Privacy Policy
Last Updated: January 7, 2026
Your privacy matters to me. This policy explains what information I collect, how I use it, and your rights regarding your personal data. I've written this in plain English because legal jargon shouldn't be a barrier to understanding how your information is handled.
1. Who We Are
Meg Russell Photography is a fine art photography business operated by Meg Stone, an S Corporation based in Novato, California. When I say "I," "me," or "my" in this policy, I'm referring to Meg Russell Photography and its owner.
Contact Information:
Email: meg@meg-stone.com
Website: meg-stone.com
2. Information I Collect
Information You Provide Directly
When you purchase a print or sign up for my email list, I collect:
Contact Information: Your name, email address, phone number
Shipping Information: Your mailing address
Payment Information: Payment details are processed securely through Squarespace and Stripe. I never see or store your full credit card numbers
Order Information: Details about the prints you purchase, order history, and preferences
Communication: Any messages you send me through email, contact forms, or social media
Information Collected Automatically
When you visit my website, I may automatically collect:
Device Information: Your IP address, browser type, device type, operating system
Usage Information: Pages visited, time spent on pages, links clicked, referring website (if you came from another site)
Cookies and Similar Technologies: Small data files stored on your device (see the Cookies section below)
Information from Third Parties
I may receive information about you from:
Social Media: If you interact with me on Instagram or other platforms
Analytics Services: Aggregated data from Google Analytics (if enabled)
3. How I Use Your Information
I use your information to:
Fulfill Your Orders
Process payments and prevent fraud
Ship your prints to the correct address
Send order confirmations and shipping updates
Handle returns, exchanges, or customer service inquiries
Communicate With You
Send newsletters and updates about new work (only if you've opted in)
Respond to your questions and requests
Notify you about promotions or special offers (you can opt out anytime)
Improve My Business
Understand which prints and content resonate with visitors
Improve website functionality and user experience
Analyze trends and customer preferences
Develop new products and services
Legal Compliance
Comply with applicable laws and regulations
Respond to legal requests or prevent fraud
Protect my rights and the rights of others
4. How I Share Your Information
I respect your privacy and will never sell your personal information. I only share your information with trusted partners who help me run my business:
Service Providers
Squarespace: Website hosting and e-commerce platform
Stripe: Payment processing (they handle all credit card transactions securely)
Flodesk: Email marketing platform (only if you've subscribed to my emails)
Shipping Carriers: USPS, FedEx, or UPS to deliver your orders
Google Analytics: Website analytics (when enabled, and data is anonymized)
Legal Requirements
I may disclose your information if required by law, court order, or government request, or to protect my legal rights.
Business Transfers
If I sell or transfer my business, your information may be transferred to the new owner as part of that transaction. You'll be notified if this happens.
5. Cookies and Tracking
My website uses cookies—small text files stored on your device that help the site function properly and remember your preferences.
Types of Cookies I Use
Essential Cookies: Required for the website to function (shopping cart, checkout process). These cannot be disabled.
Analytics Cookies: Help me understand how visitors use my site (Google Analytics, if enabled). These are optional.
Marketing Cookies: May be used for retargeting ads on social media platforms (Instagram, Facebook). These are optional.
Managing Cookies
You can control cookies through your browser settings. However, disabling essential cookies may prevent certain features from working properly. Most browsers allow you to:
View and delete cookies
Block third-party cookies
Block cookies from specific sites
Block all cookies (may affect website functionality)
6. Your Privacy Rights
You have rights regarding your personal information:
Access and Portability
You can request a copy of the personal information I have about you.
Correction
You can ask me to correct any inaccurate information.
Deletion
You can request that I delete your personal information (subject to legal obligations like tax records).
Opt-Out
You can unsubscribe from marketing emails at any time by clicking the "unsubscribe" link at the bottom of any email or by contacting me directly.
Do Not Track
Some browsers have "Do Not Track" features. While I respect your privacy preferences, my website doesn't currently respond to Do Not Track signals.
To exercise any of these rights, please contact me at:
meg@meg-stone.com
I'll respond within 30 days.
7. Data Security
I take reasonable measures to protect your information from unauthorized access, loss, or misuse:
Secure Hosting: Squarespace uses industry-standard security measures
Encrypted Payments: All payment processing is encrypted via SSL/TLS
Limited Access: Only I have access to customer information, and I never share login credentials
Regular Updates: I keep software and security measures up to date
However, no method of transmission over the internet is 100% secure. While I strive to protect your information, I cannot guarantee absolute security.
8. Data Retention
I retain your information for as long as necessary to:
Fulfill orders and provide customer service
Comply with legal obligations (e.g., tax records for 7 years)
Resolve disputes or enforce agreements
Send marketing communications (if you've opted in)
If you request deletion of your data, I'll remove it from active systems but may retain certain information as required by law.
9. Children's Privacy
My website and services are not directed to children under 13. I do not knowingly collect personal information from children. If I learn that I've inadvertently collected information from a child under 13, I'll delete it promptly.
10. International Users
My business is based in the United States. If you're accessing my website from outside the US, please note that your information will be transferred to and processed in the United States, where privacy laws may differ from your country.
European Users (GDPR)
If you're in the European Economic Area (EEA), you have additional rights under GDPR:
Right to object to processing
Right to restrict processing
Right to data portability
Right to withdraw consent
Right to lodge a complaint with your supervisory authority
California Users (CCPA)
If you're a California resident, you have additional rights under CCPA:
Right to know what personal information is collected
Right to know if personal information is sold or disclosed
Right to opt-out of the sale of personal information (I don't sell your data)
Right to deletion
Right to non-discrimination for exercising your rights
11. Third-Party Links
My website may contain links to third-party websites or services (like my Instagram profile). I'm not responsible for the privacy practices of these external sites. I encourage you to review their privacy policies before providing any personal information.
12. Changes to This Policy
I may update this Privacy Policy from time to time to reflect changes in my practices or legal requirements. When I make changes, I'll update the "Last Updated" date at the top of this page. For significant changes, I may notify you via email or a prominent notice on my website.
Your continued use of my website after any changes means you accept the updated policy.
13. Contact Me
If you have any questions, concerns, or requests regarding this Privacy Policy or how I handle your personal information, please reach out:
Scrunchy Mom
Email: meg@meg-stone.com
I'll do my best to respond within 30 days.
Thank you for trusting me with your information. Your privacy and security are important to me, and I'm committed to protecting them.
Privacy Policy