Privacy Policy

Last updated: August 6, 2026

Babz Studios Inc. (“Babz Studios”, “I”, “me”, or “my”) respects your privacy and is committed to protecting your personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta’s Personal Information Protection Act (PIPA).

This Privacy Policy explains what information I collect, how I use it, when I share it, and the choices you have. It applies to portraits.babzstudios.com and any related Babz Studios services.

1. Information I Collect

When you use this website or contact me through it, I may collect:

• Contact information you voluntarily provide: name, email address, phone number
• Inquiry details you submit: session type, reason for photoshoot, referral source, and any free-text messages
• Booking and session information: appointment dates, location preferences, package selections
• Technical information about your visit: browser type, device type, pages viewed, referring URLs, and approximate location derived from your IP address. This is collected by the analytics and advertising-measurement tools described in Section 7, and only for the categories you allow.
• Anti-spam information, which does not depend on the cookie banner: when you submit the contact form, your IP address is used to limit how many submissions can come from one source, and is sent to Cloudflare for the automated check described in Section 4. This protects the form from abuse rather than measuring your visit, so it happens on every submission whether or not you accept cookies. Your IP address is not stored alongside your inquiry.

I do not knowingly collect personal information from individuals under the age of 13.

2. How I Use Your Information

I use the information I collect to:

• Respond to your inquiries and provide quotes
• Coordinate, schedule, and confirm portrait sessions
• Deliver finished photographs and related communications
• Send appointment reminders and session updates (by email and, if you have opted in, by SMS)
• Maintain records of bookings, payments, and contracts
• Improve the website and my services
• Comply with legal obligations

3. SMS Messaging Consent and Use

If you opt in to SMS messages by checking the SMS consent box on the contact form, I will send you text messages related to your portrait inquiry, booking confirmations, appointment reminders, and session updates. SMS consent is separate from, and not required for, submitting the contact form or booking a session.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors that directly support the SMS service (such as Twilio, my SMS gateway provider) is permitted solely for delivering messages you have consented to receive. Mobile opt-in data and consent records are not shared with any third parties for any other purpose.

You can opt out of SMS messages at any time by replying STOP to any message you receive. Reply HELP for assistance. Message and data rates may apply, depending on your mobile carrier plan. Message frequency varies and typically ranges from 2 to 6 messages per booking cycle.

4. How I Share Your Information

I do not sell your personal information.

I share information only in the following limited circumstances:

• Service providers that help me operate my business (such as email delivery services, SMS gateway providers, payment processors, scheduling tools, and cloud storage providers). These providers are contractually limited to using your information solely for the services they provide to me.
• Spam and abuse prevention — Cloudflare, Inc. runs the Turnstile challenge that protects the contact form. The Turnstile widget loads on each page carrying a form, and when you submit it Cloudflare receives your IP address and the challenge result so it can confirm the submission is not automated. This is a security measure, not analytics or advertising, so it is not covered by the cookie banner and runs on every submission. See Cloudflare’s Privacy Policy.
• Analytics and advertising providers — specifically Google (Google Analytics) and Meta Platforms, Inc. (the Meta Pixel, used to measure Facebook and Instagram advertising). These receive website-activity information about your visit, never your contact details, and only if you accept cookies. Full detail, including how to opt out, is in Section 7.
• Legal compliance, when required by law, court order, or to respond to lawful requests by public authorities.
• Protection of rights, when necessary to protect the rights, property, or safety of Babz Studios, its clients, or others.
• Business transfers, in the event of a sale, merger, or restructuring of Babz Studios, in which case your information may be transferred under equivalent privacy protections.

5. Data Retention

I retain your personal information only as long as necessary for the purposes outlined in this policy or as required by law. Inquiry records are typically retained for 24 months after our last interaction. Booking and contract records are retained for the period required by Canadian tax and business records legislation (typically 7 years).

6. Your Rights Under PIPEDA and PIPA

You have the right to:

• Access the personal information I hold about you
• Correct inaccurate or incomplete personal information
• Withdraw consent at any time, subject to legal or contractual restrictions
• Withdraw SMS consent at any time by replying STOP to any message
• Lodge a complaint with the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta

To exercise any of these rights, contact me at info@babzstudios.com.

7. Cookies, Analytics, and Advertising

Nothing loads until you choose. On your first visit a banner asks you to allow Analytics, Marketing, or both — separately. Accepting one never turns on the other. Until you choose, neither runs on this site; if you decline both, neither ever runs and the website works exactly the same. The one thing that does not wait for that choice is the anti-spam check on the contact form, which is a security measure rather than tracking — see Section 4.

If the banner asks you again after you have already answered it, that is deliberate: I ask again whenever this section starts describing something it did not describe before, so that a choice you made against an older version is never read as agreement to something new. Consent given before this policy named Meta was never treated as consent to advertising. The one exception is the move to separate categories itself: if you had already accepted under the version that named both Google Analytics and the Meta Pixel and said accepting turned on both, that choice carries forward as both categories on — it doesn’t re-ask, because it isn’t telling you anything that copy didn’t already say. What it didn’t let you do was choose one without the other, which is exactly what “Cookie settings” below now lets you fix in one click.

Each category you allow loads its own tool:

• Analytics — Google Analytics 4 (Google LLC) — measures how the site is used: pages viewed, referring URL, approximate location derived from IP address, browser and device type, which buttons are clicked, and whether a contact form was submitted successfully. When a form is submitted it also records the two menu choices you made — the session type and how you heard about me — so I can tell which services and which referral channels are working. If you submitted the form on a promotional landing page, it also records a short label identifying that offer; the ordinary contact form on the home page sends no such label.
• Marketing — Meta Pixel (Meta Platforms, Inc. — Facebook and Instagram) — this one is advertising. It tells Meta that a browser visited a page on this site, so I can measure whether my Facebook and Instagram ads are working and show ads to people who have visited before. It sets a cookie (_fbp) on this website’s own domain — a first-party cookie, not a third-party one — holding an identifier for your browser, and Meta receives your IP address, the page URL, and the time of the visit. Meta may combine that with information it already holds about you and may use it for its own purposes under Meta’s Privacy Policy.

What is never shared. Your name, email address, phone number, and the text of your message are not passed to Google or to Meta by either tool. The Meta Pixel on this site is configured to record page views only — it receives nothing from the contact form.

How to opt out

• Choose per category on the banner. Decline one, both, or accept one without the other — nothing bundles Analytics and Marketing together.
• Change your mind — one click, anytime. The “Cookie settings” link in the site footer reopens this exact choice with whatever is currently allowed pre-filled, so withdrawing takes the same one click as consenting did. Turning Marketing off takes effect immediately: the page reloads so the Pixel, and the code it defines, is fully cleared rather than just hidden. Turning Analytics off does not need a reload — it stops loading and nothing further is sent. Either way, a page view already sent before you changed your mind isn’t retroactively un-sent; withdrawing stops what happens next, not what already happened.
• Opt out at Meta directly via Meta Ad Preferences (including “Activity information from ad partners”), which applies across every site that uses the Meta Pixel, not just this one.
• Opt out at Google using the Google Analytics Opt-out Browser Add-on.
• Content blockers and privacy-focused browsers stop the scripts themselves from loading, which prevents both tools entirely.
• Blocking third-party cookies does less than you may expect. Both _ga and _fbp are set on this website’s own domain, so a third-party-cookie block does not stop either tool from loading or either cookie from being set. What it does limit is how readily Meta can connect this visit to your Facebook or Instagram account. To actually prevent collection, use one of the other options in this list.

Allowing cookies is entirely optional. It is not a condition of contacting me, getting a quote, or booking a session, and declining changes nothing about the service you receive. You can withdraw consent at any time by the steps above or by emailing info@babzstudios.com.

8. Security

I take reasonable steps to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. However, no method of transmission over the internet is 100% secure.

9. Changes to This Policy

I may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Continued use of the website after an update constitutes acceptance of the revised policy.

10. Contact

For questions about this Privacy Policy or how your information is handled:

Babz Studios Inc.
Email: info@babzstudios.com
Phone: +1 587-896-0300
Calgary, AB, Canada

See also: Terms of Service · SMS Terms