Website Privacy & Cookie Policy 

Effective Date: September 30, 2026

Last Updated: September 30, 2026

1. Purpose and Scope

This Website Privacy and Cookie Policy (”Privacy Policy“) governs the collection, use, disclosure, and safeguarding of personal information by AluxAmor Photography (“we, ” “us, ” or “our”) through our website located at https://aluxamor.com (the “Site”) and in the course of our commercial on-location photography operations in Manitoba, Alberta, and throughout Canada.

We respect individual privacy and handle personal information in strict compliance with:

• The federal Personal Information Protection and Electronic Documents Act (PIPEDA);
• The Alberta Personal Information Protection Act (PIPA); and
• Canada’s Anti-Spam Legislation (CASL).

This Privacy Policy applies to any individual who accesses our Site, browses our portfolios, submits an inquiry, requests an estimate, schedules a session, or contracts our services.

No Implied Contract: Transmitting an inquiry, message, or booking request through our Site does not constitute a binding contract or obligate AluxAmor Photography to accept an assignment. A binding commercial engagement is established solely upon the execution of a separate written service contract and the receipt of any required retainer or deposit.

2. Mature Artistic Content & Age Restriction (18+)

Portions of our Site display fine art portraiture and boudoir photography that may contain partial or complete nudity, sensual themes, and mature artistic content.

• Adult Audience Only: The Site and its mature portfolio galleries are intended solely for individuals who have reached the legal age of majority in their jurisdiction of residence (18 years of age in Manitoba and Alberta). By accessing, viewing, or continuing to browse portfolio pages containing artistic nudity, a visitor confirms that they are at least 18 years of age and that viewing artistic nudity is lawful in their jurisdiction.
• Depiction of Minors Strictly Prohibited: We enforce an absolute prohibition against capturing, hosting, or displaying any form of nudity or partial nudity involving individuals under the legal age of majority. Every individual depicted in artistic, boudoir, or nude imagery on our Site was verified by government-issued identification to be of legal age at the time of the photography session and provided express, written authorization.

3. Definition & Sensitivity of Personal Information

"Personal information" means any information about an identifiable individual, recorded in any form.

In accordance with Canadian privacy legislation, personal information does not include business contact information (such as an individual’s name, business title, business address, professional email address, or business telephone number) when collected, used, or disclosed solely for the purpose of communicating with them in their employment, business, or professional capacity.

Special Category: Sensitive Photographic Data

Photographic likenesses and visual recordings captured during client sessions constitute personal information. Where photographs depict an individual in a state of undress, boudoir attire, or partial or complete artistic nudity, that material is classified as highly sensitive personal information requiring heightened security safeguards, strict operational confidentiality, and explicit written consent.

4. Collection of Personal Information

We limit our collection of personal information strictly to what is reasonable and necessary to fulfill identified commercial purposes. We collect information through two primary channels:

A. Information Provided Directly by You

We collect personal information when an individual knowingly submits it through our contact forms, email correspondence, consultation requests, or service contracts:

• Contact Identifiers: Full legal name, personal email address, telephone number, physical or billing address, and, to confirm the legal age of majority, date of birth;
• Session and Assignment Details: Requested dates, on-location shoot venues, creative preferences, participant names, and operational requirements necessary to coordinate and execute on-location photography assignments;
• Billing and Payment Information: Invoicing details and payment transaction confirmations. All credit card transactions are processed directly through certified, PCI-DSS-compliant third-party payment gateways. We do not receive, process, or store full payment card numbers on our website infrastructure.

B. Information Collected Automatically (Cookies and Digital Telemetry)

When a visitor navigates our Site, our hosting servers and analytics tools automatically collect standard digital technical data:

• Internet Protocol (IP) address and general geographical region;
• Device hardware specifications, operating system, browser configuration, and screen resolution;
• Referring and exit URLs;
• Clickstream data, page dwell times, and site navigation patterns.

