Privacy Policy

Last updated: November 6, 2025

Pink Noir LLC (referred to as “Pink Noir,” “we,” “us,” or “our”) is a wedding cinematography company based in Austin, Texas, operating through our WordPress website. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share your personal information, and how you can exercise your rights. We comply with applicable privacy laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

By using our website or providing personal information, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our site. For any questions or requests regarding your personal data, you can contact us at contact@pinknoir.com.

Data Controller and Contact Information

The “data controller” responsible for your personal information is Pink Noir LLC, an Austin, Texas company. If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise any of your privacy rights (described below), please contact us at:

  • Email: contact@pinknoir.com
  • Location: Austin, TX, USA
 

Information We Collect

We only collect personal information that is necessary to operate our business and respond to your inquiries. The types of data we collect fall into two categories: (1) information you provide directly via our contact form, and (2) information collected automatically through cookies and tracking tools.

  1. Information You Provide (Contact Form Data): When you fill out the contact form on our website, we collect the personal information you choose to provide, which includes:
  • Name (first and last name)
  • Email Address
  • Phone Number
  • Message Content (the information or inquiry you write in the message field)

Our contact form also automatically captures UTM parameters via hidden fields. UTM parameters (such as campaign source, medium, and other referral tags) help us understand how you found our site (for example, via an ad or link). These parameters are collected along with your form submission to inform our marketing analytics.

  1. Information Collected Automatically (Usage Data and Cookies): When you visit our website, certain data is collected automatically through the use of cookies and similar tracking technologies. This Usage Data includes information like:
  • Online Identifiers: Your device’s IP address, cookie identifiers, and other online IDs. (Note: We do not personally log or store IP addresses ourselves, but IP information may be processed by our analytics tools in the background.)
  • Device and Browser Information: The type of device, operating system, browser type, and version you use to access our site.
  • Usage Information: Your activity on our site, such as the pages or galleries you view, the time and date of your visit, the time spent on each page, and how you interact with our content.
  • Referral Data: Information about how you arrived at our site (e.g., which referring website or advertisement brought you to Pink Noir).

This data is collected via cookies, pixels, and scripts implemented on our site. In particular, we use Google Analytics 4 and the Meta Pixel (Facebook/Instagram tracking pixel) through Google Tag Manager to gather analytics and advertising data. These third-party tools use cookies and similar technologies to collect standard internet log information and visitor behavior information in an anonymized form. The information collected through Google Analytics and Meta Pixel may include cookies and device identifiers and may be transmitted to Google and Meta (Facebook) servers. We do not receive or store raw personal identifiers like IP addresses in our own database; we only have access to aggregated reports and analytics provided by these services.

Cookies: Cookies are small text files placed on your device when you visit a website. Our site uses both first-party and third-party cookies for functionality and for tracking/analytics. For example, Google Analytics and Meta Pixel set cookies to distinguish users and track site usage. You can control or delete cookies through your browser settings. (For more details, see the Cookies and Tracking Technologies section below.)

How We Use Your Information

We use the personal information collected for the following purposes:

  • To Respond to Inquiries and Provide Services: We use the contact information and message you provide through our contact form to respond to your requests. For instance, if you inquire about our wedding cinematography services, we will use your contact details to communicate with you and provide the information or quote you requested. We will only use your phone number or email to reply to your inquiry and will not send you unsolicited marketing communications or newsletters. (No email marketing is conducted; we contact you only in direct response to your inquiry.)
  • To Improve Our Website and Services: We analyze the Usage Data (via Google Analytics 4) to understand how visitors use our website, which pages are popular, and how effective our marketing efforts are (e.g., which referral or campaign brought you to us). This helps us optimize our website’s content, user experience, and our advertising strategies. All analytics data is aggregated and does not directly identify you personally.
  • For Advertising and Marketing Analysis: We use the Meta Pixel to measure the effectiveness of any advertising campaigns we run on Facebook/Instagram and to reach people who have visited our site with relevant ads on those platforms. The Meta Pixel allows us to understand conversions (e.g., if you contacted us after clicking one of our ads). We may use aggregated insights from this data to plan future advertising. (We do not use this data to send direct marketing emails or texts, and we do not profile individuals for any automated decisions outside of the analytics/ads context.)
  • To Preserve Site Functionality and Security: We may use cookies or other tracking tools to maintain essential site functions (like preventing spam through the contact form) and to protect our website from fraud or abuse. For example, we might employ security measures or CAPTCHA tools to ensure submissions are from real users.
  • To Comply with Legal Obligations: In rare cases, we may need to process or disclose your information to comply with a legal obligation or governmental request (such as responding to a lawful subpoena) or to establish, exercise, or defend legal claims.

