Privacy & Cookie Policy
EFFECTIVE DATE: 2026 // DODGEVILLE, WI
Zero Data Selling Guarantee
At Dark Studio Films, we hold client trust and creative discretion in the highest regard. We do NOT sell, rent, monetize, or trade your personal information, physical shipping destination, email address, or browsing telemetry to third-party data brokers, advertising exchanges, or marketers. Ever.
1. Information We Collect
We collect only the essential personal, transactional, and technical data necessary to operate our website, fulfill physical fine art print orders, manage private client proofing galleries, and coordinate tour and concert photography services:
- Print Shop & E-Commerce Orders: When purchasing prints through our online store (
/prints), we collect customer full name, delivery shipping address, billing address, email address, phone number, and selected product specifications (dimensions, paper finish, framing options, and order number). - Payment Processing Security: All financial transactions are securely processed directly by Stripe, Inc. using 256-bit SSL encryption and strict PCI-DSS Level 1 compliance. Dark Studio Films never receives, views, or stores your full credit card number or CVV code on our servers. Stripe returns an encrypted token confirming payment authorization.
- Client Proofing Portal & Deliverables: When authorized clients access private proofing albums (
/portal/[code]), we store access credentials, selected favorite photo IDs, proofing notes, and media download access logs. - Direct Inquiries & Photographer Credential Module: When you submit a booking request or direct inquiry, we collect your name, email address, phone number, project scope, tour or concert date, and message content to coordinate production.
- Technical Telemetry & Cookies: If you accept analytics, we record anonymized device viewport dimensions, browser type, and page load timestamps (e.g.
ds_visitor_id) to optimize high-resolution photo delivery and website performance.
2. How We Use Your Data
Your information is utilized exclusively for legitimate operational and creative services:
- Print Production & Fulfillment: Hand-crafting, inspecting, and packaging your custom prints in Dodgeville, WI, and providing shipping manifests to verified couriers.
- Transactional Order Updates: Sending automated email notifications via Resend regarding your purchase (Order Confirmation, In Production, Shipped with live carrier tracking, and Delivered).
- Client Gallery Proofing: Managing private digital review sessions, high-resolution downloads, and editorial feedback for artists, management, and venues.
- Photography Booking Coordination: Communicating regarding festival pit credentials, stage production documentation, and custom shoot logistics.
- Fraud Prevention & Legal Compliance: Safeguarding against fraudulent payment attempts, chargebacks, and complying with Wisconsin state tax and federal e-commerce reporting requirements.
3. Third-Party Service Providers
We share only the minimum required data with verified third-party infrastructure partners:
- Stripe, Inc.: End-to-end payment gateway and anti-fraud verification.
- Resend: Secure delivery of transactional emails and courier tracking notifications.
- Logistics Couriers: UPS, USPS, FedEx, and DHL Express to transport and deliver physical print orders to your specified address.
- Hosting & CDN Infrastructure: Vercel and Cloudflare for global content delivery, DDoS protection, and SSL encryption.
5. Manage Your Cookie Preferences
You can customize or revoke your consent preferences at any time below:
Required for core platform security, print checkout routing, and client proofing access.
Remembers your selected view modes, audio volume, and gallery filters.
Anonymized telemetry to help us measure traffic volume and page load speeds.
Helps tailor relevant campaign announcements and creative updates.
6. Your Rights (GDPR & CCPA/CPRA)
Under international and state privacy frameworks (including GDPR Articles 15-22 and the California Consumer Privacy Act), you hold full rights over your personal data:
- Right of Access (DSAR): You may request a structured machine-readable export of all records associated with your email address.
- Right to Erasure (Right to be Forgotten): You may request that all personal data, contact submissions, or client proofing records be permanently purged.
- Right to Rectification: You may correct inaccurate shipping or billing records prior to fulfillment.
- Right to Opt-Out: You may disable non-essential tracking at any moment using the preference manager above.
7. Contact & Data Subject Requests
To submit a formal Data Subject Access Request (DSAR), request data erasure, or ask questions regarding this policy, contact our privacy team: