Privacy Policy

Who We Are

Morgan Ashley Photography is a wedding and portrait photography business based in Cincinnati, Ohio. This website (morganashleyphotos.com) is operated by Morgan Cundiff.

Information We Collect

When You Inquire

If you contact us through our website or email, we collect your name, email address, phone number, and any details you share about your event (wedding date, venue, referral source). This information is used to respond to your inquiry and is stored in our contact management system as a "lead" record so we can follow up appropriately.

Contact Data Storage

When you submit our contact form, your information is automatically stored in our secure contact management system. This includes your name, email, phone number, wedding date, venue, and how you found us. We use this data to:

• Respond to your inquiry promptly
• Track our conversation history
• Send relevant follow-up communications
• Improve our services based on inquiry patterns

When You Book

Booked clients provide additional details including wedding date, venue, package selection, and payment information. Payment processing is handled by Stripe, which maintains its own privacy policy. We do not store credit card numbers on our servers.

Client Gallery Access

When your photos are ready, we send you a private gallery link via email. Accessing your gallery requires authentication through a secure, time-limited link tied to your email address. We log gallery access for security purposes only.

Cookies

We use session cookies to keep authenticated users logged in. Specifically:

• client_session — keeps clients logged in to their private gallery for up to 7 days
• An admin session cookie — used only by Morgan and her administrator to access the back-office; not set for any site visitor

Both cookies are HttpOnly (not accessible to JavaScript), Secure (only sent over HTTPS), and SameSite-scoped. We do not use tracking cookies, advertising cookies, or cross-site profiling cookies.

Analytics

We use lightweight, privacy-preserving analytics to understand site performance and popular content:

• Vercel Analytics & Speed Insights — aggregate page-view and performance metrics. Does not use cookies and does not track you across other sites.
• Google Analytics 4 (if enabled) — aggregate visitor behaviour to help Morgan understand which galleries and blog posts are engaging. IP addresses are anonymised; no advertising identifiers are used.

You can opt out of analytics by enabling Do Not Track in your browser or using a privacy-focused browser / extension.

How We Use Your Information

• To provide photography services you've booked
• To deliver your photos via private galleries
• To communicate about your session or event
• To send gallery-ready notifications via email
• To send occasional marketing emails about our services (with your ability to opt out)

We never sell, rent, or share your personal information with third parties for marketing purposes.

Email Communications

Emails from Morgan Ashley Photography (gallery notifications, booking confirmations, follow-ups) are sent from Morgan's Gmail account using Google's authenticated email service. You will only receive emails related to services you've inquired about or booked.

Marketing Emails

From time to time, we may send marketing emails about seasonal availability, mini sessions, or special offers to contacts who have previously inquired or booked with us. All marketing emails:

• Include a clear, one-click unsubscribe link in the footer
• Include our physical mailing address as required by CAN-SPAM
• Are never sent to contacts who have opted out
• Clearly identify Morgan Ashley Photography as the sender

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any marketing email. This will not affect service-related communications (booking confirmations, gallery notifications, etc.).

Photo Usage

Your wedding and portrait photos may be featured on our website, social media, and marketing materials unless you've opted out. This is covered in your photography contract. Portfolio usage always respects your preferences -- just let us know if you'd like your photos kept private.

AI Assistance

Morgan uses an AI assistant to help her run the business — drafting emails, organising galleries, answering admin questions, and suggesting content. When she asks the assistant to act on a specific client (for example, “share Sarah's gallery”), the relevant details for that task are transmitted to the AI provider to perform the request.

Client information is never used to train AI models, profile you, enrich third-party datasets, or be shared for any purpose unrelated to the service Morgan provides. The assistant does not retain a copy of your information after each request.

Any email the assistant prepares is shown to Morgan for explicit approval before it is sent. The assistant cannot send messages, share galleries, or charge payments without her active confirmation.

Third-Party Services

We use the following services to operate our business. All process data under written agreements that restrict use to providing these services:

• Vercel — Website hosting, image storage, and performance analytics (US)
• Google — Administrator authentication and email delivery via Gmail (US)
• Stripe — Payment processing (US, with global payment routing as required)
• AI assistant provider — On-demand AI requests as described above (US)

International data transfers: Because these providers are based in the United States, personal information we collect may be transferred to and processed there. Where required by law, these transfers are covered by standard contractual clauses or equivalent safeguards.

Data Retention

We retain your contact information for as long as it is needed to serve you. Specifically:

• Inquiry/lead data: Retained for up to 2 years after last contact to support follow-up
• Client booking data: Retained for the duration of our business relationship plus any period required for portfolio use as agreed in your contract
• Gallery photos: Gallery access links expire, but your photos remain available upon request
• Marketing preferences: Your opt-out choice is retained indefinitely to ensure we respect it

Your Rights

You may:

• Request access to the personal data we hold about you
• Request correction of inaccurate information
• Request deletion of your data (subject to contractual obligations)
• Request a copy of your data in a portable format
• Object to or restrict how we process your data
• Withdraw consent at any time (where consent is the legal basis)
• Opt out of portfolio/marketing use of your photos
• Opt out of marketing emails at any time via the unsubscribe link
• Lodge a complaint with a data protection authority (such as the ICO in the UK, the CNIL in France, your state Attorney General in the US, or the California Privacy Protection Agency)

If you are in the European Union, United Kingdom, or California, these rights are granted to you under the GDPR, UK GDPR, and CCPA/CPRA respectively. To exercise any of them, email letschat@morganashleyphotos.com and we will respond within 30 days.

California residents: We do not sell personal information as defined by the CCPA, and we do not share it for cross-context behavioural advertising.

Children's Privacy

Our services are not directed at children under 13. We do not knowingly collect personal information from children.

Contact

For privacy-related questions or requests:

Morgan Ashley Photography
Email: letschat@morganashleyphotos.com
Cincinnati, Ohio