1. Who we are

Mabille Photography (“we”, “us”) is a maternity, newborn and family photography studio based in Frisco, Texas, serving the North Dallas area. This policy explains what information we collect through mabillephotography.com (the “site”), how we use it, who we share it with, and the choices you have. It also covers the ways we communicate with you after you reach out. Photography services themselves are governed by your service agreement or, for a complimentary session, your Photo Release, which may include additional terms. By using the site, you agree to the practices described here.

2. Information we collect

Information you give us. When you send the inquiry form we collect your name, email address, phone number, the session type you are interested in, an optional due date or preferred month, and your message. The birth waitlist form collects your email address. If you sign a Photo Release or service agreement on this site, we collect the information described in section 8. If you reach out by email, phone, text or WhatsApp, we receive whatever you choose to share with us. If you interact with our profiles on Instagram or Facebook, we see what the platform shows us (such as your public profile, comments and messages), under that platform’s own terms.

Our own records. We keep a history of what happens with your booking (for example, when it was confirmed, moved or canceled, the payments we recorded and the requests you sent), and your photographer may keep short notes about your sessions, such as preferences you mention. We also keep a contact card with your name, email addresses and phone number so your sessions, documents and messages stay together.

Booking online. When you book a session on this site, we collect your name, email address and phone number, the session, date and time you choose, your idea for an outdoor location and a message (both optional), and your choice about sharing photos from your session. Each booking gets a short booking reference that identifies your booking and your payment. Before we hold your time, Cloudflare Turnstile checks that the request comes from a person, and a one-way hashed version of your IP address helps us limit repeated attempts. You then confirm your email address and sign your service agreement, as described in section 8. If you move your session or send a request from your booking page (to move it or to cancel), we keep the date and time you did it and, for a request, the reason you select and any note you write.

Information collected automatically. Like most websites, we use cookies and similar technologies (see section 5) that collect information such as the pages you visit, your approximate location, device and browser type, referring pages, and how you found the site. Our spam protection (Cloudflare Turnstile) processes technical signals to tell people from bots, and we keep only a one-way hashed version of your IP address for rate limiting; your raw IP address is not stored with your inquiry or booking (signing a document works differently; see section 8).

What we do not collect. We do not collect card or bank account details through this site. Service agreements are signed on this site (section 8); galleries and print orders happen through Pixieset, which has its own privacy policy. Apart from your due date (which you may share on the inquiry form, and which your service agreement records when a session is planned around the birth) and the children’s details described in section 8, we do not ask for sensitive information. Please do not send details such as government IDs or medical information through the contact form.

3. How we use your information

To answer your inquiry and plan your session, using the contact details you provided.
To manage the birth photography waitlist and let you know when dates open.
To send emails related to your inquiry or booking (delivered by SendGrid).
To keep a record of inquiries for scheduling and business administration.
To keep your client record: your contact card, your booking history and your photographer’s notes.
To prepare your Photo Release or service agreement, confirm your email address, record your signature, send the other adults their participant forms, and keep the signed documents (section 8).
To handle a booking you make on this site: hold the time you choose, prepare your service agreement, email you the 6-digit code, the payment instructions and updates about your booking, and let your photographer know when you book, when you tell us you sent your payment, and when you move your session or send a request from your booking page, so she can confirm it or reply. Booking does not sign you up for marketing emails or texts.
To understand how the site is used and improve its content and performance.
To measure and improve our advertising on platforms like Facebook and Instagram.
To protect the site against spam and abuse.

We use your information only for the purposes above. We never use it to build profiles unrelated to photography, and we never sell it.

4. How we communicate with you

Replying to you. When you send an inquiry, we reply using the contact details you provided, by email, phone call, text message or WhatsApp. These messages are about your inquiry or booking, not marketing.

Marketing. We only send marketing email if you have asked for it (for example, by joining the waitlist or opting in), and every marketing email includes an unsubscribe link that works with one click. We do not send promotional text messages without your prior express consent, and if you ever receive one you can reply STOP to end them. Unsubscribing from marketing never affects emails about an active inquiry or booking.

5. Cookies, analytics and advertising

Google Analytics 4 (Google LLC) helps us understand site traffic: pages visited, session duration, approximate region. Google sets first-party cookies such as _ga (up to 2 years). See the Google privacy policy or install the Google Analytics opt-out browser add-on.

Meta Pixel (Meta Platforms, Inc.) helps us measure the effectiveness of our ads on Facebook and Instagram and show ads to people who have visited the site (often called retargeting). It records the pages you visit and whether you sent an inquiry, using first-party cookies such as _fbp (about 90 days). Meta may associate this data with your Meta account under its own policy. See the Meta privacy policy and your Meta ad preferences.

