Privacy Policy
This Privacy Policy explains what personal information Ben Creative LLC, a Wyoming limited liability company operating from 609 Scott St, Hinesville, GA 31313 collects, how it is used, who it is shared with, how long it is kept, and the privacy rights available to visitors and clients.
- Legal entity
- Ben Creative LLC
- Formation
- Wyoming limited liability company
- Studio / operating address
- 609 Scott St, Hinesville, GA 31313, USA
Who we are
Ben Creative LLC is formed in Wyoming and operates its studio from Hinesville, Georgia. The street address on this website is the studio, mailing, and customer-service address.
Ben Creative LLC, a Wyoming limited liability company operating from 609 Scott St, Hinesville, GA 31313. We do business as Ben Creative at photosofben.com.
The published address, 609 Scott St, Hinesville, GA 31313, USA, is our studio, operating, mailing, and customer-service address. It is labeled by role wherever it appears. This site does not publish a registered-agent address.
Our ordinary service area is Hinesville, Liberty County, and Coastal Georgia. Website use is available wherever the site can be reached, but photography sessions are scheduled in that service area unless a written quote says otherwise.
Questions about this policy or your personal information can be sent to contact@photosofben.com, through the contact page, or by mail to 609 Scott St, Hinesville, GA 31313, USA.
Scope of this policy
This policy covers the website, booking and contact forms, sessions, galleries, and the vendors that help us run them.
This policy applies to photosofben.com, the contact and booking request forms, email and optional chat communications, quotes and invoices, photography sessions, digital galleries, print and digital product orders, and payment records we receive from our payment processor.
It does not cover independent third-party sites we link to. If you open Google Maps directions or pay on Stripe's payment page, those companies' own policies apply to what you do there.
Related pages: Cookie Policy, Privacy Choices, Trust & Security, and Terms of Service.
Information you provide
We collect the details you choose to send so we can reply, quote, photograph, deliver, and support the work.
We collect information you choose to provide when you contact us, submit a booking request, approve a quote, pay an invoice, attend a session, order print or digital products, or communicate with us.
| When | What we collect | Why |
|---|---|---|
| Contact form | Name, email, optional subject, and message | To reply to your question |
| Booking request form | Session type, preferred date, optional alternate date, time of day, people, location idea, name, email, optional phone, notes, and your deposit acknowledgement | To check availability and prepare a quote |
| Client work after a quote is accepted | Scope details, session notes, approvals, gallery selections, retouching requests, usage preferences, and related correspondence | To plan, photograph, edit, and deliver the project |
| Invoices and print orders | Billing contact details, payment status, and any shipping address you give us for physical products | To invoice, fulfill, and keep required records |
This website never asks for a payment card number. The forms reject likely card numbers before anything is stored. Card details, when you pay, are entered only on Stripe's hosted page.
We do not create customer login accounts on this website.
Information collected automatically
The site and its infrastructure collect ordinary technical data needed to load, protect, and operate the pages.
When you visit photosofben.com, our hosting, security, font, and infrastructure providers may collect technical information such as IP address, browser type, device type, pages requested, referring URL, timestamps, approximate location derived from IP address, and diagnostic logs.
Cloudflare, which hosts and protects the site, may receive that technical request data and may use bot-management and security signals. Cloudflare Web Analytics may collect aggregated technical usage data when that beacon is active.
The site loads fonts from Google Fonts. Google may receive the technical request needed to deliver the font files, which can include IP address, browser details, and the requested font files.
The contact page includes an address link that opens directions in a new tab. If you use that link, Google Maps may receive the address query and technical request information.
If you submit a form, we may store a short-lived hashed version of the connecting IP address to limit abuse. That hash is used for rate limiting, not as a marketing identifier.
A first-party consent-context check may read a coarse region (for example EEA, UK, or other), a country code supplied by the host, and whether the browser sent a Global Privacy Control signal. That information is used to classify consent defaults. It is not used to build an advertising profile.
Cookies, consent, and similar technologies
Termly controls optional technologies. Necessary tools stay on. Optional chat, analytics, and marketing load only when allowed.
The website may use cookies, local storage, logs, pixels, scripts, iframes, or similar technologies for page delivery, security, forms, fonts, consent records, and optional site tools.
Termly is our consent-management provider. Necessary technologies stay on because they support site operation, security, fraud prevention, forms, and consent storage.
Optional Functional, Performance, Analytics, and Marketing categories are controlled by your region, saved choices, and any Global Privacy Control signal from your browser. Optional vendor scripts, including tawk.to live chat, load only when the relevant category is allowed.
You can change choices at any time from Cookie Settings or Your Privacy Choices in the footer. The Cookie Policy has the detailed category and vendor table.
| Category | Purpose | Default behavior |
|---|---|---|
| Necessary / Essential | Site delivery, security, forms, payment-boundary integrity, fraud prevention, and consent storage | Always active |
| Functional / Performance | Requested support chat, diagnostics, and preference features | Depends on region and saved choice |
| Analytics | Traffic, performance, and usage measurement | Depends on region and saved choice |
| Marketing | Ad measurement, retargeting, attribution, review widgets, and testimonial widgets, if configured | Depends on region, saved choice, and GPC |
How we use information
We use personal information to run the studio, deliver the work, keep the site safe, and meet legal duties.
- Responding to inquiries and booking requests.
- Confirming availability and preparing quotes, scopes, invoices, and session plans.
- Providing photography sessions, editing images, delivering galleries, and fulfilling digital or print orders.
- Processing payments, refunds, cancellations, disputes, tax records, and accounting requirements.
- Sending service, invoice, legal, delivery, and session-related communications.
- Maintaining website security, detecting misuse, debugging technical issues, and preventing fraud.
- Sending optional marketing communications only where allowed by law and with a way to opt out.
- Complying with applicable law, court orders, tax rules, and enforceable legal requests.
Legal bases for processing
Where GDPR or similar law requires a legal basis, we rely on contract, legitimate interests, consent, or legal obligation.
If you are in the European Economic Area, the United Kingdom, or another place that requires a legal basis, we rely on the bases below. We do not appoint a Data Protection Officer. This is a small studio, not a large-scale monitoring operation. Contact the studio using the details at the end of this page.
| Purpose | Legal basis |
|---|---|
| Responding to inquiries and booking requests | Steps toward a contract, or legitimate interests |
| Providing sessions, galleries, and orders | Contract necessity |
| Payment, refunds, tax, and accounting | Contract necessity and legal obligation |
| Website security, abuse prevention, and rate limiting | Legitimate interests |
| Optional live chat and optional marketing messages | Consent, or legitimate interests where allowed |
| Portfolio display of finished, non-confidential work | Legitimate interests, with a written opt-out before publication |
| Legal requests and dispute records | Legal obligation and legitimate interests |
Who information is shared with
We do not sell personal information for money. We share it with the vendors needed to run the studio and deliver the work.
We share information with service providers that help us operate the website and provide photography services. Those providers are expected to use the information only for the services they provide to us.
| Recipient | Role | Typical information |
|---|---|---|
| Cloudflare | Website hosting, CDN, security, and optional web analytics | Technical request data and the pages we publish |
| Termly | Consent management | Consent choices, region classification, GPC status, and related consent events |
| tawk.to | Optional live chat, only after the Performance category is allowed | Chat messages and technical chat data |
| Resend | Transactional email delivery of inquiry notices | The inquiry contents and delivery metadata |
| Migadu | Business email mailbox for studio correspondence | Email you send to the studio and our replies |
| Stripe | Hosted invoices and card payments | Billing details you enter on Stripe's page; we receive limited payment records |
| Fonts, and Maps if you open directions | Technical request data for those features | |
| Print, framing, or gallery hosts we actually use for an order | Fulfillment | Name, delivery details, and selected images needed to fulfill |
| Professional advisors | Legal, accounting, insurance, or security advice | Only what that advice requires |
We may also share information with government, legal, or regulatory recipients when required by law or to protect rights, safety, and security, and with a successor if the studio is merged, acquired, or sold, subject to continued protection of personal information.
