When you book. Your name, email, phone number, the session details and any notes you add are stored so I can run the session, email you about it and, if you ask, reschedule it. I keep them for as long as I need to for tax and records, then delete them.
Payments. Card payments are taken by Stripe. I never see your card number. Stripe's own privacy policy covers what they hold.
Email. Confirmations and reminders are sent through Resend, which processes your email address to deliver them. I don't run a newsletter; the 10 Min Frame waitlist emails you about that event only, and you can ask to be removed any time.
Analytics. I run my own visitor analytics — no Google Analytics, no ad networks, nothing sold or shared. When you visit, the site records which pages you look at, how long, what you click, and where you arrived from (a search engine, Instagram, a link). It also stores your IP address and the approximate location and network it points to (town, country, provider), plus your device and browser type. A random ID in a first-party cookie (ksa_vid) and your browser's local storage lets me tell a returning visitor from a new one. If you book or send an enquiry, that history is linked to it so I know what brought you here.
How long. Visit records are deleted after about 13 months; IP addresses of visitors who never get in touch are dropped after 90 days. Only I can see them, in the site's admin.
Opting out. Open this link and this browser won't be counted again (this one turns it back on). Blocking cookies and site data also works. The only other cookie on the site keeps me logged in to the admin page.
Photos. Your photos are yours to use. I may ask to show a frame on this site or on Instagram — only with your say-so, and you can withdraw it.
Your rights. Email kobestillartwork@gmail.com to see, correct or delete anything I hold about you. KSA Headshots is operated by Kobe Still from London, UK.