Privacy Notice
Alternative Photographic
A trading name of Alternative Concept Studio
Effective date: 2026-08-06 • Last amended: 2026-08-11
Alternative Photographic is a trading name of Alternative Concept Studio, a general partnership organised in California (Santa Clara County). References in this notice to “Alternative Photographic,” “the studio,” “we,” “us,” or “our” mean Alternative Concept Studio operating as Alternative Photographic.
This notice describes the personal information we collect in connection with this website (alternativephotographic.com) and our collector relationships — what we collect, why we collect it, who we share it with, how long we keep it, and the rights you hold over it.
Contact details for privacy questions are at the end of this notice.
1. What information we collect and why
1.1 Enquiry form
When you submit an enquiry through the form on this site, we collect:
- Your name
- Your email address
- The nature of your enquiry (edition availability, commission, or other)
- The title of the work or edition you are interested in (optional)
- Your message
We use this information solely to respond to your enquiry personally and to conduct any follow-on correspondence about your interest in the work. We do not add you to the collector list or any other register as a result of your submitting an enquiry, without your separate and explicit agreement.
Enquiry submissions are transmitted to us through Formspree, Inc., a form processing service. Formspree receives your name, email address, enquiry details, and message in order to deliver your submission to us. Formspree also processes your IP address as part of its standard service operation. Formspree hosts its infrastructure on Amazon Web Services in the United States. Its privacy practices are described at formspree.io/legal/privacy-policy.
1.2 Collector list registration
If you register on the homepage to receive advance notification of new edition releases, we collect your email address. We use it only to send the notifications described at the point of registration: new edition releases and exhibition appearances. That is the full scope of what this list is for.
Collector list registrations are transmitted to us through Formspree, Inc. Formspree receives your email address and delivers the registration to us. Formspree also processes your IP address as part of its standard service operation. Formspree hosts its infrastructure on Amazon Web Services in the United States. Its privacy practices are described at formspree.io/legal/privacy-policy.
You may withdraw from the collector list at any time. Every notification email includes an unsubscribe link. You may also contact us directly at the address in Section 14, and we will remove your address from the list and confirm that we have done so. We will honour any opt-out request within ten business days.
1.3 Payment transactions via Stripe — forthcoming
The site currently operates on an enquiry basis only. There is no online payment pathway at launch. When an online acquisition pathway is activated, edition acquisitions will be processed through Stripe Payment Links. Clicking an acquisition link will take you to a Stripe-hosted payment page. All payment card processing will be handled by Stripe, Inc. We will not receive, store, or process your card number, bank details, or full billing information at any point. We will receive from Stripe a transaction confirmation containing your name, email address, the edition purchased, and the amount paid — used to fulfil your order and, in the case of a Limited Edition, to issue your Certificate of Authenticity.
Stripe’s privacy practices are described at stripe.com/privacy. This notice will be updated when the payment pathway goes live.
1.4 Web fonts — Google Fonts
Our site loads display typefaces (Cormorant Garamond and Jost) from Google Fonts, a font delivery service operated by Google LLC. When your browser loads a page on this site, it makes a request to Google’s servers to retrieve these font files. That request discloses your IP address to Google. We do not send any other information about your visit to Google through this mechanism, and we do not receive data about individual visitors from Google’s font service.
Google’s privacy practices are described at policies.google.com/privacy.
1.5 Web hosting
Current staging host — GitHub Pages. While this site is served from GitHub Pages (staging address andyrcampbell.github.io/AP-Website), it is hosted by GitHub, Inc., a subsidiary of Microsoft Corporation, headquartered in San Francisco, California, United States. When you visit the site, GitHub logs your IP address for security purposes, together with device information, session details, and the date and time of your request. We do not use these logs to identify individual visitors or to build profiles. GitHub’s privacy practices are described in GitHub’s General Privacy Statement at docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement (effective April 27, 2026).
Production host — Hostinger (when DNS transfers to alternativephotographic.com). When the site moves to its production domain, it will be hosted by HOSTINGER, UAB, a private limited liability company organised under the laws of Lithuania (registered address: Švitrigailos str. 34, LT-03230 Vilnius, Lithuania). The server region assigned to this site is the United States. At that point, standard server log data will be generated automatically when you visit — including your IP address, browser type, pages visited, and the date and time of access. This data is used for security monitoring and to keep the site running. We do not use server logs to identify individual visitors or to build profiles. Hostinger’s privacy practices are described at hostinger.com/legal/privacy-policy.