Except where required to investigate cybersecurity incidents, fraudulent activity, or violations of our website terms, automated telemetry data is evaluated on an aggregated, de-identified basis and is not linked to an identifiable person.

5. Cookies and Web Tracking Technologies

Cookies are small data files placed on an individual’s device. We categorize the cookies used on our Site as follows:

• Category
• Operational Function
• Status & Consent

Strictly Necessary

Essential for website routing, session security, cache delivery, and intake form transmission.

Always Active (Cannot be disabled)

Performance & Analytics

Collects aggregated, anonymous data to measure visitor traffic and optimize website performance.

Optional

Functionality

Stores user-selected preferences (such as regional settings or display parameters).

Optional

Marketing & Social

Measures the reach of promotional campaigns and evaluates referral performance.

Optional

Managing Cookie Choices and Browser Storage Notice: Visitors can choose to accept all cookies or reject non-essential cookies through our on-site cookie consent banner. Choosing to reject non-essential cookies ensures that only strictly necessary technical cookies remain active to run the Site, while all optional analytics and tracking tools remain blocked.  

Browser-Specific Notice: Your choice to accept or reject cookies is stored locally within the specific web browser and device used during your visit. If you access our Site from a different browser or device, or clear your browser cache and saved cookies, your preference will reset, and the banner will appear again to confirm your choice.

6. Model Releases, Portfolio Display & Expedited Takedown Policy

The public display of any client photograph—including boudoir, sensual, or fine art imagery featuring partial or complete nudity—is governed by express contractual authorization:

• Express Written Consent Required: We never publish, broadcast, or display client photographs containing nudity, boudoir content, or identifiable personal likenesses on our public Site, social media channels, or promotional materials without express written authorization and consent granted within a signed service agreement or portfolio contract/agreement.
• Private Sessions and Commercial Terms: Clients maintain the discretion to decline public portfolio publication or request complete session privacy in accordance with the options, service tiers, and rate structures established in their written agreement. Where a client selects private session terms or does not grant marketing/model release authorization, their images remain strictly confidential and restricted to private, authenticated delivery systems.
• Expedited Takedown Procedure: If an individual who previously provided written authorization for public portfolio display wishes to revoke that consent or request the removal of their intimate or nude likeness from our Site, they may submit an expedited written request directly to info@aluxamor.com. Upon receiving and verifying the request, we will remove the identified imagery from our public Site within five (5) business days, subject to any governing terms, commercial fee adjustments, or contractual remedies specified in the underlying agreement.

7. Minors and Family Portraiture

Outside of our adult boudoir portfolio, our commercial photography services may include family, portrait, and commercial assignments involving minors.

We do not knowingly solicit or collect personal information from individuals under the age of majority without parental or guardian oversight. Where an assignment involves the portraiture of minors, all personal information, participant details, and visual likenesses are collected and processed strictly with the express consent of the child’s parent or legal guardian. If a parent or guardian becomes aware that their child has provided us with personal information without consent, they should contact our Privacy Officer immediately so we can remove the data.

8. Purposes for Collection, Use, and Processing

AluxAmor Photography collects and processes personal information exclusively for reasonable commercial purposes, including:

• Reviewing prospective client inquiries, producing quotes, and preparing service proposals;
• Scheduling, coordinating, and delivering mobile and on-location photography sessions;
• Processing payments, issuing invoices, and maintaining statutory accounting records;
• Delivering digital client galleries, commercial deliverables, and post-session client support;
• Maintaining, optimizing, and securing our website infrastructure;
• Complying with Canadian federal and provincial legal, regulatory, tax, and insurance requirements;
• Transmitting news, service updates, or promotional materials where the recipient has given express consent under CASL.

Commercial Messages vs. Operational Communications

Recipients may withdraw consent to commercial marketing communications at any time by clicking the “Unsubscribe” link in any promotional email.

