FoltsFotography uses information you submit to review requests, communicate, deliver services, prevent abuse, manage approved payments, and manage private business outreach. Raw card information is handled by Stripe and is not stored by this website.
Information collected
When an athlete or authorized adult submits a request, FoltsFotography collects the requester’s name, email, role, requested service, date, time, location, project details, optional notes, policy-acceptance timestamps, booking status, quote details, and invoice identifiers.
If you submit a testimonial, the system may collect your display name, email, service, rating, testimonial text, consent confirmations, and review status. Your email remains private. A testimonial is not shown publicly unless it is approved for publication.
For private business outreach and lead management, FoltsFotography may process a person’s name, role, organization, work email, public source URL, business category, suppression or do-not-contact status, and outreach history. This information is kept out of public website responses.
Limited technical information such as a hashed IP-derived rate-limit identifier may be processed to prevent spam and abuse.
To understand site activity, the website records coarse page-view and booking-funnel events, a short-lived browser session identifier, device category, referring hostname, and basic timing/error categories. It does not store raw IP addresses, names, form values, or full referral URLs for these metrics. Activity data is retained for up to 90 days. Vercel Web Analytics and Speed Insights may also receive standard measurement data under Vercel’s privacy practices.
How information is used
- Review availability and prepare a quote.
- Communicate about approval, scheduling, delivery, and payment.
- Create and track approved invoices.
- Review and manage private business outreach when appropriate.
- Protect forms and admin workflows from abuse.
- Maintain business, payment, suppression, dispute, and legal records.
Service providers
Information may be processed by Vercel for hosting, a Redis-compatible storage provider for booking records and rate limits, a private CRM tool such as Airtable for lead review when enabled, Resend for email delivery, Stripe for approved invoices and payments, and Google Fonts for typography delivery. Standard connection data, such as IP address and browser information, may be visible to these providers when their services are requested. These providers operate under their own terms and privacy practices.
Minors and authority
Athletes may submit a request directly, but an authorized adult parent, guardian, coach, or business representative must approve services involving a minor before the booking is final. Do not submit sensitive information that is not needed for the booking.
Retention and deletion
Booking and payment records are kept only as reasonably needed to provide services, manage the business, resolve disputes, and meet applicable recordkeeping requirements. Testimonial submissions are kept while pending review and, if approved, while the published testimonial remains useful or until a removal request is honored. Lead, outreach, suppression, and do-not-contact records are retained only as needed for legitimate business administration; do-not-contact records may need to be retained so the person is not contacted again.
You may request access, correction, or deletion by emailing carterdfolts@gmail.com. Some payment, suppression, or legal records may need to be retained.
Security
FoltsFotography uses access controls, encrypted HTTPS connections, limited server-side credentials, request validation, rate limiting, and private review workflows. No online system can guarantee perfect security. Private lead and admin data must never be included in public page content or unauthenticated API responses.
Updates and contact
This notice may be updated as services, providers, or legal requirements change. Questions or privacy requests can be sent to carterdfolts@gmail.com.