Although the production server is located in the United States, HOSTINGER, UAB is incorporated in Lithuania, an EU member state. Your visitor data will therefore be processed by a European-Union-incorporated entity operating US-based servers. We disclose this plainly so California residents and international visitors are aware of it.
1.6 What we do not collect
This site uses no analytics software, tracking pixels, session-recording tools, or advertising technology of any kind. We do not set cookies on your device. We do not receive information about your visit from social media platforms. The only third-party network connections that occur when you visit this site are those described above: enquiry and registration data routed through Formspree; the Google Fonts CDN request; and standard web hosting log collection by the hosting provider described in Section 1.5.
2. How we use your information
| Information | Purpose |
|---|---|
| Enquiry name, email, and message | Responding to your enquiry; follow-on correspondence |
| Collector list email address | Edition release and exhibition notifications only |
| Transaction confirmation from Stripe (forthcoming) | Fulfilling your print order; issuing Certificate of Authenticity (Limited Edition orders only) |
| Font CDN request (handled by Google) | Font delivery; we do not receive or control this data |
| Server logs (held by our hosting provider — see Section 1.5) | Security monitoring; site operation |
We do not sell your personal information. We do not share it with third parties for advertising or cross-context behavioural advertising purposes. We do not profile visitors. We do not combine your information with data purchased or obtained from other sources. We do not use your information to make automated decisions that affect you.
3. Who we share your information with
We share personal information only as described in this notice and only with the service providers listed below. Each receives only the information necessary for the function it performs on our behalf.
| Recipient | What they receive | Purpose | Their privacy policy |
|---|---|---|---|
| Formspree, Inc. | Name, email, message, IP address (enquiry form); email address, IP address (collector form) | Transmitting form submissions to us | formspree.io/legal/privacy-policy |
| GitHub, Inc. (current staging host) | IP address, device information, session details, date and time of requests | Web hosting; security monitoring | docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement |
| HOSTINGER, UAB (production host — at DNS transfer) | IP address, browser type, pages visited, date and time of access | Web hosting; security monitoring | hostinger.com/legal/privacy-policy |
| Google LLC | IP address (font CDN request) | Delivering web fonts | policies.google.com/privacy |
| Stripe, Inc. (forthcoming) | Payment and order information | Processing edition payments | stripe.com/privacy |
| The Hedera network (forthcoming) | Edition record: work title, edition number, photographer’s name; purchaser wallet address | Publishing Limited Edition digital edition records on a public distributed ledger — see Section 4 | hedera.com |
We do not sell or share your personal information with data brokers or advertising platforms.
4. Edition records on the Hedera network — forthcoming
The studio does not currently operate an on-chain edition record capability. The Hedera minting function is not yet live at launch. When it is introduced, the studio intends, on finalisation of each Limited Edition acquisition, to register a digital edition record on the Hedera distributed ledger and transfer it to the purchaser. That record will carry the title of the work, the edition number, and the photographer’s name. Open Edition prints are not subject to on-chain registration.
Two characteristics of this record that prospective Limited Edition collectors should understand before finalising any Limited Edition acquisition at the time this feature is active:
The record will be public. The Hedera network is a public distributed ledger. When an edition record is entered, the record and the wallet addresses associated with it will be visible to anyone who queries the ledger. We will not publish your name or contact details as part of the on-chain record, but if you have associated your wallet address with your identity through any other service or platform, that connection may be traceable by others.
The record will be permanent. Data recorded on a public blockchain is permanent by design. Once an edition record has been written to the Hedera network, it cannot be deleted — whether by us or by anyone else. A deletion request made to us cannot reach data already recorded on the ledger.
If either characteristic is a concern for you, we encourage you to raise it with us before finalising any Limited Edition acquisition at the time this feature is active. The Certificate of Authenticity that accompanies each Limited Edition print serves the same provenance function and is not subject to either constraint. Open Edition prints do not carry a Certificate of Authenticity and will not be subject to on-chain registration. This notice will be updated when the on-chain record capability goes live.
5. Cookies
This site sets no cookies. No cookie consent is required from you.
6. Do Not Track and Global Privacy Control
Some browsers transmit a Do Not Track or Global Privacy Control signal when you visit a website. This site does not use analytics tools, behavioural advertising, or cross-site tracking — the practices those signals are designed to address are not present here. The signal has no operational effect on your use of this site, because there is nothing to opt out of.
This disclosure is provided in accordance with the California Online Privacy Protection Act (CalOPPA), California Business and Professions Code sections 22575–22579.
