CleftClips, LLC dba Mandee Johnson Photography and MJP Weddings ("we," "us," or "our") is committed to protecting the privacy of our clients and visitors to our website, www.mjpweddings.com and www.mandeejohnson.com. This Privacy Policy outlines how we collect, use, and protect your personal information. By using our website or services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect
We may collect the following types of information from you:
- Personal Information: This includes your name, email address, and phone number, which we collect when you fill out forms on our website or contact us directly.
- Photography Session Information: This may include details about your wedding, family session, or specific photo preferences.
- Payment Information: Payments are processed securely through Stripe via our customer relationship management system (Dubsado), but we do not access your payment details.
- Usage Data: We collect data through Google Analytics and Squarespace Analytics, including your IP address, location data, browser type, browsing behavior on our site, clicks, internal links, pages visited, scrolling, searches, and timestamps. We use this data to analyze site traffic and user interaction.

2. How We Use Your Information
We use the information we collect in the following ways:
- Service Provision: To provide and manage the photography services and digital downloads you request.
- Customer Support: To respond to inquiries, provide support, and manage client interactions.
- Analytics: To understand how visitors use our website and track interests using Google Analytics and Squarespace Analytics. We retain this data as long as Google and Squarespace maintain it.
- Legal and Security Purposes: To protect the safety, security, and legal rights of our business and clients.

3. Email Marketing
We only send marketing emails to clients and potential clients who have provided explicit consent. You can opt-in via the checkbox on our contact forms or during the booking process. You may withdraw consent at any time by clicking the “unsubscribe” link in any marketing email.

4. Data Security and Breach Notification
We take appropriate measures to protect your personal information from unauthorized access, use, or disclosure. In the event of a data breach, we will notify affected clients via email as soon as possible and comply with any legal obligations to report breaches to relevant authorities.

5. European Union Clients (GDPR Compliance)
If you are a resident of the European Union (EU), you have the following rights under the General Data Protection Regulation (GDPR):
- Access: You have the right to request access to your personal data that we hold.
- Correction: You can request that we correct any inaccuracies in your data.
- Erasure: You can request that we delete your data, subject to legal obligations to retain certain information.
- Portability: You can request a copy of your personal data in a structured, commonly used format.
- Withdrawal of Consent: You can withdraw consent for us to use your data, where consent is required, without affecting the lawfulness of processing based on consent before its withdrawal.
We ensure that all third-party service providers we use, such as Squarespace, Stripe, and Google Analytics, are GDPR compliant. To exercise any of these rights, please contact us at m@mandeejohnson.com.

6. Forms and Blog Comments
When visitors submit forms on our website, we collect the data shown in the form, along with their IP address and browser user agent string to help detect spam. Form submissions are only kept if the submitter becomes a client. If visitors leave comments on our blog, we collect the data shown in the comments form, their IP address, and browser user agent to help with spam detection. Visitor comments may be checked through an automated spam detection service.

7. Cookies and Tracking
Our website, hosted on Squarespace, uses both essential and optional cookies to enhance your experience and track site performance. In addition to cookies, we collect personal data through Squarespace Analytics, including:
- Information about your browser, network, and device.
- Web pages you visited before coming to this website.
- Your IP address, clicks, internal links, pages visited, scrolling, searches, and timestamps.

We share this data with Squarespace to help monitor traffic and improve website functionality. For more details, visit Squarespace Analytics.

You can manage your cookie preferences through your browser settings or via the cookie consent banner on our site. For more detailed information on how Squarespace uses cookies, please visit their support page.

8. Retention of Personal Information
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Form submissions are only kept if the submitter becomes a client.

9. Backup and Data Recovery
Mandee Johnson Photography uses Pic-Time or Filemail to deliver downloadable images to clients. Once photos are delivered, clients are responsible for downloading and backing up their files within the access period specified in their photo agreement. After the specified period, access to the files may no longer be available, and Mandee Johnson Photography cannot guarantee storage beyond that time.

To ensure safety and data security, Mandee Johnson Photography double-backs up files on hard drives that are stored in a fireproof safe. Mandee Johnson Photography shall make good-faith efforts to ensure that data is protected (waterproof casing, double backups, etc.). However, the Client agrees that Mandee Johnson Photography will not be held legally, financially, or emotionally liable for any footage loss due to any Force Majeure Event, corruption, theft, or damage during the specified 12-month period outlined in the photo agreement.

10. Third-Party Service Providers
We use trusted third-party providers to help manage and deliver our services. These include:
- Dubsado for customer relationship management (CRM) to store client details and manage interactions.
- Pic-Time or Filemail for delivering digital files to clients.
- Squarespace for website hosting and data storage.
- Google Analytics for tracking site usage.
- Stripe for secure payment processing.

These third-party providers are compliant with relevant data protection laws, including GDPR, where applicable.

11. Accessibility
We are committed to making our website accessible to all users and are continuously working to improve accessibility. If you encounter any issues using the site or have suggestions for improving accessibility, please contact us at m@mandeejohnson.com.

12. Client Rights and Contact Information
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

CleftClips, LLC
12400 Wilshire Boulevard, Suite 1275 
Los Angeles, California 90025 
Telephone: 310.820.7600

Last Updated: 9/8/24