This Client Privacy Policy explains how we collect, use, store, and protect personal information from our Clients, individuals or businesses who engage NA Visuals for website design, website hosting, photography, videography, or related services.

This Privacy Policy applies to all Clients. The other documents that govern your relationship with NA Visuals depend on the services you purchased:

• Website design and/or hosting clients: this Privacy Policy is read together with the Website Design Terms of Service, Website Hosting Terms of Service, and Refund Policy.
• All other clients: this Privacy Policy is read together with your signed Service Agreement and the Refund Policy.

This Privacy Policy does not apply to individuals who visit or submit information through websites we design, host, or manage on behalf of our Clients. That information is governed by the applicable Client’s own privacy policy (see Section 5).

By becoming a Client, booking a service, or completing a transaction, you acknowledge that you have read and understood this Privacy Policy and consent to its terms.

its terms.

• “Personal Information” means any information that identifies, relates to, or could reasonably be linked to an individual, such as a name, email address, phone number, mailing address, IP address, payment details, or visual likeness (photographs or video recordings).
• “Client” means any individual or entity that engages NA Visuals for website design, website hosting, photography, videography, or related services.
• “Services” means all services provided by NA Visuals, including website design, website hosting, photography, videography, and online consultations.
• “Client Content” means all content, data, graphics, images, logos, text, and any other materials that a Client provides to NA Visuals or uploads to their hosted website.
• “Creative Assets” means photographs, video recordings, raw footage, edited files, and any other visual or audiovisual materials created by NA Visuals in the course of providing photography or videography services. Creative Assets may also constitute Digital Deliverables as defined in the Refund Policy.
• “Third-Party Providers” means external companies, platforms, or services we use to help operate our business or deliver our Services.
• “Business Days” means Monday through Friday, excluding federal holidays observed by NA Visuals.

NA Visuals is the Data Controller of our Clients’ Personal Information. This means we determine the purposes and means of processing Client data such as names, email addresses, billing information, account credentials, and Creative Assets produced through photography or videography services.

Where individuals submit information through websites we host or manage on behalf of a Client (for example, contact form submissions, e-commerce orders, or newsletter signups), we process that information solely on behalf of and at the direction of the Client. The Client is the Data Controller of that information and is solely responsible for maintaining a compliant privacy policy on their website, providing appropriate disclosures to their visitors, and ensuring that all data collected through their website complies with applicable laws.

In the course of providing our Services, we collect the following types of information from Clients:

4.1 Personal Contact Information

• Full name
• Personal address
• Business name or brand name
• Business address
• Email address
• Phone number

4.2 Account and Admin Information

• Admin login email and username
• Role or permissions related to your website
• Settings and preferences within your admin dashboard

4.3 Payment and Billing Information

• Name on payment method
• Billing address
• Transaction details (amount, date, last four digits of card, card type, expiration date)
• Payment status and history

We do not collect or store full credit card numbers, CVV codes, or banking details. All payment processing is handled securely by Stripe using encrypted, PCI-DSS-compliant systems. NA Visuals does not process or have access to your full payment card information at any time.

4.4 Project and Content Information

• Website content, text, images, logos, graphics, and media you provide
• Design preferences, brand guidelines, and project requirements
• Files you share via email, cloud storage, or direct upload

Client Content Warranty: Clients represent and warrant that they have the legal right to provide all content and materials to NA Visuals. We assume no responsibility for the legality, accuracy, or intellectual property compliance of Client-provided content.

4.5 Creative Assets (Photography and Videography)
When providing photography or videography services, NA Visuals captures and stores visual likenesses, raw footage, unedited photographs, edited final deliverables, and associated project metadata. These Creative Assets constitute Personal Information to the extent that they contain identifiable images of individuals.

Creative Assets are stored securely and handled in accordance with the same security standards applied to all other Personal Information under this Privacy Policy. For details on how long Creative Assets are retained, see Section 10 (Data Retention).

