Privacy policy

Effective October 12, 2026

This policy explains how Connor Patterson, operating as CNOR PHOTO in Washington State, United States, handles personal information connected with cnorphoto.com. For privacy questions or requests, contact hello@cnorphoto.com.

What we collect and why

• Inquiries you send. If you email us, we receive your name, email address, message and any project details you choose to share, such as dates, locations and intended image use. We use this information to reply, discuss your project and manage our business relationship.
• Website delivery and security. Our hosting and image-delivery providers process technical information such as IP address, browser information, requested resources and request times to deliver the website, troubleshoot errors and protect their services.
• Optional analytics. If you allow analytics, Google Analytics processes page views, basic session/engagement information, clicks on our public email link, device/browser characteristics, country/region and cookie identifiers so we can understand and improve the portfolio. Google receives connection information, including your IP address, when your browser contacts its service. We disable granular location/device collection, automatic form and search tracking, and automatic detection of names, email addresses, phone numbers and addresses. Our analytics configuration omits page query strings, URL fragments and the referring page.
• Your privacy choice. We store your analytics choice, the policy version and the time of your choice on your device. This is used to respect your preference, not to identify you for advertising.

Your project inquiry stays in your control

The project form prepares a draft in your own email application. It does not upload its fields to a website database or send an email automatically. We receive the details only when you send the email. Your email provider may process or save the draft under its own policy. Google Analytics is not loaded on our contact page. Please do not include payment-card details, passwords or sensitive personal information in your inquiry.

This website has no account registration, mailing-list signup, online checkout, booking processor or private client photo-delivery service. An inquiry does not subscribe you to marketing.

Cookies and similar storage

Analytics is off until you choose “Allow analytics.” Rejecting it does not limit your access to the portfolio or contact options. Closing the notice leaves your existing choice unchanged. We do not load Google Analytics or send analytics data to Google before you opt in.

Use “Cookie settings” in any page footer to change your choice. Withdrawing consent disables analytics, removes accessible Google Analytics cookies for this site and reloads the page if Google’s library was already loaded. It does not delete data previously received by Google. Browser settings can also clear cookies and local storage. If storage is blocked or cleared, we may ask again.

We treat Global Privacy Control and Do Not Track signals as a request to keep optional analytics off, even if you previously allowed it. Advertising storage is denied in our website configuration. Google Signals, ad personalization, user-provided data capabilities and optional Analytics account data sharing are disabled. We do not sell personal information or share it for cross-context behavioral advertising.

Who processes information

We use Vercel for website hosting and image optimization, Cloudflare for delivery of portfolio images, Google Analytics for optional audience measurement, and email providers for correspondence. These providers process information needed for their services. We may also disclose information when required by law or reasonably necessary to protect rights, security or respond to a legal claim.

Learn more from Vercel, Cloudflare, and Google. Google explains how information from partner sites is used. External links, including social profiles, take you to services governed by their own policies.

How long information is kept

We keep correspondence and project records for as long as reasonably needed to respond to inquiries, perform agreed work, maintain business and tax records, or resolve disputes. The period depends on the nature of the project and applicable obligations. You can ask us to delete information we no longer need.

Cookie lifetimes are described above. Our Google Analytics settings retain event-level data for two months and user-level data for 14 months, with the user-level period restarting on new activity. These settings do not limit standard aggregated reports. Hosting/security logs have separate provider retention requirements. Deleting browser cookies does not delete records already received by providers. Contact us with a retention or deletion question.

Your choices and requests

Email hello@cnorphoto.com to request access to, correction of or deletion of your personal information, or to raise a concern. Include enough context for us to locate the relevant correspondence, but do not send an identity document unless we explain why it is necessary. We may need to verify a request and retain records required for legal obligations. We respond according to the rights and deadlines that apply to your request.

Depending on where you live and which laws apply, you may also have rights to restrict or object to processing, receive a portable copy, withdraw consent, appeal a decision or complain to your local privacy regulator. You can ask us to review a privacy-request decision using the same email address. We do not discriminate against you for making a privacy request.

International visitors

We operate in the United States, and our providers may process data in the United States and other countries. Where European or UK data-protection law applies, our purposes may rely on your consent for optional analytics, steps you request before entering a contract, performance of a contract, legitimate interests in responding to inquiries and protecting the website, or legal obligations. Applicable transfer protections depend on the provider and processing involved; contact us for information about your circumstances.

Children and photographs

This portfolio and inquiry service are intended for a general audience seeking professional photography, not for children under 13. We do not knowingly solicit personal information from children under 13. If you believe a child has sent us personal information, please contact us so we can address it.

Portfolio photographs may depict identifiable people. For a question or concern about a photograph, email its page link to hello@cnorphoto.com. Photography permissions, image licenses and any model or property releases are handled separately from cookie consent.

Changes to this policy

We will publish changes here and update the effective date. If the purposes of optional tracking change, we will request a new choice before enabling it.