We do not sell personal information for money.
Sale, sharing, and targeted advertising
We do not sell personal information for money. Optional marketing tools, if configured and allowed, can count as a sale or share under some U.S. state laws.
If optional Marketing tools are configured and allowed, some advertising, attribution, review, or testimonial technologies may be considered a sale, sharing, or targeted advertising under certain U.S. privacy laws.
You can opt out through Your Privacy Choices in the footer. If your browser sends a Global Privacy Control signal, Marketing technologies are forced off for that browser where applicable.
Payment and billing information
Card data stays on Stripe's hosted page. We keep ordinary invoice records, not full card numbers.
Electronic card payments are handled through Stripe's payment page. Ben Creative LLC does not collect, process, or store full card numbers or card security codes on its own servers.
We may receive limited payment records such as customer name, billing contact details, transaction status, invoice number, payment method type, last four digits, expiration month and year, receipts, refunds, and dispute status.
Those records are used for accounting, tax, refunds, and dispute handling.
Images, galleries, and portfolio use
Session photographs are the service. We do not use them to build facial-recognition templates.
Photographs made during a session are personal information. They are created to deliver the service you booked. We do not use session photographs to create biometric identifiers, faceprints, or facial-recognition templates, and we do not sell image libraries of clients.
Finished images may be displayed in portfolios, proposals, social posts, website examples, or marketing materials unless you ask us in writing not to do so before publication.
Sensitive, private, or confidential client materials are handled with reasonable care. If a project requires confidentiality, tell us before the session or before sharing materials.
Children and family sessions
The website is not directed to children under 13. Adults book sessions. An adult is responsible for permission to photograph minors.
The website and online forms are not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the site. If you believe a child submitted website personal information, contact us and we will delete it.
Adults may book family or group sessions that include children. The adult who books is the customer. That adult is responsible for having authority to have each minor photographed and for the information they submit about the group.
Images of children made during a booked session are treated as session records of the adult client's project. They are not a child account and they are not collected from the child through the website.
How long we keep information
We keep records only as long as reasonably needed for the work, the law, taxes, and security.
| Record type | Typical retention | Reason |
|---|---|---|
| Inquiry and booking requests that do not become a booking | Up to 24 months | Follow-up and studio records |
| Active client session records, galleries, edits, and approvals | Up to 7 years unless a shorter or longer period is agreed | Delivery, reorders, and dispute handling |
| Invoices, payment, refund, tax, and accounting records | At least 7 years, or longer if the law requires | Tax and legal obligation |
| Hashed form rate-limit data | A short window measured in minutes to hours | Abuse prevention |
| Security and website logs | A limited period appropriate for security and debugging | Security |
| Consent records held by the consent tool | As long as reasonably needed to honor choices and demonstrate compliance | Consent accountability |
| Optional marketing contact records | Until opt-out, deletion, or the business need ends | Communications |
How we protect information
We use HTTPS, limited access, reputable vendors, and a payment boundary that keeps card numbers off this website.
We use HTTPS/TLS, access controls, limited administrative access, reputable service providers, and routine software updates. Inquiry forms reject likely payment-card data before storage. Connecting IP addresses used for rate limiting are stored as a hash, not as a marketing identifier.
No website, email system, or storage system is perfectly secure. The Trust & Security page describes the public safeguards in more detail.
Your rights under GDPR and UK GDPR
EEA and UK residents can ask to access, correct, delete, export, restrict, or object to personal data, and can withdraw consent.
If you are in the European Economic Area or the United Kingdom, you may have the following rights, subject to legal limits:
- Access — ask for a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate personal data.
- Erasure — ask us to delete personal data when the law allows.
- Restriction — ask us to limit how we use personal data in certain cases.
- Portability — ask for a machine-readable copy of data you provided, where that right applies.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — withdraw consent where we rely on it, without affecting earlier lawful use.
- Lodge a complaint — contact your local data-protection authority.
To make a request, use the methods in How to make a privacy request. We aim to respond within 30 days unless the law allows more time.
You also have the right to lodge a complaint with your supervisory authority. In the United Kingdom that is the Information Commissioner's Office. In the EEA it is the authority in your country of residence.
California notice at collection and CCPA / CPRA rights
California residents can ask what we collected, request deletion or correction, and opt out of sale or sharing.
This section is the notice at collection for California residents and describes rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act. Similar rights may exist under other U.S. state privacy laws. We provide these choices to any visitor who asks, not only when a threshold or state statute clearly applies.
| CCPA category collected in the past 12 months | Examples | Sources | Business purpose |
|---|---|---|---|
| Identifiers | Name, email, phone, postal address, IP address | You; your device; service providers | Inquiries, booking, delivery, security |
| Customer records information | Billing contact details, session notes | You; payment processor | Contract, invoicing, fulfillment |
| Commercial information | Quotes, invoices, order history, refunds | You; Stripe; studio records | Sales records and support |
| Internet or electronic activity | Pages visited, consent events, diagnostic logs | Your device; Cloudflare; Termly | Site operation and security |
| Approximate geolocation | Country or region derived from IP | Cloudflare | Consent defaults and security |
| Audio or visual information | Session photographs and related files | The photography session | Delivering the service you booked |
| Professional or employment information | Company name, if you provide it | You | Brand-session planning |
We do not collect Social Security numbers, driver's-license numbers, account logins, precise GPS, or biometric templates. Session photographs are not used as biometric identifiers.
California residents may request: the categories and specific pieces of personal information we collected; the categories of sources; the business or commercial purposes; the categories of recipients; deletion; correction; opt-out of sale or sharing; limitation of sensitive personal information to what is necessary; and non-discrimination for exercising these rights.
We aim to respond to California requests within 45 days, unless the law allows more time. If we need more time, we will say so.
We do not offer a financial-incentive program that trades discounts for personal information.
How to make a privacy request
Use the contact form, email, or mail. We may need to verify who you are before we complete the request.
You can submit a privacy request in any of these ways:
- Email contact@photosofben.com with the subject line "Privacy request".
- Use the contact form and say that you are making a privacy request.
- Write to Ben Creative LLC, 609 Scott St, Hinesville, GA 31313, USA.
Include your name, a contact method, the request you want to make, and enough detail for us to find the relevant records. If you are an authorized agent, include proof of your authority.
We may ask for information needed to verify your identity and authority. We may deny or limit a request where the law allows, including when records must be kept for tax, accounting, security, dispute, fraud-prevention, or other legal reasons.
If we deny a request that a U.S. state privacy law lets you appeal, you may email us and ask for an appeal. We will review the decision and reply in writing. If the appeal is denied and the law gives you a regulator path, we will tell you how to contact that regulator.
International visitors and transfers
We are based in the United States. Information is processed in the United States and in other countries where our vendors operate.
Ben Creative LLC operates from Georgia in the United States. If you visit the site or write to us from another country, your information may be processed in the United States or in other countries where our service providers operate. Those countries may have different data-protection laws than your country.
When legally required, we rely on appropriate safeguards such as contractual protections with service providers, including Standard Contractual Clauses where they apply.
Changes to this policy
When the policy changes, we update the date at the top. Material changes are posted on this page.
We may update this policy as the website, services, vendors, or legal requirements change. We will change the effective date above. For a material change that affects current clients, we will also post a notice on this page and, where we have an email address for the client relationship, we may send a notice.
Continued use of the website after an update means the updated policy applies to later use.
Contact
Questions about this page may be sent by email, through the contact form, or by mail to the studio address. The street address below is the studio and operating address, not a registered-agent address.
- Legal entity
- Ben Creative LLC, a Wyoming limited liability company
- Contact form
- photosofben.com/contact
- Studio / operating address
- 609 Scott St, Hinesville, GA 31313, USA