet tax and accounting obligations;
  • Contact-form messages and correspondence — up to approximately 2 years after your inquiry is resolved;
  • Server and security logs — short-lived, per our infrastructure providers' standard retention.

Copies of records may persist for a limited additional period in routine backups before those backups are cycled.

7. Security

We use reasonable safeguards, including encryption in transit (TLS) and Stripe's PCI-compliant payment handling. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights and choices

Regardless of whether any particular privacy statute applies to us, we extend the following rights to all customers: you may request to access, correct, or delete the personal information we hold about you by emailing [email protected]. We will verify your request by matching the email address associated with your order or message, and we will respond within 45 days. Deletion requests are subject to legal exceptions: we may retain records we are required or permitted to keep — for example for tax, accounting, fraud-prevention, or dispute purposes — and in that case we will delete what we can and tell you what we retained and why.

  • California residents: we extend the core rights of the CCPA/CPRA — to know, correct, and delete personal information — to everyone, as described above. We do not sell or share personal information as those terms are defined in the CCPA/CPRA.

We will not discriminate against you for exercising any of these rights.

9. Children's privacy

The Site is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

10. Third-party links

The Site may link to third-party services (such as Stripe, Printful, or our Instagram page). Their privacy practices are governed by their own policies, which we encourage you to review.

11. Changes to this Policy

We may update this Policy from time to time. Changes are effective when posted with an updated "Last updated" date above. If a change materially affects how we handle personal information connected to a pending order, we will also notify you by email where we have your email address.

12. Contact

Questions or requests about your privacy? Email us at [email protected].