Privacy notice · reviewed July 24, 2026
Who handles your information
Troy Photos, operated by Brandon, is responsible for deciding how information submitted through this website is used. The site uses ChatGPT Sites and its hosting providers to operate the website, database, and private file storage, and Formspree to deliver administrator email alerts.
Contact messages
When you use the contact form, Troy Photos receives the name, email address, subject, inquiry type, and message you provide. This information is used to review and respond to your inquiry, maintain a record of the conversation, protect the form from abuse, and handle any request you make.
Print requests
When you request a print, Troy Photos receives the contact details, image choice, print preferences, notes, and confirmations you provide. If you submit your own image, a private evaluation copy and its embedded metadata—including possible camera or location metadata—are stored so Brandon can evaluate and, if you later approve a quote, fulfill the request.
Customer files are isolated from the public portfolio. They are not published, presented as Troy Photos work, attached to notification emails, sold, or used for advertising or social media. Only authorized Troy Photos administrators can access the private request record and file.
Email notifications
Contact and print-request details are sent through Formspree solely to alert Troy Photos. Customer image files are not included in those emails. The private destination address is stored in protected server settings and is not shown on the public website.
Your privacy rights and choices
Depending on where you live, privacy law may give you additional rights. Regardless of location, you may ask Troy Photos to:
- Confirm whether information connected to your inquiry or print request is stored.
- Provide a copy of the information you submitted.
- Correct inaccurate contact or request information.
- Delete an inquiry, print-request record, and associated private customer upload.
- Restrict or stop use of your information for a pending request you no longer want to pursue, subject to records that must reasonably be retained for security or legal obligations.
- Withdraw a permission you previously gave for an optional use.
- Appeal a decision if a privacy request is denied, where applicable.
These choices are offered as a consistent baseline regardless of location; local law may provide additional rights. Use the privacy-request form and include any inquiry or print reference number. Troy Photos may need to verify that the request comes from the person connected to the record before releasing or deleting personal information. An authorized agent may submit a request, but authorization and identity may need to be verified.
Children’s privacy
Troy Photos is a general-audience portfolio and is not directed to children under 13. The contact and print forms use a neutral age-range screen before any name, email address, message, or image field appears. Visitors who choose “Under 13” are not shown those fields and may not submit personal information through the forms. A parent or guardian may contact Troy Photos in their own name.
The selected age range is used in the browser and checked by the server only to decide whether the form may be submitted. It is not saved with the inquiry. Visitors ages 13–17 may send a general inquiry, but a parent or guardian must participate before any purchase, license, or commission is agreed. If you believe a child under 13 submitted information despite these controls, use the privacy-request form so it can be investigated and deleted.
Retention and deletion
Contact messages and print requests remain private and are retained only while reasonably needed for correspondence, quotation, fulfillment, dispute prevention, security, or legal recordkeeping. Archiving only changes the administrator’s view; it does not delete the record. Permanent deletion removes the request, and deleting a customer print request also removes its private uploaded file.
Security and abuse prevention
The site uses non-reversible request identifiers, strict file checks, size limits, access controls, and timing and frequency controls to limit automated abuse. Raw IP addresses are not intentionally stored with contact or print-request records. No internet system can be guaranteed completely secure, so visitors should not submit payment-card data, government identifiers, medical information, or other unnecessary sensitive information.
Photography metadata
Public pages show only metadata Brandon has deliberately reviewed and published. Private Troy Photos originals and customer-uploaded files may contain additional metadata that is not displayed publicly.
Tracking, cookies, and local storage
Troy Photos does not use advertising trackers, behavioral profiling, cross-context behavioral advertising, or sales tracking. Personal information is not sold or shared for targeted advertising. The hosting and security infrastructure may use strictly necessary cookies or network controls to deliver the site, protect administrator sessions, and prevent abuse.
Optional first-party analytics run only after you choose “Allow anonymous analytics.” The site then counts page views and selected interactions—such as opening a photograph or following a prints, licensing, or Instagram link—in daily aggregate totals. It does not create visitor profiles or intentionally store raw IP addresses, precise location, advertising identifiers, or cross-site browsing history. Aggregates are automatically limited to approximately 13 months. A browser Global Privacy Control or Do Not Track signal prevents optional measurement.
The public site stores your choice in local storage so it can be respected on later visits. The preference contains no name, email address, account identifier, or advertising ID. Use “Privacy choices” in the footer to reject or allow optional analytics at any time; changing the choice affects future measurement.
International and state privacy rights
Privacy rights differ by jurisdiction. Troy Photos applies the request choices described above as a practical baseline and will evaluate additional rights that apply to a verified request. The site is not currently designed to process health information covered by HIPAA and visitors must not submit medical records or other regulated health information.
Terms and changes
The terms of use explain the conditions for using the site and submitting material. This notice may be revised when the service or applicable requirements change. The reviewed date at the top identifies the current version.
Accessibility
This notice and the request process are intended to be accessible. If the form creates a barrier, review the accessibility statement and request another reasonable way to submit your request.