We will not use your personal information for purposes that are incompatible with those listed above without asking for your consent or unless required or permitted by law. We also do not engage in any form of automated decision-making or profiling that produces legal or similarly significant effects on you.

Legal Bases for Processing (GDPR Compliance)

If you are located in the European Economic Area (EEA), United Kingdom, or another region with similar data protection laws, we must have a valid legal basis to process your personal data. We rely on the following legal grounds under the GDPR:

  • Contractual Necessity: When you fill out our contact form to request information or a quote for our services, we process the personal data you provide as a necessary step to respond to your request and potentially enter into a contract with you. This includes using your contact details to communicate with you about your inquiry. (GDPR Article 6(1)(b) – processing is necessary for the performance of a contract or to take steps at your request prior to entering a contract.)
  • Legitimate Interests: We process certain data to pursue our legitimate business interests in a manner that is not overridden by your privacy rights. For example, we have a legitimate interest in understanding how our website is used and in measuring the effectiveness of our marketing/advertising (using analytics tools like GA4 and Meta Pixel) so we can improve our services and grow our business. We also have a legitimate interest in ensuring the security and functionality of our website. When we rely on this basis, we always consider your rights and interests and will refrain from or limit processing if it unduly impacts your privacy. (GDPR Article 6(1)(f) – processing is necessary for purposes of our legitimate interests.)
  • Consent: For visitors from the EU/EEA (and where otherwise required by law), we rely on your consent to use non-essential cookies and tracking technologies. When you first visit our site, you will be presented with a cookie banner or consent mechanism. We will not load analytics or advertising cookies (like Google Analytics 4 or Meta Pixel) unless you consent via the banner. You have the right to refuse or withdraw your consent at any time (see Your Rights below). (GDPR Article 6(1)(a) – you have given clear consent for us to process your personal data for a specific purpose.)

Note: In some cases, more than one legal basis may apply to the processing of the same piece of data. For instance, we might process your data under legitimate interests and also obtain consent for certain uses to ensure compliance with ePrivacy/cookie laws.

Cookies and Tracking Technologies

As mentioned, we use cookies and similar tracking technologies on our website. This section explains our use of these technologies and your choices.

What Are Cookies? Cookies are small text files that websites store on your device (computer, smartphone, etc.) when you visit. They are widely used to make websites work efficiently and to provide information to the site owners. Cookies can be “session” cookies (which expire when you close your browser) or “persistent” cookies (which remain on your device for a set period or until you delete them).

Types of Cookies We Use:

  • Essential Cookies: These are necessary for the website to function and cannot be switched off in our systems. For example, they may be used for security (to prevent fraudulent use of the contact form) or to remember cookie consent choices. You can set your browser to block or alert you about these cookies, but some parts of the site might not work as intended.
  • Analytics and Performance Cookies: We use Google Analytics 4 cookies to collect information on how visitors use our site. These cookies collect data such as page visits, traffic sources, and other aggregate metrics. This helps us measure and improve site performance. The information collected by these cookies is aggregated and anonymized; it does not directly identify individual visitors. Google Analytics may use cookies and read certain identifiers from your device (such as IP address, though Google Analytics 4 does not store IP addresses in reports by default) to deduce general location and track usage. We have configured our Google Analytics to respect Do Not Track and consent preferences where possible.
  • Advertising/Marketing Cookies: The Meta Pixel on our site may set cookies to help us with advertising measurement and retargeting on Meta’s platforms (Facebook and Instagram). For instance, if you consent to these cookies, the Pixel will note that you visited our site or took certain actions (like visiting the contact page), which can help us show relevant Pink Noir ads on Facebook/Instagram to you or audiences with similar interests. We do not receive personally identifiable information from these cookies; rather, we get anonymized insights (e.g., how many people filled out our form after clicking an ad). Meta’s use of the data collected via the Pixel is governed by Meta’s privacy policy.

Cookie Consent (EU/EEA visitors): If you are in the EU/EEA, our site will present a cookie consent banner when you first visit. You can choose to accept or reject non-essential cookies (analytics and advertising). Your choice will be remembered, but you can change your preferences at any time by clearing cookies or using the cookie settings tool (if available on our site). We will not deploy Google Analytics or Meta Pixel cookies for EU users unless you have given consent.

Your Cookie Choices: Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. You can also delete cookies stored on your device. Please be aware that blocking cookies may impact some features of our website. For Google Analytics, you can opt out by installing the Google Analytics Opt-out Browser Add-on in supported browsers. For Meta Pixel, you can adjust your ad preferences in your Facebook user settings or use browser extensions that block trackers.