In accordance with CASL and Canadian privacy jurisprudence, unsubscribing from marketing messages does not terminate our ability to send essential transactional or operational notices (such as quote revisions, booking confirmations, session arrival reminders, licensing terms, or invoices and receipts) directly required to fulfill an active commercial agreement.

9. Circumstances for Disclosure Without Consent

We do not sell, rent, lease, trade, or distribute personal information to third parties. We disclose personal information to external parties only with express consent, or under limited statutory exceptions recognized by PIPEDA and Alberta PIPA, including:

• When required by valid legal authority, such as a court order, subpoena, or search warrant;
• To lawful authorities in an emergency situation threatening an individual’s life, physical health, or personal security;
• Where reasonable to investigate an actual or anticipated breach of contract or violation of law;
• To our legal counsel, accountants, and professional liability insurers to defend against legal claims, collect outstanding accounts, or meet audit requirements;
• In connection with a proposed or finalized business transaction (such as a corporate reorganization or sale of business assets), subject to binding confidentiality and non-disclosure protections.

10. Third-Party Service Providers and Cross-Border Transfers

We engage selected third-party service providers to support our business operations (such as website hosting platforms, cloud infrastructure, private digital gallery delivery services, email delivery providers, and web analytics tools).

Notice Regarding Service Providers Outside Canada (Alberta PIPA s. 13.1)

Certain third-party service providers utilized by AluxAmor Photography may be located, or may process or store personal information, outside of Alberta and outside of Canada. As a result, personal information within our custody or control may be transferred across provincial and international borders and stored or processed in foreign jurisdictions.

Personal information stored outside Canada is subject to the laws of the foreign jurisdictions where it is held and may be accessible to foreign courts, law enforcement, or national security authorities under lawful local orders.

We implement reasonable contractual, administrative, and technological controls to require that our service providers maintain privacy safeguards comparable to Canadian legal standards. Inquiries regarding our practices with foreign service providers may be directed to our Privacy Officer.

11. Third-Party Links and External Platforms

Our Site may contain links or integrated widgets directing visitors to third-party websites, plug-ins, payment gateways, client proofing galleries, or social media networks. Clicking on those links or enabling those connections may allow third parties to collect or share data about you.

We do not own, control, or endorse these third-party platforms, and their privacy practices are not governed by this Privacy Policy. When leaving our Site, visitors are strongly encouraged to review the individual privacy policy of each external platform they visit. AluxAmor Photography disclaims all responsibility and liability for the data practices, content, and security of third-party platforms.

12. Safeguards, Gallery Delivery, Cyber Risks, and Data Retention

A. Custody and Control Safeguards for Sensitive Materials

We maintain administrative, technological, and physical safeguards appropriate to the sensitivity of the personal information within our custody and control. To protect client photographic media, including boudoir, sensual, or intimate portraiture, we implement the following measures:

• Website Encryption: Full Transport Layer Security (TLS/HTTPS) encryption is maintained across our website and digital intake pipelines.
• Administrative Authentication: Password-protected administrative access controls and multi-factor authentication are enforced across our operational management accounts.
• Local and Cloud Repositories: Unedited RAW files and edited master photographs are stored on encrypted offline storage devices or credential-restricted, secure cloud repositories.

B. Standard Gallery Delivery Method

Unless a client requests an alternative method in writing and we agree to it in advance, all completed photographs, previews, and digital proofs are provided exclusively through private, password-protected online client galleries. Access to these galleries is granted solely to the contracting client via secure login credentials.

C. Industry-Standard Measures, Cyber Risks, and Hacker Vulnerabilities

AluxAmor Photography operates as an independent commercial photography business. The safeguards, technical defenses, and access credentials we maintain are implemented in accordance with commercially reasonable industry practices appropriate for professional creative services.

