Privacy Policy

1.Scope of This Policy

This Policy applies to personal information we collect:

• through the Site, including any form, chat, scheduling tool, assessment, masterclass registration, or free download offered on it;
• when you email, call, or text us, or book a consultation with us;
• when you enroll in and participate in our certification program (the “Program”), including live sessions, assignments, assessment, and the student community; and
• from third parties such as our payment processor, our course and messaging platforms, and our certifying partner.

This Policy does not apply to the privacy practices of any third-party AI tool, platform, social network, or other service you use independently, including those referenced or demonstrated in the Program. Section 11 explains where that line falls.

2.Information We Collect

2.1 Information you give us

2.2 Information collected automatically

When you visit the Site, we and our providers may automatically collect: IP address; approximate location derived from IP address; browser type and version; operating system and device type; screen size; referring and exit URLs; pages viewed, time on page, and clicks; date and time of visit; and unique device or cookie identifiers. Within the Program platforms we also record login times and content access events.

2.3 Information from third parties

We may receive information about you from our payment processor (transaction status, limited card details), our course, community, video-conferencing, and messaging platforms, our scheduling tool, our certifying partner, and, where you register through one, a webinar or masterclass platform.

2.4 Sensitive information

We do not seek, and ask that you do not send us, sensitive personal information such as Social Security numbers, government identification numbers, financial account credentials, precise geolocation, health information, biometric data, or information revealing racial or ethnic origin, religious beliefs, or sexual orientation. Please also do not upload, post, or submit as Student Work any personal information about a third party that you are not entitled to share, or any confidential information belonging to a client or employer.

3.Cookies & Tracking Technologies

We and our providers use cookies, tags, local storage, and similar technologies to operate the Site and the Program platforms, keep you signed in, remember your preferences, and keep things secure.

Your choices. Most browsers let you refuse or delete cookies through their settings. Blocking cookies may cause parts of the Site or the Program platforms to stop working, including login.

4.How We Use Your Information

We use personal information to:

• respond to your inquiry, schedule and conduct consultations, and answer questions about enrollment;
• enroll you, place you in a Cohort, and give you access to live sessions, recordings, materials, and the community;
• deliver instruction, review and grade your assignments, and provide feedback and assessment;
• administer certification and issue your credential through our certifying partner;
• verify eligibility for the 7-day completion-based guarantee described in our Terms of Service;
• process payments, manage payment plans, issue invoices and receipts, and collect amounts owed;
• send transactional and service communications such as session links, reminders, schedule changes, feedback notices, and billing notices;
• send marketing communications by email and, where you have opted in, by text message;
• improve the Site, the curriculum, and the Program, including by reviewing anonymised, aggregated participation and outcome data;
• maintain records of consent and preferences;
• protect the security and integrity of the Site, the Program platforms, and the community, detect and prevent fraud, unauthorised access, and unauthorised distribution of Program Materials, and enforce our Terms of Service; and
• comply with legal obligations and establish, exercise, or defend legal claims.

5.Email Communications & Opt-In

5.1 Consent. When you submit your email address through a form on the Site, request a consultation, register for a masterclass, download a free resource, or otherwise provide it to us for that purpose, you consent to receive marketing and promotional emails from Generative Photography — including educational content, case studies, cohort announcements, offers, and reminders.

5.2 Transactional email. If you are enrolled, we will also send you email that is necessary to deliver the Program, such as enrollment confirmations, session links and reminders, schedule changes, assignment and feedback notices, certification notices, and billing notices. These are not marketing messages and continue for as long as you are enrolled.

5.3 How to opt out. Every marketing email includes an unsubscribe link in the footer. You may also email [email protected] with the subject line “Unsubscribe.” We honor opt-out requests promptly, and in all cases within ten (10) business days, as required by the CAN-SPAM Act. Opting out of marketing email does not stop transactional email.

5.4 Our commitments. Our marketing emails identify Generative Photography as the sender, use accurate subject lines and header information, are identified as advertising where required, and include our valid physical mailing address.

6.SMS / Text Messaging & Opt-In

6.1 How you opt in. You give prior express written consent by taking a clear affirmative action, such as checking an unchecked consent box on one of our forms that appears next to the disclosure describing this program, replying with a requested keyword to a message you asked to receive, or submitting your mobile number in a field expressly labeled for text messaging. We keep a record of the date, time, IP address, form, and disclosure language associated with your consent.

6.2 Program description. Once you opt in, you may receive recurring automated marketing and informational text messages from Generative Photography — including messages sent using an automatic telephone dialing system — relating to consultation scheduling and reminders, enrollment follow-up, live session reminders, assignment and deadline nudges, cohort announcements, account and service updates, and promotional offers.