Cloudflare (our host) may set strictly necessary technical cookies for security features such as bot protection. These do not track you across sites.

Online booking in your browser. When you book online, your browser keeps a few strictly necessary items so you can pick up where you left off. They are not cookies, they are not sent to us automatically and they are not used for analytics or advertising. Once your time is held, your browser stores the link to your signing page, when the hold ends and the date and time you chose; this is removed when you sign or, if the hold ends first, the next time you come back to book. In that tab only, the browser also keeps what you typed (your name, email address, phone number, location idea and message), your choice about sharing photos and the time you picked, so that “Wrong email? Back to your details” brings them back; this is removed when you sign or close the tab, and sooner if you come back to book after the hold ends.

Your choices. You can opt out of interest-based advertising at optout.aboutads.info (Digital Advertising Alliance) and block or delete cookies in your browser settings; the site works normally with cookies blocked. Because browsers implement “Do Not Track” signals inconsistently, the site does not respond to them today; the opt-outs above are the reliable path. We do not sell personal information. Advertising cookies like the Meta Pixel may count as “sharing” for cross-context advertising under some state laws. The opt-outs above and Global Privacy Control signals, which we honor where the law requires, let you turn that off.

6. Who we share information with

We never sell or rent your personal information. We share it only in these situations:

Service providers that help us run the site and our business: Cloudflare (hosting, security and data storage), Google (analytics and our business email), Meta (advertising measurement), SendGrid (email delivery) and Pixieset (galleries and print orders). Each provider processes data under its own terms, and we share only what is needed for the service to work.
Other adults in your session, under a service agreement: each adult you list, or your photographer adds, receives an invitation and a participant form that show your name and the sessions you booked, with each session’s date or date window and, when a session is planned around the birth, your due date (section 8). After an adult confirms their email address, their form also shows the first names of the children you listed (for a baby not born yet, only the first part of the temporary name) and the rule for children’s images in your agreement; it never shows full names or dates of birth.
Payments: payments for a booking are made with Zelle, in your own bank’s app, outside this site; your bank and Zelle handle them under their own terms.
Your photographer’s calendar: your photographer can subscribe to a private calendar feed of her sessions in a calendar app or service, such as Google Calendar or iCloud, which then keeps a copy of what the feed shows. For a session booked on this site, the feed shows the session type, date and time, your first name and last initial, the booking reference and the status of your booking (waiting for payment, confirmed or completed). For a session with a set date in an agreement your photographer prepared, signed or still waiting for your signature, it shows the session type, the date (and the time, if set) and your first name. Mini sessions appear only as the event, with its name, place and times, without client names. Bookings made on this site appear only once they are signed, and canceled bookings and agreements do not appear. The feed never includes your email address or phone number.
Legal requirements: if a law, court order or government request requires disclosure, or to protect our rights, clients or the public from harm.
Business transfers: if the studio is ever sold, merged or reorganized, client records may transfer with the business; the new owner remains bound by this policy or must notify you of changes.

We may use aggregated, de-identified statistics (for example, “how many inquiries came from Frisco this month”) that cannot identify you, for business planning.

7. Your photographs, copyright and print release

Like nearly all professional studios, Mabille Photography retains the copyright to the photographs we create. Every session includes a print release: you may download, print and share your images for personal, non-commercial use, for life (for a paid session, once it is paid in full).

For new paid bookings, you expressly choose either Authorized marketing use or No marketing use with the Privacy Fee quoted before signing. Authorized use covers selected photographs and short clips, including recognizable faces, for Mabille Photography's own portfolio, website, social media, and paid or unpaid campaigns advertising its photography services. The booking's recorded option also applies to children; each parent or legal guardian must have authority and give the required permission. Each other adult signs their own Form accepting that option and authorizing only their own likeness and children they may legally represent. No marketing use blocks promotional use of every image from the booking, including images without faces, even if a fee remains unpaid. Your Agreement records fixed ordinary and post-publication Privacy Fees. A later voluntary request to remove particular images follows the booking's privacy terms. For agreements expressly containing the payment condition, existing lawfully authorized publications are removed within 30 calendar days after payment of the applicable Privacy Fee and disclosed tax; new publications and new campaigns stop from the request. If no fee is due or it was already paid, the period starts with the request; a later waiver or cancellation starts it then. Legal requirements, court orders, individual permissions, and nonwaivable rights take priority. Existing signed agreements and previously issued offers retain their own choices, fees, withdrawal rights, and removal periods, including any separate faces restriction they provide.