Sharing and Disclosure of Personal Information

We value your privacy. We do not sell your personal information to third parties. We only share your information in a limited manner, as described below, and always with appropriate safeguards and only to achieve the purposes outlined in this policy.

  • Service Providers: We share personal data with trusted third-party service providers who help us operate our website and business, solely for the purposes described in this policy. For example:
  • Website Hosting and IT: Our website is built on WordPress and is hosted by third-party hosting providers. Your information (e.g., contact form submissions) may be stored on their servers. We ensure our hosting provider maintains appropriate security measures.
  • Analytics: We use Google Analytics 4, a service provided by Google. When you visit our site, Google may receive certain Usage Data (described above) to provide us with analytics reports. Google acts as a data processor to us, meaning they only process data on our behalf and as instructed by us. We have appropriate data protection terms in place with Google.
  • Advertising: We use Meta Pixel (provided by Meta, the company behind Facebook/Instagram) to help with advertising analytics. Meta may receive some data (via cookies/pixel) about your visit to our site. This allows us to measure ad effectiveness. Meta acts as a service provider in this context, and we do not share directly identifiable personal info like your name or contact details with them via the Pixel.
  • These service providers are bound by contractual obligations to keep personal information confidential and to use it only for the purposes of providing their services to us. They do not have the right to use your data for their own unrelated purposes.
  • Legal Compliance and Protection: We may disclose your personal information if required to do so by law or in the good-faith belief that such action is necessary to: (i) comply with a legal obligation, legal process, or lawful request (for example, a court order or government subpoena); (ii) enforce our Terms of Service or other agreements; (iii) detect, prevent, or address fraud, security, or technical issues; or (iv) protect the rights, property, or safety of Pink Noir, our customers, or the public. We will only do this to the extent that such disclosure is permitted by applicable data protection laws.
  • Business Transfers: If Pink Noir LLC is involved in a merger, acquisition, bankruptcy, or sale of all or a portion of its assets, your personal information may be among the assets transferred to the acquiring entity. If such a transfer occurs, we will ensure the new owner is bound by terms that are at least as protective as this Privacy Policy and that you are notified (e.g., via a notice on our website) of any change in data control or new privacy policy provisions.

Aside from the purposes and third parties described above, we do not share your personal data with third parties. This means, for instance, we do not give or sell your information to other companies for their own marketing or advertising purposes.

Data Retention

We only keep your personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

  • Contact Form Submissions: We retain the personal information you submit via our contact form (your name, contact info, and message) for up to 360 days (approximately one year). We keep this information in order to refer back to our communications and provide better service (for example, if you reach out again or book our services within that timeframe). After 360 days, we will delete your personal data from our active records. This deletion may be done by removing old inquiry emails and purging entries from our website database.
  • Analytics Data: Data collected through Google Analytics 4 and Meta Pixel is retained in those platforms according to the settings we’ve configured. Currently, our Google Analytics retention setting for user-level data is 14 months at most (and may be less for certain data types), but this data is aggregated and does not directly identify you. Meta Pixel data used for advertising audiences is typically retained for a shorter period or as per Meta’s policies. We do not individually archive analytics logs that would identify specific users. Any aggregated analytics reports may be kept longer than 360 days, but they contain no personal identifiers.
  • Legal Obligations and Disputes: In certain cases, we might need to retain your information for longer than 360 days if necessary to comply with our legal obligations, resolve disputes, or enforce our agreements. For example, if a legal issue arises that involves your data, we would retain the necessary information until it is resolved. In all cases, we securely store and protect any data we retain.

When we no longer have a legitimate need to retain your personal information, we will securely delete or anonymize it. (If deletion or anonymization is not immediately possible—for example, because the data is stored in backup archives—we will securely store the data and isolate it from further use until deletion is possible.)