6.3 Withdrawing consent. Replying STOP withdraws your consent immediately for the number from which you reply. You may also email [email protected] to be removed. Opting out of text messages does not remove you from email, and does not stop transactional communications necessary to deliver a Program you are enrolled in.

6.4 Changing your number. Please tell us if you stop using a mobile number you have given us, so that we do not message a person who has not consented.

7.Telephone Calls

If you provide a telephone number and request contact, you consent to receive calls from Generative Photography at that number regarding your inquiry, your enrollment, and the Program. You may ask us to stop calling at any time by telling us during a call or by emailing [email protected], and we will add you to our internal do-not-call list. We may record or take notes of consultation calls for quality and training purposes where permitted by law; where consent is required, we will tell you at the start of the call and you may decline.

8.How We Share Information

We share personal information only as described below. Mobile telephone numbers and SMS consent are excluded from all sharing except with the messaging vendors identified below as Service Providers.

9.We Do Not Sell Your Information

Generative Photography does not sell personal information for money, and does not share personal information for cross-context behavioral advertising by third parties, as those terms are defined under state privacy laws. We do not rent, trade, or license personal information to data brokers, lead aggregators, list sellers, or other advertisers, and we have not done so in the twelve (12) months preceding the Last Updated date above.

Some state privacy laws define “sale” or “sharing” broadly enough to capture the use of advertising cookies and pixels. As described in Section 3, we do not currently use any, and our first-party platform analytics are not shared with advertisers or combined across other websites. If we adopt advertising technology in future, we will update Section 3 and this Section and will provide the opt-out mechanisms those laws require. You can contact us at [email protected] at any time with questions.

10.Student Work, Community & Session Recordings

10.1 Work you submit is seen by instructors and your Cohort. Assignments submitted for critique, and anything you post in the student community, are visible to instructors, staff, and other enrolled students. Please assume that anything you post can be read by everyone in your Cohort, and do not include client names, contact details, or confidential business information you are not free to share.

10.2 Live sessions are recorded. Live sessions are recorded so that students who cannot attend can catch up. A recording may capture your video, voice, display name, chat messages, questions, submitted work, and anything you share on screen. Participation on camera is optional: you may keep your camera off, stay muted, use a display name rather than your full name, and ask questions in writing. If you would prefer your contribution not be retained, tell us during or promptly after the session and we will edit it out of the retained copy where technically practicable.

10.3 Who can see recordings. Recordings are made available to your Cohort and may be reused as course material in future runs of the Program. We will not use a recording, image, name, or result that identifies you in our public advertising or marketing without asking you separately and obtaining your permission, which you may withdraw at any time.

10.4 Other students' obligations. Our Terms of Service prohibit students from recording sessions themselves and from sharing another student's work, business information, or personal information outside the community. We enforce those rules, but we cannot guarantee that every participant will follow them.

10.5 Assessment records. We retain submission and assessment records associated with certification, because a credential has to be verifiable. See Section 13.

11.AI Tools & the Content You Generate

11.1 We do not control third-party tools. The Program references and demonstrates third-party AI image, video, and editing tools. We have no access to your accounts with those providers, no visibility into what you submit to them, and no ability to delete data from them on your behalf.

11.2 Providers may retain and use what you submit. Many AI tool providers retain prompts and uploaded images, and some use submitted content to improve or train their models, sometimes depending on your plan tier or account settings. Review each provider's privacy policy and data-use settings before you upload anything sensitive.

11.3 Do not upload other people's personal information. Take particular care with photographs of identifiable people. Do not upload a person's image or likeness to an AI tool without that person's informed consent, and do not upload a client's confidential material without their permission. In some jurisdictions a facial image is treated as biometric data with its own consent requirements.

11.4 What we see. We see only the outputs and prompts you choose to submit to us as Student Work or post in the community. Those are handled under this Policy like any other information you give us.

12.Certification & the Certifying Partner

Certification is administered through an independent third-party certifying partner. To issue and support your credential, we share limited information with that partner — typically your name, email address, Cohort, completion and assessment status, and the certificate identifier assigned to you. We do not share your payment details, your consultation notes, or your SMS consent data with the certifying partner.

The certifying partner processes that information under its own privacy policy and terms, which it sets and may change, and it may operate a public or semi-public verification tool that allows a third party to confirm a certificate identifier is valid. If you would like the identity and current privacy policy of our certifying partner, or you would like your record with that partner corrected or removed, email [email protected] and we will provide it and pass on your request.