For free sessions, the Photo Release you sign gives us a permanent, worldwide permission, which cannot be withdrawn later, to use the photos and videos from your session, with your first name only, in our portfolio, on our website and social media, in advertising (including paid ads), printed marketing, publications and competitions, and to edit and retouch them. We never publish your last name or address, and we never sell or license the images to third parties without your consent. If children are in the photos, their names are never published, and you make one choice that applies to all the children you list: faces may be shown, or no identifiable faces.

Session galleries are delivered through private Pixieset links and are not public unless you choose to share them. If you leave a review or testimonial, we only publish it with your name or initials with your permission.

For new service agreements that expressly provide for it, a voluntary privacy or removal request after the first lawful portfolio or marketing publication from the booking carries the fixed post-publication Privacy Fee shown in the agreement before signing. Before that first publication, the ordinary fee applies. A fee already charged is never charged again or increased for that same request. Legal requirements and separate participant permissions take priority.

8. Signing your Photo Release or service agreement online

Some sessions include a Photo Release, and paid sessions may include a service agreement. You can sign either one electronically on this site. The signing page is available by invitation, or from your online booking.

Photo Release. When your photographer invites you to sign, she enters your name, email address, and the date and location of your session to prepare your document. You receive the invitation by email (or a personal link she sends you), and those details are shown locked on the signing page. We also note when your invitation is sent and when you first open it, so we can follow up. To confirm your email address, we first send a 6-digit code to the address on your invitation. The signing page also keeps, in that tab only, the confirmation of your 6-digit code, with your email address partly hidden; this is removed when you sign or close the tab. When you sign, we collect:

Your details: your name, email address, phone number (optional), and the date and location of your session.
Minors in the session, if any: their names and dates of birth, which you provide as their parent or legal guardian.
Your answers: your typed initials and the choices you make on the form (for example, whether children’s faces may be shown).
Your signature: the image of the signature you draw or type.
Signing record: your IP address, your browser and device type, and the dates and times you verified your email and signed.

Service agreement. The invitation, the locked details and the 6-digit code work the same way. To prepare your agreement, your photographer enters your name, email address and phone number, the sessions you booked, their prices and the payment terms. If you book online (section 2), you enter your name, email address and phone number yourself, and the site prepares your agreement. For each session, the agreement records its location (which may be your home) and its date or, for sessions planned around the birth, a date window and your due date. When you sign, you add:

Your mailing address.
Children in the session, if any: their names and dates of birth, or the expected due date for a baby not born yet, which you provide as their parent or legal guardian.
Other adults in the session, if any: each adult’s name and email address.

Each adult you list receives an email invitation to sign their own short participant form. Each adult’s invitation and form show your name and the sessions you booked, with each session’s date or date window; when a session is planned around the birth, your due date is shown too. Each adult’s name and email address are recorded in your signed agreement, which you and your photographer receive; beyond that, we use their email address only to send them their form, the 6-digit code and their signed copy. Your photographer can also add an adult you did not list, or correct an adult’s name or email address.

Children of another adult. In their participant form, an adult can list their own children who will be in the photos and who you have not listed: each child’s name and date of birth, or the expected due date for a baby not born yet, which they provide as the child’s parent or legal guardian. To help them avoid listing a child twice, after they confirm their email address we show them only the first names of the children you listed (for a baby not born yet, only the first part of the temporary name); we never show them full names or dates of birth, and children’s names are never published. Their form records the rule for children’s images from your agreement as it stands when they sign (no marketing use, if you have opted out of all marketing use by then), and their confirmation that they are the parent or legal guardian of the children they list and authorize that rule for them. This information is stored, kept and deleted like the rest of their signed form, and they have the same rights to it as you do (sections 11 and 12).

No card or bank account details go through this site: the agreement records only the amounts, the dates and the payment method you agreed on. The agreement and each adult’s form are signed the same way as a Photo Release, with a 6-digit code sent by email, and we keep the same kind of record: the typed initials and any choices made, the signature, the IP address, the browser and device type, and the dates and times the email was verified and the document was signed.

We use this information only to keep a record of our agreement, as proof of your electronic signature and, for a service agreement, to send the other adults their participant forms. Unlike the hashed version we use for rate limiting (section 2), your IP address is kept as is here, and only for this purpose. When you sign, you receive a copy of the signed PDF by email, and so do we.