Your Privacy Rights

We respect the rights you have regarding your personal information. Depending on where you live, these rights may vary. Residents of the European Union (and similar jurisdictions) have certain rights under the GDPR, and residents of California have rights under the CCPA/CPRA. We extend many of these core rights to all our users where feasible. Below, we outline your rights and how you can exercise them:

Rights of Individuals in the EU/EEA and UK (GDPR Rights)

If you are in the European Union, European Economic Area, United Kingdom, or a jurisdiction with similar laws, you have the following data protection rights:

  • Right to Access: You have the right to request confirmation of whether we are processing your personal data, and if so, to request a copy of the personal data we hold about you. We will provide you with a copy of your information in a commonly used electronic format, unless doing so would adversely affect the rights and freedoms of others.
  • Right to Rectification: You have the right to request that we correct or update any inaccurate or incomplete personal information we hold about you. If you believe any of your details are wrong or out of date (for example, your contact information), please let us know so we can correct it.
  • Right to Erasure (Right to be Forgotten): You can request that we delete your personal data under certain circumstances. For instance, if the data is no longer necessary for the purposes it was collected, or if you withdraw consent (in cases where consent is the legal basis) and we have no other legal basis to continue processing it, or if you object to processing and we have no overriding legitimate grounds. Please note that we may not always be able to delete data immediately, for example if we are required to keep it by law or it is needed for legal claims – but we will inform you if that is the case.
  • Right to Restrict Processing: You have the right to ask us to restrict or suspend the processing of your personal data in certain circumstances. This means we would store your data but not use it further (other than to keep a record of the restriction). For example, you might request restriction if you contest the accuracy of the data or have objected to our processing (pending verification of our overriding grounds).
  • Right to Object: You have the right to object to our processing of your personal information when such processing is based on our legitimate interests. You can also object at any time to processing of your personal data for direct marketing purposes. In practice, we do not send direct marketing, but if you feel that our use of analytics or advertising tracking interferes with your privacy rights, you can object to that processing. If you raise an objection, we will consider it and stop or adjust the processing unless we have compelling legitimate grounds that override your rights (or if it’s needed for legal reasons).
  • Right to Data Portability: You have the right to request a copy of the personal data you provided to us in a structured, commonly used, and machine-readable format, and you can ask that we transmit it to another data controller where technically feasible. This right applies when the processing is based on your consent or a contract and is carried out by automated means.
  • Right to Withdraw Consent: If we are processing your personal data based on your consent (for example, if you consented to analytics/advertising cookies), you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of any processing we conducted prior to your withdrawal. If you withdraw consent for cookies, you can do so by adjusting your cookie settings on our site or contacting us — and we will cease the related processing (e.g., turn off analytics/advertising for your visits).
  • Right to Lodge a Complaint: If you believe we have infringed your data protection rights, you have the right to lodge a complaint with a supervisory authority in the EU/EEA or the UK (for example, your national Data Protection Authority). We would, however, appreciate the chance to address your concerns directly first, so we encourage you to contact us at contact@pinknoir.com so we can discuss any issue.

Rights of California Residents (CCPA/CPRA Rights)

If you are a resident of California, you are protected by privacy rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). These laws provide, among others, the following rights:

  • Right to Know (Access): You have the right to request that we disclose what personal information we have collected about you in the past 12 months, including the categories of personal information, the categories of sources from which the information was collected, the business or commercial purpose for collecting (or sharing) the information, the categories of third parties with whom we share the information, and the specific pieces of personal information we have collected about you. Upon a verifiable request, we will provide the required information in a portable and readily useable format, free of charge.
  • Right to Delete: You have the right to request that we delete any personal information we have collected from you, subject to certain exceptions. Once we receive and confirm a verifiable deletion request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies. (For example, we may retain information needed to complete a transaction you initiated, to detect security incidents, to comply with legal obligations, or other such exceptions allowed by law.)
  • Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you. If you become aware that any information we have is incorrect, please let us know and upon verification we will correct it as required.
  • Right to Opt-Out of Sale or Sharing: The CCPA/CPRA gives you the right to opt out of the “sale” of your personal information or the “sharing” of your personal information for cross-context behavioral advertising purposes. Pink Noir does not sell personal information to third parties for money. We also do not share personal information for cross-context behavioral advertising in the conventional sense of providing lists of customer data to advertisers. However, we do use third-party analytics and advertising cookies (like the Meta Pixel) that might be considered a “share” of information (for example, your browsing activity may be shared with Meta to help serve our ads). If you prefer to opt out of such sharing, you can do so by:
  • Using our cookie management tool or banner on the website to decline advertising cookies (for California residents, we will honor an opt-out preference signal such as the Global Privacy Control (GPC) if detected by our site).
  • Alternatively, you may contact us at contact@pinknoir.com with a request to opt out of cookies/tracking, and we can guide you on how to do so or manually honor your request by ensuring no personal data from our site is shared with advertising partners for your browser.

Once you opt out, we will refrain from sharing your data for advertising purposes unless you later provide permission.

  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. This means we will not deny you our services, charge you a different price, or provide a different level or quality of service just because you exercised your privacy rights. (However, please note that if you ask us to delete data or opt out of certain uses, it may limit our ability to personalize your experience or provide certain services – for example, if you opt out of tracking, some site features that rely on it may not function the same.)

