Privacy Policy

Bretterick Studio + Lab 412 S 700 W Ste. 120, Salt Lake City, UT 84104 brett@bretterick.com · (801) 231-4094

Last updated: September 25, 2026

I am a one-person wet plate collodion portrait studio in Salt Lake City. This policy explains what information I collect through bretterick.com, why, who else sees it, and what you can do about it. It is written in plain language on purpose.

The short version

I collect the information you give me when you book, buy or ask a question, plus ordinary web analytics about how people use the site. I use it to run sessions, take payment and understand which parts of the site work. I do not sell it. The companies that see it are the ones that actually do the work — scheduling, payment, hosting, email and analytics — and they are all named below.

What I collect

Information you give me directly

• When you book a session, workshop or call (through Calendly): your name, your email address, and your answers to the booking questions — group size, whether children are included, whether pets are included, your guests' names, whether you want digital files, and a free-text answer about what you want the session to be.
• When you buy a gift certificate (through Squarespace's checkout): your name, email address, billing address, and — if it is being mailed — a shipping address.
• When you send an inquiry or join a waitlist (through Google Forms embedded on the site): whatever that form asks, which is generally your name, contact details, a location, and a description of what you have in mind.
• When you complete the order form at your session (a Google Form): the order itself — plate sizes, quantity, digital files, delivery method — your contact and shipping details, and then, for each person being photographed, their name, their date of birth, their Instagram handle if they give one, and their signature on the model release. Where a child is photographed this includes the child's name and date of birth, entered and signed for by their parent or guardian, who is also named. Where an animal is photographed, its owner is named. The form also carries one box per person for declining to be posted on social media. What the release grants, and what that box does, are in the Terms of Service — this section only tells you what is collected.
• When you pay me in person, by phone or by message: the date, the amount, and your email address or phone number if you give them, so the sale can be recorded and matched to my advertising as described under Who else sees your information.
• When you email or call me: whatever you choose to tell me.

Information collected automatically

• Standard web-server and analytics data: pages viewed, approximate location derived from IP address, device and browser type, referring site, and the actions you take on the pricing page (which session type you looked at, how many plates you chose, and so on).
• Cookies and similar technologies set by the services listed in the next section.

What I do not collect. I do not ask for and do not want your Social Security number, your government ID, or your full card number. Card details are entered directly into Stripe's payment form and never reach me or this website — I see only the last four digits and the fact that a payment succeeded.

Payments

Payments taken online go through Stripe, in two places:

• Gift certificates are bought through Squarespace's own store and checkout, which uses Stripe.
• Sessions, workshops and paid calls are booked and paid on Calendly, which also uses Stripe.

A deposit is taken at booking and the balance is paid on the day of the session. In person I also accept cash, Venmo, and credit or debit cards.

Stripe processes your card data as a payment processor under its own privacy policy. I never store card numbers.

Analytics and advertising

This section is the honest description of what runs on this site. If you are reading it to decide whether to allow it, this is what there is.

Google Analytics 4 — measurement ID G-C15G9H60NR. It records page views and the steps people take through the pricing and booking flow, so I can see where the site is confusing. It sets cookies and assigns your browser an anonymous identifier.

Meta (Facebook) pixel — ID 1237865561245801, loaded through Squarespace's Facebook integration. Today it records page views. I use it to measure and to show ads to people who have visited the site.

Cross-domain tracking to Calendly. Booking happens on calendly.com rather than on my site. So that I can tell that a booking came from a particular visit, the site attaches your Google Analytics identifiers to the Calendly link when you click through to book. These identifiers are not your name or your email — they are the anonymous ids Google Analytics already assigned to your browser.

There is currently no cookie consent banner on this site. Analytics and the advertising pixel run for every visitor. I am telling you that rather than implying a consent step that does not exist.

There is no plan to add one, and I would rather say so than put a box in front of you that implies a choice you are not actually being given. My advertising is scoped to the United States. If that ever changes — if I advertise into somewhere that requires a consent gate — then the gate goes up and this paragraph changes with it. Until then, the honest version is the one above: this is what runs, and the section below is how to turn it off at your end.

How to opt out

• Google Analytics: install Google's official browser opt-out add-on (tools.google.com/dlpage/gaoptout).
• Meta: adjust your ad preferences in your Facebook or Instagram account settings.
• Both: most browsers let you block or delete cookies, and most tracker- blocking extensions block both of these. Blocking them will not stop you from booking or buying.

Who else sees your information

These are all of them. Each is a company doing a specific job, and each has its own privacy policy.

I do not sell your personal information, and I do not share it with anyone not on this list. I may disclose information if the law requires it.

I send Meta a coded record of each booking and sale, so I can tell whether my ads led to it. When you book and pay through Calendly, or pay me in person, by phone or by message, I send Meta the fact that a purchase happened, the date, and the amount paid. With it I send your email address and phone number, converted into a one-way code (a hash) first — Meta receives the code, never the address or the number. Meta compares that code with the codes of its own users; if it finds a match, it can tell me that an ad I ran was seen by someone who later bought, and it uses that to decide who is shown my ads. If there is no match, the record tells Meta nothing about you. I do not send your name, your address, or anything you told me about your session.

