Privacy Policy

Thank you for choosing to be part of our community at Niceshoots Suite LLC (“Niceshoots,” “we”, “us”, or “our”)

We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website, our web and mobile applications, our Lightroom plugin, and related services (together, the “Services”).

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on our website and/or other Services.

Information We Collect

We may collect and process the following types of personal information about you:

• Personal identification information (such as name, email address, phone number, business name)
• Account login information (such as username and password). If you sign in with Google or Facebook, we receive your name, email address and profile picture from that provider instead of a password
• Billing information (such as billing address, billing email, plan, and the last four digits and brand of your payment card). We do not collect or store full payment card numbers — card details are entered directly with our payment processors, who handle them under their own security standards
• Content you upload (photographs, galleries, album structure, image metadata such as EXIF capture date, camera model and — where you have not removed it — GPS location embedded in your files). Niceshoots does not intentionally read, extract, or use such metadata for its own purposes
• Client and booking information you enter or import (client names, email addresses, phone numbers, session dates, locations, notes and order details)
• Calendar information, if you connect a calendar (event times, titles, availability and busy/free status, limited to what is needed to show and sync your bookings)
• Technical information (such as IP address, browser type, operating system, language preferences, referring URLs, device name, country, location)
• Usage information (such as access history, interactions on the website, information about how and when you use our Website, and other technical information)
• Marketing attribution information (such as the campaign, advertisement, referral link or search that brought you to our website)
• Session activity recorded by analytics tools (see Session recording and heatmaps below)

This information is primarily needed to maintain the security and operation of our Website, and for our internal analytics and reporting purposes. Like many businesses, we also collect information through cookies and similar technologies.

By continuing to use the Website, you accept the collection described above. You can stop most of it at any time: analytics and marketing cookies can be blocked or deleted through your browser settings and through the provider opt-outs listed in our Cookie Policy. Information we need to run and secure the Website, such as the IP address recorded in our server logs, cannot be switched off while you are using the Services. If you block cookies, some parts of the Website and the application may not work as expected.

How We Use Your Information

We process your information based on legitimate business interests, to fulfill our contract with you, comply with legal obligations, and/or with your consent.

We use personal information collected via our Website for various business purposes, relying on legitimate interests, contract fulfillment, consent, and legal compliance. Specific purposes include:

• Facilitating account creation and logon, including linking to third-party accounts.
• Hosting, storing and delivering the photographs and galleries you upload.
• Operating the integrations you choose to connect, such as calendar sync, review display and mailing list sync.
• Posting testimonials with your consent.
• Requesting feedback and user communications.
• Managing user accounts.
• Sending administrative information.
• Protecting our services and enforcing terms and policies.
• Responding to legal requests.
• Fulfilling and managing orders.
• Administering prize draws and competitions.
• Delivering requested services and support.
• Sending marketing and promotional communications, with opt-out options.
• Delivering targeted advertising.
• Conducting data analysis, usage trend identification, and improving our Website and services.

We may use your information for data analysis, identifying usage trends, evaluating promotional campaign effectiveness, and improving our Website, products, marketing, and user experience. This information may be stored in aggregated and anonymized form, not linked to individual users. Identifiable personal information will not be used without your consent.

We do not sell your personal information for money, and we do not use the photographs you upload to train artificial intelligence or machine learning models.

Legal Bases For Processing

We use your personal data when legally allowed, primarily to:

• Fulfill contractual obligations or take steps before entering contracts.
• Comply with legal obligations.
• Pursue legitimate interests of our own or third parties, except where overridden by your rights and freedoms.
• Act on your consent, which you may withdraw at any time — for example for marketing email, or where we ask for your consent before enabling a particular feature.

Please be aware that whenever you voluntarily make your personal information available for viewing by third parties or the public through the Services or by posting via social media, that information can be seen, collected, and used by others. We are not responsible for any use of such information by others.

Third-Party Services And Integrations

We rely on a number of third-party providers to run the Services. Each provider receives only the information it needs for the purpose listed below, and each processes that information under its own privacy policy. This section lists the categories we use; a current, itemised list of our sub-processors is available on request at info@niceshoots.com.

