Privacy policy.

Who this policy covers

This policy applies to The Wedding Click's website inquiry experience, quote and booking pages, token-protected client portal, and Click Studio CRM. The Wedding Click operates these services.

Information we collect

We collect information you provide or that is created while we serve you, including:

• Names, roles, email addresses, phone numbers, event dates, venues, addresses, and inquiry details.
• Quotes, bookings, contracts, questionnaires, messages, notes, tasks, schedules, galleries, documents, invoices, payment status, transaction references, and related service records.
• Technical and security information such as timestamps, delivery status, browser or device details, audit history, and limited activity records used to operate, protect, and improve the service. Website measurement includes pages and landing pages viewed, inquiry-link and Client Proofs clicks, form progress, referring website, campaign tags, broad device class, and random browser and session identifiers that are hashed before storage. It does not add names or contact details to browsing activity, and owner/test or likely automated activity may be flagged so it can be excluded from performance reports.
• Information made available through services that the studio connects, such as Google, PayPal, ShootProof, Facebook, and Instagram, subject to the permissions granted for each connection.

Payment-card and bank-account details are handled by the payment provider. Click Studio CRM records payment status, amounts, fees, and provider transaction references rather than storing full card or bank credentials.

How we use information

We use information to respond to inquiries; check availability; prepare quotes and contracts; manage bookings, projects, schedules, tasks, galleries, invoices, and payments; send service communications; maintain business and audit records; prevent duplicate or unauthorized activity; and improve the reliability and usability of our services.

We do not sell personal information or Google user data, and we do not use Google user data for advertising.

Google account data

The studio owner may connect an authorized Google account so Click Studio CRM can provide the following business functions:

• Gmail: read and organize messages needed to match client and inquiry communications to CRM records, detect supported inquiry sources, send requested or approved studio emails, and monitor delivery and reply activity. The CRM may store message and thread identifiers, participants, subject and message content, timestamps, labels, delivery details, CRM matches, and audit records.
• Google Calendar: read the calendar list so the owner can select a studio calendar; read events from enabled non-personal calendars for scheduling context; and create or update CRM-managed events on the selected Studio Events calendar. The CRM does not invite attendees, send Calendar notifications, or delete external Google Calendar events.

Google OAuth access and refresh credentials are encrypted and stored server-side. They are used only to operate the authorized features and are not displayed to clients. Access is limited to authorized CRM users and service providers that need it to operate the system. A Google connection can be revoked through the Google Account or disconnected from the CRM.

Click Studio CRM's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

When information is shared

We share information only as needed to provide the service, comply with law, protect the business or its clients, or complete an action you request. Recipients may include hosting and infrastructure providers, email and calendar providers, payment processors, gallery and document services, social platforms, professional advisers, and authorities when legally required.

Service providers may use information only to perform services for us under their own terms and privacy obligations. We do not permit them to sell information provided through Click Studio CRM on our behalf.

Security and retention

We use access controls, encrypted credentials, private administrative access, token-protected client links, audit records, and other reasonable safeguards. No system can guarantee absolute security, so private client links should not be forwarded or posted publicly.

We keep information for as long as reasonably necessary to provide services, maintain accurate business, contractual, financial, and audit records, resolve disputes, enforce agreements, and comply with legal obligations. Disconnecting an integration stops new access but does not automatically erase legitimate CRM or audit records already created from that connection.

Your choices

You may ask to access, correct, or delete personal information, subject to contractual, accounting, legal, security, and recordkeeping requirements. You may also unsubscribe from marketing messages using the link in those messages. Service messages related to an active inquiry, booking, contract, gallery, invoice, or payment may still be sent when necessary.

Contact and updates

Questions or privacy requests may be sent to trevormercerphotography@gmail.com.

We may update this policy as the service changes. The effective date above identifies the current version.