Privacy & cookies

What the request form collects

The form asks for your name, email address, service choice, message, and permission to store and respond to your inquiry. Phone number, date, location, budget, and reference links are optional. It also records a request reference, submission time, and the version of the privacy notice shown when you submit.

Please share only what is needed to discuss the shoot. Do not include payment card details, identity documents, passwords, or sensitive information about yourself or other people. A general area is enough for the location. For a child’s session, a parent or guardian should make the inquiry.

How your details are used

Thomas uses inquiries to answer questions, discuss availability, plan a session, and keep track of follow-ups. Submitting a form does not subscribe you to marketing and does not confirm a booking. Inquiries are stored in a private owner inbox, separate from the public portfolio.

Cloudflare hosts the website and its database and photo storage. It also provides owner sign-in and security services. The hosting service processes connection information such as IP addresses and request information. To limit form abuse, the application temporarily stores a hash derived from an IP address and hourly time window, rather than the raw address in the inquiry record. A hash is not a guarantee of anonymity.

Services involved in an inquiry

When enabled, Cloudflare Turnstile checks whether a form submission is legitimate and processes browser and connection information for that purpose. Resend sends owner email alerts, and Pushover sends alerts to Thomas’s devices. The alerts link to the private inbox; your full inquiry remains in the database. Older alerts may contain a name and service type. Email replies are handled by the email services used by Thomas and the sender.

These providers may process data in the United States and other countries. Their privacy information is available from Cloudflare, Resend, and Pushover.

Cookies and browser storage

The website code does not include advertising pixels, session replay, or marketing analytics. Cloudflare security and owner sign-in may use cookies. The portfolio uses temporary session storage to avoid repeating the full introduction, quote, and homepage photo during a browsing session. This does not contain your inquiry or contact details and normally clears when the browser tab or session closes.

Instagram and reference boards are links rather than embedded feeds. Opening one takes you to another service with its own privacy practices. You can clear cookies and site data in your browser; clearing authentication cookies signs you out of the private workspace.

Retention and your choices

Inquiry records are retained for responding and managing follow-ups until Thomas removes them. The application does not currently apply automatic age-based deletion. Backups, delivered alerts, and email correspondence may contain separate copies.

You can ask Thomas to access, correct, or delete your inquiry by emailing garciathomas758@gmail.com. Include the request reference if you have it. Identity may need to be verified before private information is disclosed or changed. Some records may need to be retained for a booking, accounting, a dispute, or a legal obligation.

Photographs and updates

If you have a question about a photograph of you, or believe an image should not be displayed here, contact Thomas with the page address and a description of the photograph. This notice will be updated when the website’s data practices change.