Legal
Privacy & Cookie Policy
jamesonthermitus.com. Last updated: August 4, 2026
Who this policy covers
This policy explains how Jameson Thermitus ("we," "us") collects, uses, and protects information when you visit jamesonthermitus.com, submit the contact form, or access a private client gallery. It applies to visitors worldwide, including those in the European Economic Area (EEA), the United Kingdom, and the United States.
Data we collect
- Contact form submissions: name, email address, and message content you choose to send us.
- Client gallery access: if you're a photography client, an access code we provide you controls entry to your private gallery. We don't collect additional personal data through the gallery itself beyond what was already exchanged when we arranged your shoot.
- Technical data collected automatically by our hosting provider's server logs (e.g. IP address, browser type, pages requested) for security and site-operation purposes.
We do not currently use Google Analytics, advertising pixels, or any other analytics or marketing tracking on this site. If that changes in the future, this policy and the cookie notice on the site will be updated first, and consent will be requested before any such tool is activated for visitors in the EEA/UK.
Cookies and similar technologies
The table below lists every cookie or browser-storage item currently used on this site. All of them are strictly necessary for the site to function or to keep it secure. None are used for advertising, cross-site tracking, or building an advertising profile about you.
| Cookie / storage item | Type | Purpose | Duration |
|---|---|---|---|
| Admin session cookie | Strictly necessary | Keeps the site owner logged in to the password-protected admin dashboard. Only set for the site administrator, never for visitors. | Ends when the browser session ends / on logout |
| Client gallery access cookie | Strictly necessary | Remembers that a client has entered a valid access code, so they can view and download their private gallery without re-entering the code on every page. | Ends when the browser session ends |
| Cloudflare Turnstile | Strictly necessary (security) | Verifies that a visitor submitting the contact form is a real person and not automated spam. Set by Cloudflare, a third-party security provider, not by this site directly. | Set by Cloudflare; typically short-lived |
| Cookie notice preference | Strictly necessary | Remembers that you've seen and dismissed the cookie notice, so it doesn't show again on every visit. | 12 months |
Because these cookies are strictly necessary, they don't require your opt-in consent under the EU/UK ePrivacy rules, but we still tell you about them here for transparency, and you can control cookies generally through your browser settings at any time.
How we use your information
- To respond to messages sent through the contact form.
- To provide client gallery access to the person the gallery was created for.
- To keep the site secure and functioning correctly (e.g. blocking spam submissions, maintaining admin login sessions).
Legal basis under GDPR: processing contact-form and client-gallery data is based on our legitimate interest in running this business and communicating with prospective and existing clients (Article 6(1)(f)), and, where a shoot or engagement has been agreed, on performance of that contract (Article 6(1)(b)).
Who we share data with
We don't sell or share your personal information with third parties for their own marketing purposes. The following service providers process data on our behalf, strictly to operate the site:
- Hostinger: web hosting and the underlying server infrastructure for this website.
- Cloudflare: provides Turnstile, a spam-prevention check on the contact form.
- Microsoft 365: processes email sent through the contact form to contact@jamesonthermitus.com.
International data transfers
Depending on where our hosting and service providers operate, your information may be processed outside your home country, including in the United States. Where that happens, we rely on the safeguards those providers offer (such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses) to protect your information.
How long we keep your information
Contact form messages are kept only as long as needed to respond to your inquiry and for a reasonable follow-up period, then deleted. Client gallery access is kept for the duration agreed with each client, after which galleries and their access codes are removed.
Your rights
If you're in the EEA or UK (GDPR / UK GDPR), you have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to lodge a complaint with your local data protection authority.
If you're a California resident (CCPA/CPRA), you have the right to know what personal information we hold about you, to request its deletion, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined by California law.
To exercise any of these rights, contact us at contact@jamesonthermitus.com.
Children's privacy
This site is not directed at children, and we don't knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we'll delete it.
Changes to this policy
We may update this policy from time to time, for example if we add new tools like analytics or online booking. Material changes will be reflected in the "Last updated" date above, and if we ever introduce cookies that require consent, we'll ask for it before they're set.
Contact us
Questions about this policy or your data can be sent to contact@jamesonthermitus.com.