Other U.S. Residents: If you are a resident of a U.S. state that provides additional privacy rights (such as Virginia, Colorado, Connecticut, or Utah), you may have similar rights to access, delete, or opt-out. We will honor the privacy rights applicable to you under relevant state laws. Feel free to contact us to exercise those rights.

Exercising Your Rights

How to Make a Request: To exercise any of the rights above or ask a privacy-related question, please contact us by email at contact@pinknoir.com. Please include your name and specify which right or rights you wish to exercise. For certain requests (like access, deletion, or knowing specific pieces of data), we will need to verify your identity to ensure the security of your information. This might involve confirming information we already have on file (for example, verifying your email address or phone number that you provided via our contact form).

Authorized Agents (for California): If you are a California resident, you may also designate an authorized agent to make requests on your behalf. We will require the agent to provide proof of your written permission and may still ask you to verify your identity directly with us.

Response Time: We will respond to privacy rights requests as soon as possible and within the timeframe required by law. For EU data subjects, we strive to respond within one month. For California residents, responses will generally be provided within 45 days of receiving a verifiable request (or up to 90 days if an extension is needed, in which case we will inform you of the reason and extension period). There is no fee for making a request, but if requests are manifestly unfounded or excessive, we reserve the right to refuse or charge a reasonable fee as allowed by law.

International Data Transfers

Pink Noir LLC is based in the United States, and any information you provide via our website will be stored and processed in the United States. If you are accessing our site from outside the U.S., particularly from the EU or other regions with data protection laws, please be aware that your information will be transferred to and processed in the U.S. The data protection and privacy laws in the U.S. may not be as comprehensive as those in your country.

However, we take steps to ensure that your personal data receives an adequate level of protection even when transferred outside of your jurisdiction. These measures include:

  • EU-U.S. Data Transfers: When we transfer personal data from the European Economic Area or UK to the United States, we rely on appropriate legal mechanisms such as the European Commission’s Standard Contractual Clauses (SCCs) or other legally recognized transfer frameworks to safeguard the data. These clauses contractually obligate the recipient of the data in the U.S. to protect the data to the standard required in the EU. We also only work with service providers who commit to compliance with GDPR requirements for data transferred out of Europe. (For example, Google and Meta are certified under the EU-U.S. Data Privacy Framework as of 2025, which is an approved mechanism for data transfer.)
  • User Consent: In certain cases, we may rely on your explicit consent for cross-border data transfers. By contacting us or using our services and providing your information, you are consenting to the transfer of your personal data to the United States for the purposes described in this Privacy Policy. Where we ask for your consent on our website (such as via a cookie banner for EU users), accepting the Privacy Policy or consenting to cookies also includes consent to the related data transfers.

If you have questions about international data transfers or need more information about the safeguards we have in place, please contact us at contact@pinknoir.com.

Data Security

We are committed to protecting the security of your personal information. We implement reasonable administrative, technical, and physical security measures to safeguard your data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of our website (your form submissions are transmitted securely via HTTPS), regular software updates and security patches on our WordPress site, and limiting access to personal data only to those in our team or service providers who need it to perform their duties (and who are bound by confidentiality).

However, please understand that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. You share information with us at your own risk. If we ever experience a data breach that poses a significant risk to your rights, we will notify you and the appropriate authorities as required by law.

Children’s Privacy

Our website and services are not intended for children under the age of 16. We do not knowingly collect personal information from anyone under 16 years old. If you are under 16, please do not submit any personal information through our contact form or use our services. Parents or guardians should supervise their children’s online activities and consider using parental control tools.

If we become aware that we have inadvertently collected personal data from a child under 16, we will take steps to delete that information promptly from our records. If you are a parent or guardian and you believe your child under 16 may have provided personal information to us, please contact us at contact@pinknoir.com, and we will work to delete the data.

Updates to This Privacy Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make changes, we will post the updated Privacy Policy on this page and update the “Last updated” date at the top. If the changes are significant, we may provide a more prominent notice (such as a banner on our website or an email notification if appropriate).

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website after any changes to this Privacy Policy constitutes acceptance of those changes.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us:

Pink Noir LLC
Email: contact@pinknoir.com
Location: Austin, TX, USA

We will be happy to answer your questions and address any issues to the best of our ability. Your privacy is important to us, and we welcome your feedback. Thank you for trusting Pink Noir with your wedding memories and personal data. We are dedicated to keeping that trust through our commitment to privacy and security.