Email from me

If you have had a session or bought from me, or asked me to email you a quote, I may email you — about your order or your quote, and occasionally with news from the studio: upcoming open studio dates, a note on the anniversary of your session, a birthday offer, or sessions like the one you had. The list is kept in Mailchimp, which sends the email. Mailchimp records whether an email was opened and which links were clicked, so I can tell what is useful and stop sending what is not.

Every email has an unsubscribe link. Use it, or email me, and you are off the list. Unsubscribing stops the email; it does not change anything else in this policy.

How long I keep it

I keep it indefinitely. This is an archive, and I run it as one.

There is no deletion schedule here and I am not going to pretend there is one. Booking records, order records, inquiry and waitlist entries and the pictures from your session are kept as part of a working archive rather than cleared out on a timetable.

That is not a technicality — it is the useful part. I have digitally archived most past sessions, and people do email me years afterwards asking for the files from a shoot they had long ago. I can usually find them. If I ran a retention clock, I could not.

One honest limit, so this reads as what it is. Indefinitely means there is no expiry date on my side — it does not mean every file from every year is guaranteed to still exist. Most past sessions are archived, not all, and older work predates the way I organise things now. If a specific file from a specific date matters to you, ask and I will look rather than promise in advance.

Analytics data is the exception, because I do not control it: Google Analytics keeps it for the period configured in Google's own settings and deletes it on that schedule.

None of this stops you asking me to delete what I hold about you — see Your choices below, and read the honest limit there about the model release.

Session images sit inside that archive, and the release is why. Everyone photographed signs a model release on the order form, and the release is unrestricted and has no end date. The release, what it grants, and the box for declining to be posted on social media are all set out in the Terms of Service, which is the document that governs them.

So how far does a deletion request reach into that archive? This is the question people actually mean when they ask, so here is the honest shape of it.

What I will do, and will just do: take it down. Ask me and I will remove your pictures from anywhere the public can see them — this website, my social media, the portfolio I show people, anything of mine that is on display. You do not have to give a reason and I am not going to argue with you about it.

What stays: the archive copy. The files themselves remain in the archive unless I have agreed with you otherwise. They stop being shown; they are not destroyed. Taken down and deleted are two different things and I would rather you knew which one you were getting — the archive is the same thing that lets me find a plate from years ago when somebody writes and asks, and a tintype is a physical object that carries on existing whether or not it is on a website.

If it is deletion of the files you want, and not just a takedown, say that specifically and I will talk to you about it. That is a conversation rather than a form, and I would far rather have it than have you assume one thing while I did the other.

Your choices

You can ask me to tell you what I hold about you, correct it, or delete it. Email brett@bretterick.com and I will do it. If deleting something would break a record I have to keep — a completed order, for tax purposes — I will say so rather than quietly keeping it.

One honest limit. This covers the information I hold about you. It does not, on its own, undo the model release you signed, which is written as irrevocable and covers the photographs themselves. If what you want is for me to stop showing your pictures, say that specifically and I will talk to you about it — but ask me, rather than assuming a deletion request has already done it.

Children

This site and this studio are not aimed at children, and I do not knowingly collect information from anyone under 13 through the website itself.

Children are photographed in family sessions, and the order form handles them explicitly. A child does not sign anything. Their parent or guardian is named on the form and signs the model release on the child's behalf, and gives the child's name and date of birth. The same form gives that guardian a box to decline having the child posted on social media, separately from the adults in the same picture. What the release grants is set out in the Terms of Service, and it is the same release for a child as for an adult.

There is no narrower term for children, and that is a decision rather than something nobody thought about. A guardian signing for a child grants the same irrevocable, unrestricted rights over that child's picture that an adult grants over their own: the same wording, the same permanence, no end date, and no separate form. A child photographed at four does not acquire a fresh veto at eighteen — the release their guardian signed is the one that stands. I was asked directly whether children should be treated differently in the release, and the answer is that it stays as the release reads.

The box for declining social media is the same for a child as for anyone else: one per person, ticked by the guardian, and I keep it.

Changes

If this policy changes I will update the date at the top. If the change is significant — a new tracker, a new company seeing your data — I will say what changed rather than only bumping the date.

September 25, 2026: If you ask the pricing page to email you a quote, I may email you too. See Email from me.

September 24, 2026: Mailchimp is named. It keeps my customer list and sends my email. See Email from me and Who else sees your information.

September 16, 2026: I now send Meta a coded record of each booking and sale. See Who else sees your information.

Contact

Brett Briggs · Bretterick Studio + Lab 412 S 700 W Ste. 120, Salt Lake City, UT 84104 brett@bretterick.com · (801) 231-4094