1. Analytics and marketing on our website. These run on niceshoots.com and are used to understand how visitors find and use the site. They start when you first open the site, and by continuing to use the site you accept them. You can stop them at any time using the browser controls and provider opt-outs described under Tracking Technologies below and in our Cookie Policy.

Service	Provider	Purpose	Information it receives
Google Analytics	Google	Measuring website traffic and engagement	IP address (truncated), pages viewed, device and browser data, referral source
Meta / Facebook Pixel	Meta Platforms	Measuring advertising performance and building advertising audiences	IP address, pages viewed, sign-up and conversion events, Facebook identifiers where you are logged in to Facebook
OpenAI Ads Pixel	OpenAI	Measuring the performance of our advertisements in ChatGPT	Advertisement click reference, IP address, pages viewed, sign-up and conversion events, device and browser data
Lucky Orange	Lucky Orange LLC	Session recording, heatmaps and behaviour analytics	Mouse movement, clicks, scrolling, page content viewed, device and browser data

2. Integrations you choose to connect. These are optional. They only start receiving information after you connect them from your account settings, and they stop when you disconnect them. Connecting an integration does not give us access to anything beyond what is described here.

Integration	Purpose	Information involved
Google Calendar	Two-way sync of your bookings and availability	Event times, titles and busy/free status on the calendars you select
Apple Calendar	Two-way sync of your bookings and availability	Event times, titles and busy/free status on the calendars you select
Google Business Profile	Displaying your Google reviews on your Niceshoots website	Your business listing, review text, reviewer display names and ratings
Mailchimp	Syncing client lists and, where you enable it, subscribing new clients to your mailing list	Client names and email addresses you have chosen to sync
Flodesk	Syncing client lists and, where you enable it, subscribing new clients to your mailing list	Client names and email addresses you have chosen to sync
Niceshoots Lightroom Plugin	Uploading images from Lightroom Classic, re-publishing edits and syncing gallery structure	Image files and their metadata, gallery and collection names, and your account credentials or access token
Dropbox	Saving copies of your photographs and galleries to your own Dropbox account	The image files Niceshoots sends, their file names and metadata, and the folder you choose to save them into
Google Photos	Saving copies of your photographs to your own Google Photos library	The image files Niceshoots sends, their metadata, and the album they are placed in
Google Analytics	Measuring traffic to your Niceshoots website with your own analytics property	Whatever your Google Analytics property is configured to collect from your visitors
Google Tag Manager	Loading and managing your own tracking tags on your Niceshoots website	Whatever the tags you configure are set to collect from your visitors
Meta / Facebook Pixel	Tracking visits and bookings on your Niceshoots website with your own pixel	Page views, booking and conversion events from your visitors

When you save photographs to Dropbox or Google Photos, Niceshoots sends a copy of the images you choose to your own account with that provider. Niceshoots only uploads the images you select, and only into the folder or album you pick as the destination; we do not read, change or delete the other files stored in that account. From that moment the copy is held by Dropbox or Google under your agreement with them and is no longer covered by this Privacy Policy: deleting a gallery in Niceshoots does not remove the copy you saved. Where those photographs are of your clients, you remain responsible for that copy, including any consent you obtained and any retention or deletion promise you made to them. Disconnecting the integration stops Niceshoots sending anything further.

Where you use Mailchimp or Flodesk to email your clients, you are the sender and the controller of that mailing list. You are responsible for having a lawful basis to add a client to it, and for honouring their unsubscribe requests.

The same applies to any analytics or advertising tag you connect to your own Niceshoots website: you decide what it collects from your visitors, so you are the controller of that data and are responsible for disclosing it in your own privacy notice and for obtaining consent where the law requires it. These tags are separate from the ones we run on niceshoots.com, listed above.

