This Privacy Policy describes how and when I collect, use, and share information when you purchase an item or service from me, contact me, or otherwise use my services through PhotoTrippingAmerica.com or its related sites and services.

To fulfill your order, you must provide me with certain information, such as your name, email address, postal address, payment information, and the details of the product that you’re ordering.

Why I Need Your Information and How I Use It

I rely on a number of legal bases to collect, use, and share your information, including:
– as needed to provide my services, such as when I use your information to fulfill your order, to settle disputes, or to provide customer support;
– when you have provided your affirmative consent, which you may revoke at any time, such as by signing up for my mailing list;
– if necessary to comply with a legal obligation or court order or in connection with a legal claim, such as retaining information about your purchases if required by tax law; and
– as necessary for the purpose of my legitimate interests, if those legitimate interests are not overridden by your rights or interests, such as providing and improving my services. I use your information to provide the services you requested and in my legitimate interest to improve my services.

I may process the following categories of personal data about you:

1. Communication Data – this includes any communication that you send to us whether that be through the contact form on my website, through email, text, social media messaging, social media posting or any other communication that you send me. I process this data for the purposes of communicating with you, for record-keeping and for the establishment, pursuance or defense of legal claims. My lawful grounds for this processing are my legitimate interests, which in this case are to reply to communications sent to me, to keep records and to establish, pursue or defend legal claims.
2. Customer Data – this includes data relating to any purchases of goods and/or services such as your name, title, billing address, delivery address email address, phone number, contact details, purchase details and your card details. I process this data to supply the goods and/or services you have purchased and to keep records of such transactions. My lawful ground for this processing is the performance of a contract between you and me and/or taking steps at your request to enter into such a contract.
3. User Data – this is data about how you use my website and any online services, together with any data that you post for publication on my website or through other online services. I process this data to operate my website and ensure relevant content is provided to you, to ensure the security of my website, to maintain backups of my website and/or databases, and to enable publication and administration of my website, other online services and business. My lawful grounds for this processing are my legitimate interests, which in this case are to enable me to properly administer my website and my business.
4. Technical Data – includes data about your use of my website and online services such as your IP address, your login data, details about your browser, length of visit to pages on my website, page views and navigation paths, details about the number of times you use my website, time zone settings and other technology on the devices you use to access my website. The source of this data is from my analytics tracking system. I process this data to analyze your use of my website and other online services, to administer and protect my business and website, to deliver relevant website content and advertisements to you, and to understand the effectiveness of my advertising. My lawful grounds for this processing are my legitimate interests, which in this case are to enable me to properly administer my website and my business, and to grow my business and to decide on my marketing strategies.
5. Marketing Data – includes data about your preferences in receiving marketing from me and my third parties, and your communication preferences. I process this data to enable you to partake in my promotions, such as competitions, prize drawings and free give-aways, to deliver relevant website content and advertisements to you, and measure or understand the effectiveness of this advertising. My lawful grounds for this processing are my legitimate interests, which in this case are to study how customers use my products and services, to develop them, to grow my business and to decide on my marketing strategies.
6. Sensitive Data – I do not collect any sensitive data about you. Sensitive data refers to data that includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data. I do not collect any information about criminal convictions and offenses.

NOTE:  I may use Customer Data, User Data, Technical Data and Marketing Data to deliver relevant website content and advertisements to you (including Facebook advertisements or other display ads) and to measure or understand the effectiveness of the advertising I provide to you. My lawful ground for this processing is a legitimate interest, which is to grow my business. I may also use such data to send other marketing communications to you. My lawful ground for this processing is either consent or legitimate interests, namely to grow my business.

Where I am required to collect personal data by law, or under the terms of the contract between us, and you do not provide me with that data when requested, I may not be able to perform the contract (for example, to deliver goods or services to you). If you don’t provide me with the requested data, I may have to cancel a product or service you have ordered but if I do, I will notify you at the time.

I will only use your personal data for a purpose it was collected for or a reasonably compatible purpose, if necessary. For more information on this please email us at info@phototrippingamerica.com. In case we need to use your details for an unrelated new purpose I will let you know and explain the legal grounds for processing.

I may process your personal data without your knowledge or consent where this is required or permitted by law.

I do not carry out automated decision-making or any type of automated profiling.

Information Sharing and Disclosure

Information about my customers is important to my business. I share your personal information for very limited reasons and in limited circumstances, as follows:

– Service providers. I engage certain trusted third parties to perform functions and provide services to my business, such as delivery companies. I will share your personal information with these third parties, but only to the extent necessary to perform these services.
– Business transfers. If I sell or merge my business, I may disclose your information as part of that transaction, only to the extent permitted by law.
– Compliance with laws. I may collect, use, retain, and share your information if I have a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce my agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of my customers, or others.