13.Data Retention

We keep personal information only as long as necessary for the purposes described in this Policy, and then delete or de-identify it. In general:

• Inquiries that do not become enrollments — retained while we follow up and for a reasonable period afterward.
• Student records — retained for the duration of your access period and for a period afterward to support accounting, tax, and legal defense needs.
• Assessment and certification records — retained for as long as the credential is intended to be verifiable, so that a certificate identifier can be confirmed later.
• Session recordings — retained for as long as they remain part of the course library for your Cohort or future Cohorts.
• Community content — retained while the community operates; posts you delete are removed from view but may persist in backups for a limited period.
• Billing and tax records — retained for the period required by applicable law.
• Marketing lists — retained until you opt out.
• Opt-out and do-not-contact records — retained indefinitely, because we need them to keep honoring your request.
• Consent records — retained for at least the period of any applicable statute of limitations, so that we can demonstrate that consent was given.

14.Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, limiting access to personnel with a business need, and selecting vendors that maintain appropriate security practices.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential, for not sharing session links or community access, and for notifying us promptly at [email protected] if you believe your account has been compromised.

15.Your Privacy Rights & Choices

Regardless of where you live, you may ask us to:

• Access the personal information we hold about you;
• Correct information that is inaccurate or out of date;
• Delete information we no longer need to retain;
• Stop marketing to you by email, text message, or telephone; or
• Receive a copy of information you provided to us in a portable electronic format.

How to make a request. Email [email protected] with the subject line “Privacy Request” and tell us what you would like us to do. We will verify your identity, usually by confirming information already in our records or by asking you to respond from the email address on file. We respond within forty-five (45) days and may extend once where reasonably necessary, in which case we will tell you.

Authorized agents. An agent may submit a request on your behalf with written proof of authorization; we may also contact you to confirm.

No retaliation. We will not deny you services, charge you a different price, or provide a different level of service because you exercised a privacy right.

Limits. We may decline a request where an exception applies — for example, where we must keep information to complete a transaction, administer or verify a certification, comply with a legal obligation, maintain security, or establish or defend legal claims. We will tell you the reason. Note also that deleting your account information does not automatically remove content you posted in the community or your appearance in a session recording; tell us if you want those addressed as well and we will do so where technically practicable.

16.State-Specific Privacy Rights

16.1 Florida residents. The Florida Digital Bill of Rights applies to companies meeting revenue and activity thresholds that Generative Photography does not currently meet. We nonetheless extend the rights described in Section 15 to Florida residents as a matter of practice.

16.2 California residents. Under the California Consumer Privacy Act as amended by the CPRA, you have the rights to know, delete, correct, opt out of sale or sharing, limit the use of sensitive personal information, and be free from retaliation. The categories of personal information we have collected in the past twelve (12) months, the sources, purposes, and recipients are described in Sections 2, 4, and 8. We have not sold or shared personal information as those terms are defined by the CCPA, and we do not knowingly collect or sell the personal information of consumers under sixteen (16) years of age. Under California's “Shine the Light” law, you may request information about disclosures to third parties for their direct marketing purposes; we do not make such disclosures.

16.3 Other states. Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, and other states with comprehensive privacy laws have similar rights, which may include the right to appeal a denied request. To appeal, reply to our response or email [email protected] with the subject line “Privacy Appeal.” If your appeal is denied, you may contact your state Attorney General.

16.4 Nevada residents. Nevada law allows residents to opt out of the sale of certain covered information. We do not sell covered information, but you may submit a request to [email protected].

17.Do Not Track & Global Privacy Control

Web browsers may offer a “Do Not Track” signal. Because there is no common industry standard for interpreting it, the Site does not respond to Do Not Track signals. We do honor the Global Privacy Control (GPC) signal, where technically feasible, as a valid request to opt out of any sale or sharing of personal information for the browser and device on which it is sent. As described in Section 3, we do not currently engage in any activity that would constitute a sale or share.

18.Third-Party Websites & Platforms

The Site and the Program link to and run on third-party websites, tools, and platforms that we do not control — including video conferencing, course and community hosting, scheduling, payment processing, and the AI tools described in Section 11. This Policy does not apply to them. We encourage you to read the privacy policy of any service you use.

19.Children's Privacy

The Site and the Program are intended for adults. We do not knowingly collect personal information from anyone under eighteen (18) years of age, and enrollment is not open to minors. If you believe a minor has provided us personal information, contact [email protected] and we will delete it.

20.Users Outside the United States

Generative Photography is based in the United States and our Site and Program are directed to the United States. If you access the Site or enroll from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

21.Changes to This Policy

We may update this Policy from time to time. The “Last Updated” date at the top reflects the most recent revision. If we make a material change to how we use personal information — including if we begin using advertising or analytics technology as described in Section 3 — we will provide notice by posting the updated Policy on this page and, where required or appropriate, by email. Your continued use of the Site after the effective date constitutes acceptance of the updated Policy.

22.Contact Us

To ask a question, exercise a privacy right, or opt out of communications: