7. Data Retention Schedule
We retain different types of information for different periods based on business need and legal requirement:
- Booking & Session Data: 3-5 years (for tax/legal purposes)
- Client Photos (originals & edits): Indefinitely (for portfolio & archival purposes)
- Email/SMS Consent Records: Minimum 3 years (TCPA compliance)
- Opt-Out Records: Minimum 3 years
- Website Analytics: Up to 38 months (Google Analytics default)
- Email List (inactive): 6 months after opt-out/inactivity
When information is no longer needed, we will securely delete or anonymize it. In some cases, we may retain information longer if required by law or if needed for legal proceedings.
8. Third-Party Service Providers
We share your information with trusted third-party service providers who help us operate our business. These providers are contractually obligated to protect your data and use it only for the purposes we specify:
- Website & Booking
- Website platform (Showit)
- Booking system (TAVE or other scheduling platform)
- Communication
- Email marketing platform (Mailchimp, Klaviyo, or similar)
- SMS messaging provider (Twilio, SimpleTexting, or similar)
- Email service providers
- Business Management
- CRM system (GoHighLevel or similar)
- Payment processors (Stripe, Square, PayPal, or similar)
- Cloud storage and backup services
- Photo Management
- Photo delivery platform (Pixieset, Pass, or similar)
- Photo editing and storage services
- Analytics & Advertising
- Google Analytics (website traffic and user behavior analysis)
- Facebook Pixel (conversion tracking and audience building)
- Social media advertising platforms
We do NOT sell your personal information to third parties for their marketing purposes. We only share information with service providers under strict data protection agreements.
Mobile Information Sharing & Use
We may share your mobile phone number with service providers only for the purpose of:
- Delivering SMS/text messages you have consented to receive
- Processing payments
- Providing booking confirmations and session reminders
Your mobile number will not be shared with third parties for marketing purposes without your explicit consent. We comply with TCPA (Telephone Consumer Protection Act) regulations and maintain opt-out records as required by law.
9. Cookies, Tracking & Online Technologies
We use various technologies to collect information about your interaction with our website:
Cookies
Cookies are small text files stored on your device that help us remember your preferences and track your activities. We use cookies to:
- Remember your login information and preferences
- Track page visits and user behavior for analytics
- Deliver targeted advertisements and measure ad performance
- Improve website functionality and user experience
- You can manage cookie preferences through your browser settings. However, disabling cookies may limit your ability to use certain features of our website.
Web Beacons & Pixels
We use tiny tracking graphics (web beacons, pixels) to understand browsing activity, track conversions, and build audience segments for advertising purposes.
Third-Party Tracking
Third-party companies (Google, Facebook, etc.) may place cookies and pixels on our website to track your behavior for their own purposes, including:
- Website analytics and visitor analysis
- Retargeting advertisements
- Building audience profiles for targeted advertising
We do not have a Do Not Track (DNT) policy. If you send a DNT signal from your browser, we will continue to use cookies and tracking technologies as described in this policy. You can control tracking through browser settings or opt-out mechanisms provided by third parties.
10. Children's Privacy
This website is not intended for children under 13 years old, and we do not knowingly collect personal information from children under 13 without parental consent.
Photography Sessions With Children
- When a minor (under 18) participates in a photography session:
- A parent or legal guardian must provide consent for the session
- The parent/guardian provides consent for us to photograph and use the child's images
- We handle the child's images in accordance with this Privacy Policy
- If we become aware that we have collected information from a child under 13 without proper consent, we will delete that information promptly.
11. California Consumer Privacy Rights (CCPA)
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):
Right to Know: You have the right to request what personal information we have collected about you, the categories of sources, the purposes, and the categories of third parties with whom we share it.
Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions (e.g., if we need it to fulfill your order or comply with law).
Right to Opt-Out: You have the right to opt out of the sale or sharing of your personal information. We do not sell your information.
Right to Correction: You may request that we correct inaccurate personal information.
Right to Opt-In to Automated Decision Making: You have the right to request human review of certain automated decisions made about you.
To exercise these rights, please contact our Data Protection Officer at:
ATTN: Data Protection Officer
Glean and Co, LLC
670 E Pennsylvania StBoise, Idaho 83706
hello@gleanandco.com
208.274.3704
12. Your Rights & Choices
We respect your rights to control your personal information:
- Access & Portability: You can request a copy of the personal information we have about you in a structured, machine-readable format.
- Correction: You can request updates to incorrect or incomplete information.
- Restriction: You can request that we limit how we process your information.
- Deletion: You can request deletion of your information, subject to legal and business obligations.
- Opt-Out of Marketing: You can opt out of promotional emails by clicking "Unsubscribe" in any email or SMS by replying STOP.
To exercise any of these rights, contact our Data Protection Officer (see Section 11).
We will respond to valid requests within 30-45 days and may request additional information to verify your identity.
13. Testimonials & Client Reviews
We may display client testimonials and reviews on our website and in marketing materials. If you would like us to remove your testimonial or review at any time, please contact us. We will promptly do so upon request.
14. External Links
Our website may contain links to external websites. We are not responsible for the privacy practices of third-party websites. Please review their privacy policies before providing your information.
15. Changes to This Privacy Policy
We may update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on this page with a new "Last Updated" date.
Continued use of our website or services after changes become effective means you accept the updated Privacy Policy.
16. Data Protection Officer & Contact
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Data Protection Officer:
Business Name
Glean and Co, LLC
Address:
670 E Pennsylvania St
Boise, Idaho 83706
Email: hello@gleanandco.com
Phone: 208.274.3704
When you contact us with a privacy concern, please mark your message ATTN: Data Protection Officer so we can route it appropriately. We will respond within 30 business days.
© 2026 Glean and Co, LLC. All rights reserved.
Last Updated: January 2026