Data Retention

I retain your personal information only for as long as necessary to provide you with my services and as described in my Privacy Policy. However, I may also be required to retain this information to comply with my legal and regulatory obligations, to resolve disputes, and to enforce my agreements. I generally keep your data for the following time period: 1 year

Third-Party Links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. I do not control these third-party websites and am not responsible for their privacy statements. When you leave my website, I encourage you to read the privacy notice of every website you visit.

Cookies

You can set your browser to refuse all or some browser cookies or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. For more information about the cookies I use, please see below:

Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your web browser (if you allow).  They enable the site’s or service provider’s systems to recognize your browser and capture and remember certain information. For instance, I use cookies to help me remember and process the items in your shopping cart. They are also used to help me understand your preferences based on previous or current site activity, which enables me to provide you with improved services. I also use cookies to help me compile aggregate data about site traffic and site interaction so that I can offer better site experiences and tools in the future.

You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. Each browser is a little different, so look at your browser’s “Help” menu to learn the correct way to modify your cookies.

If you disable cookies, some features will be disabled.  It won’t affect the user’s experience, but they can make your site experience more efficient, and some of my website services will not function properly.

CAN Spam Act

The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.

I collect your email address in order to:

• Send information, respond to inquiries, and/or other requests or questions
• Process orders and to send information and updates pertaining to orders
• I may also send you additional information related to your product and/or service
• Market to my mailing list or continue to send emails to my clients after the original transaction has occurred

To be in accordance with CANSPAM we agree to the following:

• NOT use false, or misleading subjects or email addresses
• Identify the message as an advertisement in some reasonable way
• Include the physical address of my business or site headquarters
• Monitor third party email marketing services for compliance, if one is used
• Honor opt-out/unsubscribe requests quickly
• Allow users to unsubscribe by using the link at the bottom of each email

If at any time you would like to unsubscribe from receiving future emails, you can email me at info@phototrippingamerica.com OR
follow the instructions at the bottom of each email and I will promptly remove you from ALL correspondence.

Transfers of Personal Information Outside the EU

I may store and process your information through third-party hosting services in the US and other jurisdictions. As a result, I may transfer your personal information to a jurisdiction with different data protection and government surveillance laws than your jurisdiction. If I am deemed to transfer information about you outside of the EU, I rely on Privacy Shield as the legal basis for the transfer, as Google Cloud is Privacy Shield certified.

Your Rights

Under data protection laws you have rights in relation to your personal data that include the right to request access, correction, erasure, restriction, transfer, to object to processing, to portability of data and (where the lawful ground of processing is consent) to withdraw consent.

You can see more about these rights at:
https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

If you wish to exercise any of the rights set out above, please email me at info@phototrippingamerica.com.  You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, I may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive or refuse to comply with your request in these circumstances.

I may need to request specific information from you to help me confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. I may also contact you to ask you for further information in relation to your request to speed up my response.

I try to respond to all legitimate requests within one month. Occasionally it may take me longer than a month if your request is particularly complex or you have made a number of requests. In this case, I will notify you.

If you are not happy with any aspect of how we collect and use your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We should be grateful if you would contact us first if you do have a complaint so that we can try to resolve it for you.

If you reside in certain territories, including the EU, you have a number of rights in relation to your personal information. While some of these rights apply generally, certain rights apply only in certain limited cases. I describe these rights below:

1. Access – You may have the right to access and receive a copy of the personal information I hold about you by contacting me using the contact information below.
2. Change, restrict, delete – You may also have rights to change, restrict my use of, or delete your personal information. Absent exceptional circumstances (like where I am required to store data for legal reasons) I will generally delete your personal information upon request.
3. Object – You can object to (i) my processing of some of your information based on my legitimate interests and (ii) receiving marketing messages from me after providing your express consent to receive them. In such cases, I will delete your personal information unless I have compelling and legitimate grounds to continue using that information or if it is needed for legal reasons.
4. Complain – If you reside in the EU and wish to raise a concern about my use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.

How to Contact Me

For purposes of EU data protection law, I, Shelley Dennis, am the data controller of your personal information. If you have any questions or concerns, you may contact me at info@phototrippingamerica.com. Alternately, you may mail me at:

Shelley Dennis – PO Box 40 Buena Vista, Colorado 81211 United States