3. Providers that run the Services. These process information on our behalf because the Services cannot operate without them:

• Payments — Stripe, PayPal and Square process subscription and order payments. They receive your name, billing address, email and card details directly; we receive only a confirmation, the last four digits and the card brand.
• Sign-in providers — Google and Facebook, where you choose to sign in with them. They confirm your identity to us and receive the fact that you signed in to Niceshoots.
• Hosting, storage and content delivery — our infrastructure providers store your account data and the photographs you upload, and deliver galleries to your clients.
• Transactional and marketing email — our email providers deliver account notifications, gallery links and, where you have opted in, marketing messages.
• Customer support — our support tools store the messages you send us and the account context needed to answer them.

We may also disclose personal information to professional advisers, to law enforcement or regulators where we are legally required to do so, and to an acquirer in connection with a merger, financing or sale of all or part of our business. If that happens we will notify you before your information becomes subject to a different privacy policy.

Use Of Google User Data

When you connect Google Calendar, Google Photos or Google Business Profile, or sign in with Google, Niceshoots exchanges data with Google through Google APIs. Niceshoots’ use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we use Google user data only to provide and improve the features you connected it for. We do not transfer it to others except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition. We do not use it for advertising, and we do not allow humans to read it except with your explicit consent, for security purposes, to comply with applicable law, or where the data has been aggregated and anonymised. You can revoke our access at any time by disconnecting the integration in your Niceshoots account settings, or from your Google Account permissions page.

We ask for the narrowest permissions that let the feature work. For Google Photos we request only permission to add photographs to your library and to read back the items that Niceshoots itself placed there — we cannot see the rest of your Google Photos library. We also read your Google Drive storage quota, so that we can tell you whether there is room to save before we start.

International Data Transfers

Niceshoots is based in the United States and several of our providers operate there and elsewhere. If you are located in the European Economic Area, the United Kingdom or Switzerland, this means your personal information may be transferred to a country that does not offer the same level of data protection as your own.

Where we make such a transfer we rely on an appropriate safeguard recognised under Article 46 GDPR — in most cases the European Commission’s Standard Contractual Clauses together with the UK International Data Transfer Addendum, or a finding of adequacy such as the EU–US Data Privacy Framework where the provider is certified. You can request a copy of the safeguards we rely on at info@niceshoots.com.

Information Security

We use appropriate security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. However, no security measure can guarantee absolute safety.

Tracking Technologies

We and our partners use cookies, web beacons, tracking pixels, and other tracking technologies to improve your browsing experience on our website, analyze website traffic, and understand where our visitors are coming from. The specific cookies we set, how long each lasts and how to control them are described in our Cookie Policy.

Session recording and heatmaps: one of our analytics providers records your interaction with our website — the pages you view, where you move your cursor, what you click and how you scroll — and replays it as a session recording so we can find and fix usability problems. We do not label these recordings with your name, but a recording can show what you typed into a form on the page, so it may still contain information that identifies you. Session recording starts when you open the site. You can stop it by blocking third-party scripts and cookies in your browser or with a privacy extension, or by using the opt-out that the provider offers.

Email tracking: our marketing emails may contain a small pixel that tells us whether the message was opened and which links were clicked. You can stop this by blocking images in your email client, or by unsubscribing.

You can choose to opt out of online tracking. Here are some methods:

• Blocking cookies in your browser: Most browsers let you remove or reject cookies used for interest-based advertising
• Blocking advertising ID use in your mobile settings: Your mobile device settings may allow you to limit the use of the advertising ID for interest-based advertising.
• Using privacy plug-ins or browsers: Use a browser with privacy features like Brave, or install plugins such as Privacy Badger, Ghostery, or uBlock Origin to block third-party cookies/trackers. You can also opt out of Google Analytics with a browser plug-in.
• Platform opt outs: Google, Facebook, and Twitter offer opt-out features to limit the use of your information for interest-based advertising.
• Advertising industry opt out tools: Use the Digital Advertising Alliance or Network Advertising Initiative to opt out of interest-based advertising by participating companies.

Note: You need to opt out on each browser and device you use.

Do Not Track: some browsers can send a “Do Not Track” signal, which has no agreed meaning and to which we do not respond.