Model Releases and Image Consent: Photography and videography sessions that involve identifiable individuals may require a separate Model Release or Image Consent Form. The Model Release is a separate legal document that governs the specific rights and permissions related to the use of an individual’s likeness. If a Model Release is required for your project, it will be provided and executed prior to or at the time of the session. The absence of a signed Model Release does not affect the data protection obligations described in this Privacy Policy; all Creative Assets containing identifiable individuals are treated as Personal Information regardless.

4.6 Technical and Usage Information

• IP address and browser details when accessing your admin dashboard
• Login timestamps and activity logs used for security and troubleshooting
• Error logs or performance data related to your website
• Device type, operating system, and browser version

4.7 Communication Information

• Emails, messages, and support requests
• Notes from consultations or online meetings (e.g., Google Meet)
• Phone call logs (date, time, duration — not recordings unless separately disclosed and consented to)

4.8 Third-Party Credentials
In the course of providing our Services, we may request that Clients provide login credentials for third-party services (such as domain registrars, email providers, or other platforms) so that we can perform requested work on their behalf. All credentials provided to us are stored securely in an encrypted password manager. We do not share, distribute, or disclose Client credentials to any third party.

4.9 Domain Administrative Access
At the Client’s request, NA Visuals may be listed as an administrative or technical contact under the Client’s domain name registration. This grants us limited access to domain-related settings and notifications to facilitate service delivery. The Client retains full ownership of their domain at all times.

In the course of providing website design and hosting services, we may have incidental access to information submitted by visitors and customers of Client websites, such as contact form submissions, e-commerce order details, newsletter signups, and website analytics. We access and process this information solely to deliver our Services to the Client and at the Client’s direction. This information is governed by the Client’s own privacy policy, not this one. Individuals who wish to access, correct, or delete information they submitted through a Client’s website should contact that Client directly; if such an individual contacts us, we will make reasonable efforts to direct the request to the appropriate Client. Upon termination of a Client’s Services, this information is deleted along with all other website data within thirty (30) calendar days.

6.1 Directly from Clients
When Clients inquire about Services, complete onboarding forms, send emails or support requests, provide content and assets for their website, participate in consultations or meetings, provide third-party login credentials for service delivery, or participate in photography or videography sessions.

6.2 Through Online Forms and Booking Systems
When Clients fill out contact, booking, or intake forms; schedule online meetings or consultations; or submit project details through an admin dashboard.

6.3 Through Payment Processing
When Clients pay for Services using our checkout or invoice links. Payment details are handled by Stripe, which shares limited billing metadata with us (e.g., card type, last four digits, transaction status).

6.4 Through Photography and Videography Sessions
When NA Visuals captures photographs or video recordings during a commissioned session. Creative Assets are collected directly through the session and stored as described in Section 4.5.

6.5 From Technical Systems
When Clients access their admin dashboard or hosted website, which may trigger logs, security events, or error reports. 

6.6 From Third-Party Platforms
We may receive or access information through platforms we use to deliver our Services, including Stripe (payment confirmations, dispute notifications), Google Workspace (form data via Google Sheets, meeting information via Google Calendar/Meet), Brevo (newsletter subscriber data), WooCommerce (e-commerce order data), domain registrars (domain status, registration information), and Google Analytics (website usage data).

We use the information we collect only as necessary to provide and improve our Services, operate our business, and comply with legal obligations.

7.1 Delivering and Managing Services
Designing and maintaining Client websites; hosting and managing website infrastructure; providing ongoing design updates and support; managing Client admin dashboards and account access; processing and fulfilling e-commerce orders on behalf of Clients; delivering photography and videography projects.

7.2 Processing Transactions
Issuing invoices and processing payments through Stripe; tracking payment status, credits, and adjustments; maintaining accounting and financial records as required by law; processing refunds in accordance with our Refund Policy.

7.3 Communication and Support
Responding to Client messages and support inquiries; sending service-related updates or notices (e.g., maintenance schedules, policy changes, project milestones); scheduling and conducting consultations; communicating with Clients about form submissions, orders, or other activity on their websites.

7.4 Security
Monitoring admin login activity for suspicious behavior; preventing unauthorized access; investigating potential security incidents; enforcing our Terms of Service.

