Privacy Policy

Last updated: September 17, 2026

Who this covers

Create With Amy is a photography and content creation studio serving Baltimore and Harford County, Maryland. This policy covers the website at createwithamy.co. "We" means Create With Amy; "you" means anyone visiting or reaching out.

The short version: we collect what you type into the contact form and the standard traffic data a website records, we use it to reply to you and book your session, and we don't sell your personal information. This site sets no advertising cookies and runs no ad pixels.

What we collect

What you give us. The contact form asks for things like your name, email, phone, and what you're making. You choose what to share, and you can always email or DM instead.

What's collected automatically. Standard technical data every website records: IP address, browser and device type, pages viewed, and where a visit came from. It's aggregate and practical, not surveillance.

Where your message came from. When you send the form, it also carries the page you sent it from, the page you first landed on, the name of the website that sent you, and any campaign tags in the link you followed. That tells us which pages and campaigns bring in bookings, and it travels only with a message you choose to send.

The tools behind the site

We'd rather name them than hide behind "third-party service providers." Each runs under its own privacy policy.

• Google Analytics, loaded through Google Tag Manager, counts visits and shows which pages lead to booking requests. For visitors in California, Canada, the UK and the EU it runs in a cookieless mode that can't recognize a returning browser, unless they allow cookies in the banner. Anyone can say no in the banner, or opt out everywhere with Google's opt-out browser add-on.
• Microsoft Clarity shows us anonymized heatmaps and session replays so we can see where a page confuses people. It runs only if you allow cookies in the banner, and it masks anything you type into a form before it leaves your browser.
• Resend delivers the email when you submit the form, so your note reaches Amy and you get a confirmation.
• Cloudflare Turnstile protects the form from spam bots. It's a security tool, not a tracker.
• Netlify hosts the site and keeps a backup copy of form submissions so a message is never lost.
• Zapier and Google Sheets carry your form details into the studio's booking sheet so nothing falls through the cracks.

Cookies

Google Analytics sets first-party cookies whose names start with _ga, so it can tell a returning browser from a new one. Visitors in California, Canada, the UK and the EU get the cookieless mode instead, unless they allow cookies in the banner. Clarity sets its own cookies only after you allow them. This site sets no advertising cookies. The full list is in the cookie policy.

Change your cookie choice

Photos of you

If you book a session, how your photos may be used (portfolio, social media) is agreed in your session details, not assumed. We don't publish client photos without permission.

How long we keep information

Messages and booking details are kept as long as we need them to serve you and keep ordinary business records, then deleted.

Your rights

You can ask what information we have about you, ask us to correct it, or ask us to delete it. Email or message Amy and it's handled. California residents have these rights under the CCPA and CPRA, including the right to opt out of the sale or sharing of personal information. We don't sell it and we don't share it for advertising. We won't treat you differently for asking.

Children

The site isn't directed at children under 13, and we don't knowingly collect their information. Sessions involving minors are booked by a parent or guardian.

Changes

If this policy changes, we'll update the date at the top. The ground rules for using the site live in the terms of service.