Declining to provide information: We need certain personal information to provide our services. Without it, we may not be able to offer those services.

Protecting, retaining and storing your personal information

Protection: We have implemented appropriate and industry-standard technical and security measures to prevent your data from being lost or used without proper authorization. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. Therefore, we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security measures and improperly collect, access, steal, or modify your information. While we strive to protect your personal information to the best of our ability, the transmission of personal information to and from our website is at your own risk. We recommend accessing the website only within a secure environment.

Storage: Your information is stored on servers operated by our infrastructure providers. Where we transfer it outside your country, we do so under the safeguards described in International Data Transfers above.

Identification: To help prevent unauthorized access to your personal information, you are responsible for keeping your username and password (collectively, “ID”) private and confidential. You are solely responsible for any unauthorized use of your ID. If you suspect your information has been compromised or your account accessed without consent, please contact us immediately.

Retention: how long we keep information depends on what it is. We will make commercially reasonable efforts to delete it within a reasonable time frame once the period below has passed.

• Account and contact information — up to 3 years from the date of collection, or until the agreement governing your use of the Services is terminated, whichever is longer.
• Photographs and galleries — for as long as your account is active. After your account is closed or your subscription lapses we keep them for a limited grace period so that you can recover them, and then delete them permanently from our systems. Backups are overwritten on a rolling cycle, so a deletion can take until the end of that cycle to disappear from backups as well.
• Email address and IP address — kept after the 3-year period for security purposes, with the IP address anonymised. Retaining this is necessary, among other things, to comply with GDPR requirements related to your rights to access, restrict processing, erase, correct, object to, or port your data.
• Cookies and analytics data — for the lifetime of each cookie, which is listed in our Cookie Policy.

Children’s Privacy

The Services are intended for professional use by adults. We do not knowingly create accounts for, or collect personal information directly from, anyone under 16.

Photographers using Niceshoots may upload photographs of children — for example family, newborn or school sessions. Where that happens, the photographer is the controller of those images and is responsible for obtaining any consent required from a parent or guardian before uploading them. Niceshoots does not use images of children for any purpose other than delivering the Services to that photographer.

If you believe a child’s personal information has reached us without the necessary consent, contact info@niceshoots.com and we will delete it.

Your privacy rights

Under the General Data Protection Regulation (GDPR) and the UK GDPR, you have the following rights regarding your data:

• The right to request access to the personal data we hold about you.
• The right to request a copy of your personal data in electronic format (data portability).
• The right to request correction of the personal data that we hold about you.
• The right to request restriction of processing of your personal data.
• The right to request deletion of your personal data.
• The right to object to the processing of your personal data.
• The right to withdraw consent at any time, where we rely on consent.
• The right to lodge a complaint with a supervisory authority if you believe we have violated your rights under data protection laws.

In certain circumstances we will not be able to comply with your request. For example, we may have a legitimate interest permitting us not to act as you requested. To exercise your rights, to correct information that we have about you, or to ask questions about your rights, please contact us through the contact details provided in this Privacy Policy.

United States residents. If you live in California, Texas, Colorado, Connecticut, Virginia or another state with a comprehensive privacy law, you have the right to know what personal information we collect and disclose, to obtain a copy of it, to correct it, to delete it, and to opt out of targeted advertising and of the “sale” or “sharing” of your personal information. We will not discriminate against you for exercising these rights, and you may use an authorised agent to submit a request on your behalf.

We do not sell personal information for money. However, our use of advertising and analytics cookies — in particular the Meta Pixel and the OpenAI Ads Pixel — may qualify as “sharing” for cross-context behavioural advertising under California law. To opt out, email info@niceshoots.com with the subject line “Do Not Sell or Share My Personal Information”, or block advertising cookies using the browser controls and industry opt-out tools described under Tracking Technologies above.

We will verify your identity before acting on a request, and will respond within the period required by the law that applies to you. If we decline your request you may appeal by replying to our response.

Contact Us

If you have any questions or requests regarding this Privacy Policy, please contact us at: info@niceshoots.com