Privacy Policy

Photography in the Raw ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website or enroll in our courses and workshops.

This policy complies with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). By using our website, you agree to the practices described in this policy.

We collect the following types of personal data:

Account Data: Your name, email address, and password when you register for an account.

Enrollment Data: Course progress, lesson completions, quiz results, and assignment submissions.

Payment Data: Processed securely through Square. We do not store your full card details on our servers.

Communication Data: Messages you send via our contact forms, class enquiries, or community features.

Usage Data: IP address, browser type, pages visited, and time spent on the site — only when you consent to analytics cookies.

We process your personal data for the following purposes:

To provide and manage your account, course enrollments, and workshop registrations.

To process payments and deliver purchased products or services.

To provide assignment feedback and educational support.

To send you important account notifications and course updates.

To analyze website usage and improve our content (only with your consent).

To comply with legal obligations and protect against fraud.

Under the GDPR, we rely on the following legal bases to process your personal data:

Consent: When you agree to analytics cookies, marketing communications, or community participation.

Contract: When you enroll in a course or register for a workshop — processing is necessary to fulfill our obligations to you.

Legal Obligation: When we are required to retain data for tax, accounting, or regulatory purposes.

Legitimate Interest: To secure our platform, prevent fraud, and improve our services in ways that do not override your rights.

We use cookies and similar technologies on our website:

Essential Cookies: Required for authentication, shopping cart functionality, and security. These cannot be disabled.

Analytics Cookies: Help us understand how visitors use the site so we can improve the experience. These are only set when you provide consent.

Marketing Cookies: Used to deliver relevant content and track campaign performance. These are only set when you provide consent.

You can manage your cookie preferences at any time by clicking "Cookie Settings" in the footer of this website, or by clearing cookies in your browser settings.

We do not sell your personal data. We share data only with the following categories of processors:

Payment Processor: Square, to securely process course and workshop payments.

Service Providers: Hosting, email delivery, and analytics providers who help us operate the website.

Legal Authorities: When required by law, court order, or to protect our legal rights.

All processors are bound by data protection agreements and process data only on our instructions.

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:

Account data is retained while your account is active and for a reasonable period after deletion for legal compliance.

Enrollment and completion records are retained to verify credentials and certificates.

Payment records are retained for the period required by tax and financial regulations.

You may request deletion of your data at any time, subject to our legal retention obligations.

Under the GDPR, you have the following rights regarding your personal data:

Right of Access: You can request a copy of the personal data we hold about you.

Right to Rectification: You can ask us to correct inaccurate or incomplete data.

Right to Erasure: You can request that we delete your personal data ("right to be forgotten").

Right to Restriction: You can ask us to limit how we use your data in certain circumstances.

Right to Data Portability: You can receive your data in a structured, machine-readable format.

Right to Object: You can object to processing based on legitimate interests or for direct marketing.

Right to Withdraw Consent: You can withdraw consent for analytics or marketing cookies at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at the email address listed below.

Your personal data may be transferred to and processed in countries outside your country of residence, including the United States. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data in accordance with the GDPR.

Our website and services are not directed to children under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will promptly delete it.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or destruction. These include encrypted data transmission, secure authentication, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

Photography in the Raw

Salt Media Studios · 501 Walnut St · Frederick, CO 80530

Email: robert@photographyintheraw.com