Signed releases are stored privately in the United States with Cloudflare, and access is restricted to Mabille Photography. We keep them for as long as we use the photos, and in any case for at least 4 years from the date you sign, unless the record was created in error (for example, a test or a duplicate); because a signed release is a legal record, it stays for that period even if you ask us to delete your other information. Signed service agreements and participant forms are stored the same way and kept for at least 4 years after the last session they cover, and longer if needed for tax records or an open claim, with the same exception for records created in error; they also stay for that period even if you ask us to delete your other information. We never sell this information or share it beyond the situations described in section 6 and the participant forms described above. To see a signed document or get a copy, email hello@mabillephotography.com.

9. Children

Our services are booked by parents and legal guardians. This site is not directed at children under 13 and we do not knowingly collect personal information from children online; if we learn that a child has submitted personal information through the site, we will delete it. The names and dates of birth of children in a session, or the expected due date for a baby not born yet, are given to us by their parent or legal guardian, as described in section 8. This includes children another adult lists in their own participant form; that adult sees only the first names of the children you listed, and you do not see the names of the children they list. Photographs of minors are only ever used promotionally with a parent’s or legal guardian’s written consent, as described in sections 7 and 8.

10. Where your information is stored

We are a United States business and your information is processed and stored in the United States by the providers listed in section 6. If you visit the site from outside the U.S., you understand that your information is transferred to and handled in the U.S., where privacy laws may differ from those of your country.

11. How long we keep your information

Inquiries and messages: while we are in touch and for up to 24 months afterwards, then deleted.
Waitlist emails: until we notify you or you ask to be removed.
Session images: as described in your service agreement or Photo Release. Please download and back up your images once they are delivered.
Signed Photo Releases: for as long as we use the photos, and in any case for at least 4 years from the date you sign, unless the record was created in error (for example, a test or a duplicate); see section 8.
Signed service agreements and participant forms: at least 4 years after the last session they cover, and longer if needed for tax records or an open claim, unless the record was created in error (for example, a test or a duplicate); see section 8.
Email addresses used to request a signing code without completing a signature: 30 days, then deleted during routine cleanup.
Invitations that are not signed (including canceled ones) are kept for 30 days after they expire, then deleted during routine cleanup. Invitations expire 30 days after they are created or, for a service agreement, at the end of the day the booking payment is due, if that comes first.
Bookings with a signed service agreement are kept for as long as that agreement is kept (see above).
Bookings that are not completed (an expired hold, or a booking canceled before it was signed) are kept for 30 days, then deleted during routine cleanup.
Your booking history is kept for as long as that booking is kept (see above).
Your contact card and your photographer’s notes are kept for as long as we keep another record of you from this list, then deleted during routine cleanup. You can ask to see the notes, or ask us to correct or delete them, at any time (section 12).
Rate-limiting records (a one-way hash of your IP address or email address, and the time of each attempt) are kept for 24 hours, then deleted during routine cleanup.
Analytics and advertising data: according to Google’s and Meta’s retention schedules for the tools described in section 5.

You can ask us to delete your information sooner at any time (section 12), except signed Photo Releases, service agreements and participant forms (section 8).

12. Your rights and choices

Wherever you live, we extend the same rights to you:

Access: ask what personal information we hold about you and receive a copy.
Correction: ask us to fix inaccurate information.
Deletion: ask us to delete your information, subject to legal record-keeping needs.
Portability: receive your information in a usable format.
Opt out: of marketing emails and texts at any time, and of targeted advertising via the tools in section 5. How we use your session photos is covered in section 7.

To exercise any of these rights, email hello@mabillephotography.com. We will confirm your identity using the contact details we already have, respond within 30 days, and never treat you differently for exercising your rights. We do not sell personal information as defined by the Texas Data Privacy and Security Act or the California Consumer Privacy Act; California residents may exercise their CCPA rights, and appeal a decision, by emailing the same address.

13. Links to other websites

The site links to services we do not control, such as Instagram, Facebook and Pixieset. Their privacy practices are governed by their own policies, and we encourage you to read them before sharing information there.

14. Security

The site is served over HTTPS, form submissions are protected against spam and abuse, data is stored with reputable providers, and access is limited to the people who need it. No method of transmission or storage is 100% secure, but we work to protect your information, and if a security incident ever affects your personal information, we will notify you as required by law.

15. Changes to this policy

We will post any updates on this page and revise the “last updated” date above. If a change meaningfully affects how we handle information you already gave us, we will make reasonable efforts to tell you directly.

16. Contact

Mabille Photography · Frisco, Texas
hello@mabillephotography.com · (469) 388-7510
We answer privacy questions at the same email, usually within two business days.

Privacy Policy