7. How long we keep your information
| Information | Retention period |
|---|---|
| Enquiry correspondence | 3 years from the date of our last substantive exchange with you, or until any related acquisition, dispute, or warranty period has concluded — whichever is later |
| Collector list email address | Until you unsubscribe or request deletion |
| Transaction records (from Stripe, forthcoming) | 7 years, as required for financial and tax record-keeping |
| On-chain edition record — Hedera network (forthcoming) | Permanent — blockchain records cannot be modified or deleted after publication; see Section 4 |
| Server logs (held by GitHub, Inc. during staging; by HOSTINGER, UAB in production) | Subject to the applicable hosting provider’s standard retention settings |
| Form submission data (held by Formspree) | Subject to Formspree’s retention policy |
We do not retain personal information longer than we need it for the purpose for which it was collected.
8. Children
This site is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently received information from a child under 13, please contact us at the address in Section 14 and we will delete it promptly.
9. Security
We take reasonable technical measures to protect the personal information we hold. All connections to this site are encrypted using HTTPS. Enquiry and registration data is transmitted to our form processing provider (Formspree) over HTTPS. Payment card data, when the payment pathway is activated, will be handled entirely by Stripe and never transmitted to or stored on our systems.
No internet transmission is completely secure. If you have a concern about the security of your information, contact us at the address in Section 14.
10. Your rights
Whatever your location, you may make any of the following requests to us in writing. We respond within 45 days. If a request requires additional time — for example, because it is complex or we receive multiple requests — we will notify you before the initial 45-day period expires and explain the reason for the extension.
Right to know and access. You may ask us what personal information we hold about you and request a copy.
Right to correct. If information we hold about you is inaccurate, you may ask us to correct it.
Right to delete. You may ask us to delete personal information we hold about you. We will do so unless retention is required to complete or record a confirmed acquisition, to comply with a legal obligation such as tax record retention, or to resolve an active dispute. When the on-chain edition record feature described in Section 4 is introduced, records already written to the Hedera network will also fall outside this commitment — blockchain records are permanent by design and cannot be deleted once written.
Right to opt out of the collector list. You may withdraw at any time by following the unsubscribe link in any email we send, or by writing to us directly.
Right to opt out of sale or sharing. We do not sell your personal information and do not share it for cross-context behavioural advertising. There is nothing to opt out of on that front. If that changes, we will update this notice and provide an opt-out mechanism before it does.
Non-discrimination. We will not treat you differently for exercising any of these rights.
How to submit a request. Write to us at the contact details in Section 14 with the subject line “Privacy Request.” Please describe the right you wish to exercise and provide enough information to allow us to identify your records — for example, the email address you used when registering or submitting an enquiry. We may need to verify your identity before fulfilling certain requests. You may designate an authorised agent to submit a request on your behalf.
11. California residents
California law (CalOPPA, California Business and Professions Code sections 22575–22579) requires this notice to disclose how this site responds to browser Do Not Track and Global Privacy Control signals — that disclosure is in Section 6.
We do not sell your personal information. We do not share it for cross-context behavioural advertising. We do not collect or use sensitive personal information as defined under California privacy law beyond the purposes described in this notice. We do not make automated decisions about you based on your personal information.
12. International visitors
This website is operated from California, United States. During the current staging period the site is hosted by GitHub, Inc., a US-incorporated entity with US-based infrastructure. When the site moves to its production domain (alternativephotographic.com), it will be hosted by HOSTINGER, UAB, a Lithuanian-incorporated entity operating US-based servers. Although the production server is in the United States, HOSTINGER, UAB is incorporated in Lithuania, an EU member state.
If you visit from outside the United States — including from the European Union, the United Kingdom, or any other jurisdiction whose data protection laws differ from those of the United States — please be aware that any personal information you provide to us will be transferred to and processed in the United States, under US law and under the terms of this notice.
We are not in a position to advise on the application of European Union, United Kingdom, or other non-US data protection law to your situation. If you have concerns of that kind, we encourage you to seek advice from an appropriate authority or advisor in your own jurisdiction.
13. Changes to this notice
If we make material changes to this notice, we will update the effective date at the top of this page. We will notify collector-list registrants of significant changes by email where it is practicable to do so.
14. Contact
For privacy questions, access requests, correction requests, or deletion requests, write to:
Alternative PhotographicA trading name of Alternative Concept Studio
17015 Pine Ave, Los Gatos, CA 95032
Email: admin@alternativeconcept.studio
We respond to all privacy requests personally.
This privacy notice is provided in compliance with the California Online Privacy Protection Act (CalOPPA), the CAN-SPAM Act, and other applicable federal and California law.