7.5 Analytics and Performance
Using Google Analytics to monitor website traffic and user behavior, analyzing usage patterns to improve website performance; troubleshooting technical issues.

7.6 Marketing Communications
With consent, we may send Clients marketing communications about our Services, promotions, or updates via email. Clients may opt out of marketing communications at any time by clicking the “unsubscribe” link in any marketing email or by contacting us at [email protected]. Opting out of marketing communications does not affect service-related communications, which are necessary for service delivery and cannot be opted out of while you are an active Client.

7.7 Creative Asset Usage
Delivering final edited photographs and videos to Clients; storing raw and edited files for project records and potential future use; and, with Client permission or as permitted under our Website Design Terms of Service (Section 15.5), displaying non-confidential portions of completed work in our portfolio or marketing materials.

We do not sell Personal Information to third parties.

Websites designed, hosted, or managed by NA Visuals — as well as Client admin dashboards — may use cookies and similar tracking technologies. Cookies are small text files stored on a user’s device that help websites function properly, remember preferences, and collect usage data.

8.1 Types of Cookies Used

• Essential Cookies: Required for the operation of admin dashboards, authentication, and security features. These cannot be disabled without affecting core functionality.
• Functional Cookies: Remember user preferences and settings to enhance experience.
• Analytics Cookies: Used by Google Analytics to collect anonymized data about how visitors use a website, including pages visited, session duration, and traffic sources.
• Performance Cookies: Monitor and optimize website loading speed and performance.

8.2 What We Do Not Do

• We do not use cookies for third-party advertising.
• We do not use cookies to track users across other websites.
• We do not sell cookie data to third parties.

8.3 Managing Cookies
Users can manage cookie preferences through their browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may affect the functionality of admin dashboards and hosted websites.

Clients are responsible for providing appropriate cookie disclosures and consent mechanisms on their own websites where required by applicable law.

We do not sell, rent, or trade Personal Information. We only share information with third parties as necessary to deliver our Services or comply with legal obligations.

9.1 Hosting Infrastructure
Client websites are hosted on third-party server infrastructure provided by VPS (Virtual Private Server) and managed hosting providers. These providers supply the server resources, network connectivity, and physical data center security for Client websites. Client website data, including databases and files, resides on these servers.

9.2 Software and Platform Providers
The following third-party platforms are used in the operation of our Services and may process or store Personal Information:

• Stripe — Payment processing for Client invoices and subscriptions
• Google Workspace (Gmail, Google Drive, Google Sheets, Google Calendar, Google Meet) — Communication, file storage, form data management, scheduling, cloud backups
• Google Analytics — Website traffic and usage analytics for Client websites
• Brevo — Email marketing and newsletter management
• WooCommerce — E-commerce functionality on Client websites (operates within WordPress)
• WordPress — Content management system for Client websites
• Domain Registrars (e.g., GoDaddy, Namecheap) — Domain registration and DNS management

Each provider’s handling of data is governed by their own privacy policy and terms of service.

9.3 Cloud Storage and Backups
Client website data is backed up both on our hosting servers and to cloud storage providers (including Google Drive). Backup files may contain website databases, media files, and configuration data. Cloud backups are stored in secure, access-controlled environments.

9.4 Legal Requirements
We may disclose Personal Information if required by law or in response to valid legal requests, such as subpoenas, court orders, government audits, or law enforcement requests. We will attempt to notify the affected party of such requests unless prohibited by law.

9.5 Business Transfers
If NA Visuals undergoes a merger, acquisition, sale of assets, or restructuring, Personal Information may be transferred as part of that transaction. We will make reasonable efforts to notify affected parties before any such transfer.

9.6 Credential Handling
When Clients provide us with third-party login credentials to perform requested services, those credentials are stored in an encrypted password manager and are never shared with, disclosed to, or accessible by any third party.

We retain Personal Information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law.