While we apply measures designed to protect client records and galleries from unauthorized access, no digital platform, database server, cloud storage architecture, or electronic system is completely impenetrable or immune to malicious acts. Clients and website visitors acknowledge that electronic systems may be vulnerable to targeted cyberattacks, unauthorized third-party hacking, ransomware, or zero-day platform vulnerabilities capable of circumventing industry-standard commercial safeguards. AluxAmor Photography disclaims liability for data interception, unauthorized access, exfiltration, or breach resulting from criminal or malicious cyber incidents occurring beyond our reasonable commercial and technological control.

D. Disclaimer Regarding Internet Transmissions

While we implement industry-standard technical measures, the transmission of information over the public internet is not completely secure. Any electronic transmission of personal information through our Site, web forms, client galleries, or unencrypted email is undertaken at the user’s own risk. AluxAmor Photography disclaims liability for data interception, unauthorized access, or corruption occurring outside our reasonable technological control during transit across external public networks.

E. Data Breach Response (RROSH Protocol)

In the event of a security incident involving personal information within our custody or control, we will promptly evaluate the incident in accordance with PIPEDA and Alberta PIPA. Where an incident presents a “real risk of significant harm” (RROSH) to an individual, we will notify the affected individuals and submit a breach report to the Office of the Privacy Commissioner of Canada and the Office of the Information and Privacy Commissioner of Alberta in compliance with statutory mandates.

F. Data Retention and Secure Disposal

Personal information is retained only as long as necessary to fulfill the commercial purposes for which it was gathered, or to satisfy legal, tax, and financial recordkeeping requirements. When personal data or digital assets reach the end of their applicable retention schedule, they are securely deleted, permanently overwritten, or irreversibly anonymized.

13. Individual Rights: Access, Correction, and Consent Withdrawal

Subject to statutory limitations under PIPEDA and Alberta PIPA, every individual holds specific rights regarding their personal information:

• Right of Access: An individual may submit a written request to receive a summary of the personal information we hold about them, alongside an explanation of how it has been used or disclosed.
• Written Request & Response Window: All requests must be submitted in writing to our Privacy Officer. We will respond within 30 calendar days, unless an extension is permitted under applicable privacy statutes.
• Administrative Costs: Access to personal information is generally provided free of charge. However, where permitted by law, we reserve the right to charge a minimal administrative fee for complex or voluminous requests. If a fee applies, we will provide an estimate to the individual in advance and proceed only upon their written confirmation.
• Exceptions to Access: Access will be refused where disclosure would reveal personal information about another person without their consent, compromise confidential commercial information, or violate legal or professional privilege.
• Right of Correction: If an individual demonstrates that personal information in our custody is incomplete, inaccurate, or outdated, we will correct the record accordingly.
• Withdrawal of Consent: An individual may withdraw or alter their consent to data processing upon reasonable written notice, subject to legal and contractual limitations. If withdrawing consent interferes with our ability to fulfill a photography service agreement, they will be advised of the operational and contractual implications.

14. Privacy Officer Contact Information and Regulatory Redress

For questions regarding this policy, cross-border service providers, takedown requests, or to exercise rights of access or correction, contact our designated Privacy Officer:

• Attention: Privacy Officer
• Organization: AluxAmor Photography
• Email: info@aluxamor.com
• Operational Bases: Winnipeg, Manitoba / Calgary, Alberta

If a privacy concern or complaint is not resolved to your satisfaction, you retain the right to contact the relevant supervisory authority:

• Federal and Manitoba Matters: Office of the Privacy Commissioner of Canada

Website: www.priv.gc.ca | Toll-Free: 1-800-282-1376

• Alberta Matters: Office of the Information and Privacy Commissioner of Alberta

Website: www.oipc.ab.ca | Toll-Free: 1-888-878-4044

15. Policy Revisions

We reserve the right to amend this Privacy Policy periodically to reflect changes in our operational procedures or statutory obligations. All revisions will be posted on this page with an updated “Last Updated” date. Continued use of our Site following any posted modifications constitutes acceptance of the amended policy.