Privacy Policy

Last Updated: September 20, 2025

This Privacy Policy describes the policies and procedures of Alexander Cross Photography (“Company,” “We,” “Us,” or “Our”) on the collection, use, and disclosure of your information when you use our website, alexandercross.com (the “Service”).

It also explains your privacy rights under Texas law, the Texas Data Privacy and Security Act (TDPSA), as well as California (CCPA/CPRA) and European/UK GDPR where applicable.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

(same as provided in previous draft — Account, Affiliate, Company, Cookies, Device, Personal Data, Service, Service Provider, Usage Data, You, etc.)

Collecting and Using Your Personal Data

(same detail as previous draft: Personal Data, Usage Data, Cookies, and Tracking Technologies)

Use of Your Personal Data

(same as previous draft — for providing services, contacting you, marketing, analytics, compliance, etc.)

Sharing Your Personal Data

(same as previous draft — with service providers, affiliates, business transfers, consent, legal obligations, etc.)

Data Retention

(same as previous draft — retain as long as necessary for business/legal reasons, shorter for Usage Data)

Transfer of Your Personal Data

Your data may be transferred to servers or processors outside your state, country, or the U.S. where privacy laws may differ. We take reasonable steps to ensure your data is secure and handled in accordance with this Privacy Policy.

Your Privacy Rights

Under Texas Law (TDPSA, effective July 1, 2024):

Confirm if we process your personal data
Access your data
Correct inaccuracies
Delete your data
Obtain a copy of your data in a portable format
Opt out of targeted advertising, sale of personal data, or profiling

📧 To exercise these rights, contact us at alex@alexandercross.com. We will respond within 45 days.

Under California Law (CCPA/CPRA):

If you are a California resident, you may have the following rights:

Right to Know: Request disclosure of categories and specific pieces of personal information collected.
Right to Delete: Request deletion of personal information, subject to certain exceptions.
Right to Correct: Request corrections to inaccurate personal information.
Right to Opt-Out: Decline the sale or sharing of personal data.
Right to Limit Use of Sensitive Personal Information: Limit use of data such as financial info, geolocation, or private identifiers.
Right to Non-Discrimination: You will not be discriminated against for exercising your privacy rights.

To exercise your California privacy rights, email alex@alexandercross.com with the subject line “California Privacy Request.” We may require verification of your identity before fulfilling your request.

Under European Union and UK Law (GDPR):

If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights:

Right of Access: Obtain confirmation of whether we process your personal data and request a copy.
Right to Rectification: Correct inaccurate or incomplete personal data.
Right to Erasure (“Right to be Forgotten”): Request deletion of your data where no longer needed or where consent is withdrawn.
Right to Restrict Processing: Request that processing be limited under certain circumstances.
Right to Data Portability: Receive your personal data in a structured, machine-readable format and transfer it to another controller.
Right to Object: Object to processing based on legitimate interests, direct marketing, or profiling.
Right to Withdraw Consent: If we rely on consent to process your data, you may withdraw it at any time.

Legal Basis for Processing under GDPR:

Consent
Performance of a contract
Compliance with legal obligations
Legitimate interests (such as business operations, fraud prevention, and service improvements)

International Transfers: If data is transferred outside the EEA/UK, we will ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

📧 To exercise GDPR rights, contact alex@alexandercross.com with the subject line “GDPR Privacy Request.”

Children’s Privacy

Our Service is not directed to anyone under the age of 13. We do not knowingly collect data from children. If discovered, we will delete it promptly.

Security of Your Personal Data

We use commercially reasonable safeguards to protect your personal information. However, no method of transmission or storage is completely secure.

Links to Other Websites

Our Service may link to third-party websites. We are not responsible for their privacy practices. Please review their policies individually.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted here with the updated “Last Updated” date. Significant changes may also be communicated via email.

Contact Us

If you have questions or requests regarding this Privacy Policy, please contact us:

📧 By email: alex@alexandercross.com
🌐 Website: www.alexandercross.com