• Billing and Transaction Records: Retained as required by applicable federal and state tax and accounting laws.
• Project and Website Assets: Retained while Services are active and for thirty (30) calendar days following termination of Website Hosting Services, after which all website data, including backups, will be permanently deleted unless a Post-Termination Asset Transfer is requested under our Website Hosting Terms of Service (Section 22.5) or Website Design Terms of Service (Section 20.5).
• Creative Assets (Photography/Videography): Raw files, edited deliverables, and associated project metadata from photography and videography sessions are retained indefinitely for project records, portfolio use (where permitted), and potential future Client requests. Clients may request deletion of Creative Assets at any time (see Section 11).
• Admin and Access Logs: Retained for up to twelve (12) months on a rolling basis.
• Communication Records: Retained for the duration of active Services and for a reasonable period afterward to support dispute resolution.
• Data Submitted Through Client Websites: Contact form submissions, e-commerce order data, and newsletter subscriber information are retained for the duration of the Client’s active Services and deleted along with all other website data within thirty (30) calendar days of termination.
• Third-Party Credentials: Deleted from our password manager within fourteen (14) calendar days of termination of Services.

Depending on applicable laws, you may have certain rights regarding your Personal Information. However, certain rights are subject to important limitations while you maintain active Services with NA Visuals.

11.1 Limitations During Active Services
Important: While you maintain an active Website Hosting Subscription, Website Design engagement, or any other active Service with NA Visuals, certain Personal Information is required for the continued operation, maintenance, and delivery of those Services. This includes, but is not limited to:

• Account and admin credentials (login email, username, role permissions)
• Contact information used for service-related communications (name, email, phone number)
• Billing and payment information necessary for processing recurring subscription charges
• Technical data required for website hosting, security, and performance (IP logs, error logs, server configurations)
• Website content, files, databases, and backups necessary for your website to function
• Third-party credentials stored on your behalf to maintain integrations and services you have requested
• Domain administrative contact information

You may not request deletion of data that is required for the operation of your active Services. A request to delete such data will be treated as a request to terminate your Services. If you wish to proceed with deletion of operationally required data, you must first cancel your active Services in accordance with the agreements governing them (for website clients, the Website Hosting Terms of Service (Section 22) and Website Design Terms of Service (Section 20)). Once Services are terminated, deletion will proceed in accordance with the timelines described in Section 10 (Data Retention) of this Privacy Policy.

You may, however, request deletion or modification of data that is not required for the operation of your active Services, such as Creative Assets from photography or videography projects, marketing preferences, or other non-essential information. Such requests will be evaluated on a case-by-case basis.

11.2 Right to Access
You may request a copy of the Personal Information we hold about you, including any Creative Assets, project files, or account data. This right is available to you regardless of whether your Services are active or terminated.

11.3 Right to Correction
You may request that we correct inaccurate or incomplete Personal Information at any time, whether your Services are active or terminated.

11.4 Right to Deletion (After Termination)
Following termination of all active Services, you may request that we delete your Personal Information, including Creative Assets (raw files, photographs, video recordings), project files, and account data. Deletion requests are subject to legal and contractual retention obligations (for example, we are required to retain certain billing and transaction records for tax compliance as described in Section 10). We will respond to deletion requests within forty-five (45) days.

11.5 Right to Opt-Out of Marketing
You may opt out of marketing communications at any time by clicking the “unsubscribe” link in any marketing email or by contacting us at [email protected]. Opting out does not affect service-related communications, which are necessary for the operation of your active Services and cannot be opted out of while Services remain active.

11.6 Right to Request Creative Asset Deletion
If you are an individual whose likeness appears in Creative Assets (photographs or video recordings) produced by NA Visuals, you may request that we delete those assets regardless of whether Services are active or terminated. Requests should be submitted in writing to [email protected] and should include sufficient detail to identify the relevant materials. Deletion of Creative Assets is subject to any existing contractual obligations between NA Visuals and the commissioning Client.

11.7 How to Exercise Your Rights
To exercise any of the rights described above, please contact us at [email protected] with a clear description of your request, your name and contact information, and sufficient information to verify your identity. We will respond to valid requests within forty-five (45) days. There is no fee for exercising your rights, unless your request is manifestly unfounded or excessive.

12.1 Where Data Is Stored
Client data may be stored in the following locations:

• Hosting servers operated by our VPS and managed hosting providers (website files, databases, admin dashboards)
• Google Drive (cloud backups, project files, form data via Google Sheets)
• Stripe (payment and billing data)
• Brevo (newsletter subscriber data)
• Encrypted password manager (Client-provided third-party credentials)
• Local and cloud storage (Creative Assets from photography/videography)

12.2 Security Measures

• Secure, password-protected systems and admin panels
• Encryption of data in transit (HTTPS/SSL) on all hosted websites
• Access to Client and Site Visitor information restricted to authorized personnel only
• Firewalls and malware protection on hosted websites
• Regular security updates and patches
• Secure, automated backup systems
• Encrypted password manager for credential storage
• Industry-standard encryption for data at rest where supported by the storage provider

12.3 Client Responsibilities
Clients are responsible for safeguarding their own login credentials and passwords; using strong, unique passwords for their admin account; notifying us immediately if they suspect unauthorized access; and keeping their contact and billing information up to date.

12.4 Limitations
No method of data transmission or electronic storage is 100% secure. While we use commercially reasonable and industry-standard measures to protect Personal Information, we cannot guarantee absolute security. If you suspect unauthorized access to your website or account, contact us immediately at [email protected].

Client websites and our communications may contain links to third-party websites, plugins, or services that are not operated by NA Visuals. We are not responsible for the privacy practices of these third parties, and this Privacy Policy does not apply to their services.

Client websites may include third-party integrations (such as Google Analytics, WooCommerce, Brevo, social media widgets, or payment processors) that collect information directly from visitors to those websites. Clients are responsible for disclosing these integrations and their data collection practices in their own privacy policy.

Because photography and videography services involve capturing the visual likenesses of individuals, these services carry additional privacy considerations.

14.1 What We Capture and Store
During a commissioned photography or videography session, we capture and retain raw (unedited) files, edited final deliverables, and associated project metadata (date, location, session details). These files may contain identifiable images of individuals and are treated as Personal Information under this Privacy Policy.

14.2 Model Releases
Sessions involving identifiable individuals may require a separate Model Release or Image Consent Form, which is a standalone legal document governing the rights and permissions related to the use of a person’s likeness. If applicable, the Model Release will be provided and executed prior to or at the time of the session.

The Model Release governs usage rights (e.g., commercial use, portfolio display). This Privacy Policy governs how the underlying data (the images and recordings themselves) is stored, protected, and retained. Both documents work together but serve distinct legal purposes.

14.3 Retention of Creative Assets
Raw files and edited deliverables from photography and videography sessions are retained indefinitely unless a deletion request is received. Clients or photographed/filmed individuals may request deletion of Creative Assets at any time by contacting us in writing at [email protected] (see Section 11.6).

14.4 Security of Creative Assets
Creative Assets are stored using the same security standards described in Section 12.2, including access controls, encrypted storage where supported, and restricted access to authorized personnel only.

We may update this Privacy Policy from time to time to reflect changes in our Services, legal requirements, or internal practices. We will provide Clients with at least fourteen (14) days’ notice before any material changes take effect. Notice will be provided via email or through the Client’s admin dashboard.

Continued use of our Services after such changes constitutes acceptance of the updated Privacy Policy.

Any disputes arising from this Privacy Policy that cannot be resolved directly with NA Visuals shall be subject to the Dispute Resolution provisions of your applicable signed Service Agreement — for website clients, the Website Design Terms of Service (Section 24) or Website Hosting Terms of Service (Section 25); for all other clients, the signed Service Agreement. If no signed Service Agreement governs the dispute, it shall be resolved by final and binding arbitration in Los Angeles County, California, conducted in accordance with the Commercial Arbitration Rules of the American Arbitration Association (AAA).

Governing Law: This Privacy Policy shall be governed by and construed in accordance with the laws of the State of California, without regard to its conflict of law principles.

If you have any questions about this Privacy Policy, how your information is used, or if you would like to exercise any of the rights described in Section 11, you may contact us at:

NA Visuals
Privacy Inquiries Email: [email protected]

Please include your name and a detailed description of your request.