Privacy policy

This policy explains what personal data this website collects, why, and what you can do about it. It applies to alexfeyer.com and to inquiries sent through it.

Who is responsible

The controller of your data is Alex Feyer, trading as Alex Feyer Photography. For anything about your data, write to feyer.photography@gmail.com — I answer personally.

What I collect and why

When you send an inquiry

The inquiry form asks for your name, email, type of event, date, location, budget and, if you choose, how you found me and a message. I use this only to answer you, quote and, if we work together, to prepare and deliver your photographs. The legal basis is taking steps at your request before entering into a contract (GDPR Art. 6(1)(b)).

The form is delivered to my inbox by Web3Forms (or, if it can't be sent, written out in your own email app for you to send). A copy of every inquiry also goes to the person who manages this website and its advertising for me, only so nothing is missed and the advertising can be measured. Together with your answers, the message includes how you reached the site: the page you landed on, the referring website and, if you came from an ad or a campaign link, its campaign tags (for example utm_source or the click identifiers gclid and fbclid). This helps me understand which advertising is worth paying for (legitimate interest, GDPR Art. 6(1)(f)).

If you tell me about the faith or cultural traditions of your wedding (a chuppah, a nikah, a traditional engagement), I use that only to plan the photography of your day, and it is never passed to advertising tools.

When you browse

The site is hosted by Netlify, which keeps standard server logs (IP address, browser, pages requested, time) for security and to keep the site running (legitimate interest). I don't use these logs to identify visitors.

Analytics and advertising — only with your consent

The cookie banner asks separately for two things:

• Analytics — Google Analytics 4 shows how the site is used (pages, approximate location, device), so I can improve it.
• Marketing — Google Ads and the Meta Pixel measure whether my ads lead to inquiries, and let me show my ads to people who have visited the site.

Google's tools are loaded through Google Tag Manager; the Meta Pixel is loaded by the site itself, only after you allow Marketing, and never on journal articles about faith or cultural traditions. When an inquiry is sent after you allowed Marketing, your email address may be shared with Google and Meta in hashed (scrambled) form so they can match the inquiry to an ad click ("enhanced conversions"); Meta receives it from our server (Conversions API) together with your IP address and browser type. The legal basis is your consent (GDPR Art. 6(1)(a)). How Google uses data from sites that use its services: business.safety.google/privacy.

If you click Reject all or don't choose, none of these cookies are set. Google's tags may still send cookieless signals without identifiers (Google Consent Mode). You can change your choice at any time with Cookie settings at the bottom of every page; a choice is asked again after 12 months.

Cookies and local storage

• af-consent (local storage) — remembers your cookie choice. Necessary.
• af-intro (session storage) — remembers that the opening animation has played in this tab. Necessary; cleared when you close the tab.
• af-attribution (local storage) — the campaign and landing-page details described above, kept on your device for up to 90 days, and only if you allowed Marketing.
• Google (_ga, _gcl_au) and Meta (_fbp, _fbc) cookies — only with your consent (Analytics for _ga, Marketing for the rest). Google and Meta explain these in their own policies.

Who else processes your data

• Web3Forms — delivers inquiry form submissions by email.
• Netlify — hosts the website.
• Google (Tag Manager, Analytics, Ads) and Meta (Pixel) — only with your consent.
• The person who manages this website and its advertising for me — receives a copy of each inquiry.
• Telegram — notifies me of each new inquiry in a private chat.
• My email provider, where inquiries and our correspondence are kept.

I never sell your data. Some of these providers are based in the United States; transfers are covered by the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

How long I keep it

Inquiries that don't turn into a booking are deleted within 24 months. If we work together, our correspondence and contract are kept for as long as the law requires for accounting and tax purposes. Analytics data is kept for 14 months.

Your rights

You can ask to see the data I hold about you, correct it, delete it, restrict or object to its use, or receive it in a portable format, and you can withdraw consent at any time. Write to feyer.photography@gmail.com. You also have the right to complain to your local data protection authority.

Changes

If this policy changes, the new version will be published here with a new date.