Privacy
Cody Jo Photography · last updated November 5, 2026
This notice covers the photo pages run by Cody Jo Photography: event and client galleries, the photo store, booking pages and invoice payment pages. We collect only what we need to get you your photos, take payment, and keep a record of a booking. We do not sell or share your details for advertising, and these pages carry no ad trackers or analytics.
What we collect
When you register for a gallery (or enter your details to download from an open gallery):
- your name and email address, and your phone number if you give it;
- whether you ticked the box to hear about future sessions and offers, and the exact wording you agreed to;
- whether you came from the QR code or a link, and when you registered and last visited;
- your IP address and your browser's name and version (used to stop abuse);
- which photos you download, with the time and IP address.
When you buy photos: your name, email, what you bought, the amount, and the PayPal transaction number. Card details are entered on PayPal's own page or PayPal's secure fields and never reach us.
When you sign a booking or pay an invoice: the booking or invoice details Cody prepared for you, the name and title you sign with, and a signature record (the time, your IP address and browser) that is kept as evidence of the agreement. Payments go through PayPal as above.
On your own device: the pages store a small access token (so you stay registered or keep your purchases), your basket while you shop, and your light/dark preference, in your browser's local storage. We do not set cookies.
How we use it
- To email you when your photos are ready, and to let you view and download them.
- To deliver photos you bought and send your receipt.
- To manage a booking you signed and take its payments.
- Only if you ticked the box: to tell you about future sessions, events and offers. If you did not tick it, the only emails you get are about the gallery you registered for.
- To keep the site secure (for example, limiting repeated attempts).
Who processes it for us
- Amazon Web Services (United States) hosts the site, its database and the photos.
- Resend sends our emails, so it handles your email address and the message.
- PayPal processes payments under its own privacy policy.
- Google Fonts serves the typefaces, so Google receives your IP address when a page loads.
How long we keep it
| What | How long |
|---|---|
| Registration: name, email, phone, opt-in choice | Until you remove yourself or ask us to delete it. |
| Your IP address and browser on a registration | Cleared after 90 days. |
| Download records (email, IP address, time) | Deleted after 90 days. |
| After you remove yourself | No more email straight away; your name, email and phone are deleted within 30 days. |
| Short-lived security counters | Deleted shortly after they expire. |
| Orders and invoices | Kept as business and tax records. If you ask us to delete your details, your name and email are removed from your orders, and the amount and transaction number are kept. |
| Signed bookings and their signature record | Kept as the record of the agreement. |
Removing yourself
- Every gallery email we send has a Remove me link that takes you off that gallery's emails.
- On a gallery page, choose Remove my details and enter the email you registered with. We email that address a link; the removal happens when you open it, so nobody can remove you by typing your address.
- To have everything we hold about you deleted (orders included, as described above), reply to any of our emails or write to the address below.
If you register again after removing yourself, we email you a link to confirm before you get that gallery's emails again.
Children
Event and family galleries can include photos of children. These pages are not meant for children to sign up on. If you are a parent or guardian and want a photo of your child taken down, tell us and we will remove it.
Contact
Cody Jo Photography · cody@codyjo.com