Privacy Policy
The Headshot Guy LLC Version 3 — Effective July 23, 2026
Overview
This Privacy Policy explains how I collect, use, share, and retain information in connection with my website and the photography services I provide.
It applies to https://www.theheadshotguy.us/ and to my subdomains, including pages.theheadshotguy.us and reserve.theheadshotguy.us.
“I” refers to Al Sali, operating as The Headshot Guy LLC. “You” refers to anyone who visits the website, submits an inquiry, books a session, or is photographed.
Information I Collect
Information you provide directly:
- Name, email address, phone number
- Company, organization, or firm name
- Session preferences, wardrobe notes, and scheduling details
- Billing and payment details, processed by my payment providers
Information provided by an organization on your behalf:
- Employers, law firms, and event organizers may provide staff rosters, names, email addresses, and scheduling instructions in order to arrange sessions.
Information collected automatically:
- Website analytics and session activity, including pages visited, referring source, approximate location, browser, device type, clicks, scrolling, and mouse movement
Information created during a session:
- Photographs taken during your session
- Notes related to your session, selections, and delivery
- Recordings of coaching sessions, where you have consented to being recorded
How I Use Information
- To respond to inquiries and communicate about your session
- To schedule, prepare for, and deliver your session
- To process payments and issue invoices
- To maintain business, tax, and contractual records
- To improve the website and my services
I do not use your information for any purpose unrelated to providing and operating this service.
Photographs
I treat photographs of identifiable people as personal information.
- Photographs are created and delivered for your use under the terms set out in my Terms of Service.
- I do not use your images for promotional, marketing, portfolio, or social media purposes without your consent.
- If you have given consent and later change your mind, you may withdraw it in writing at any time. I will stop future use and remove the images from channels I control where it is reasonably practicable to do so. I cannot recall printed material or copies already distributed to or republished by third parties.
Event and Conference Headshots
When I provide a headshot booth at an event or conference, attendees sign up on site to receive their images.
- I collect the attendee’s name and email address in order to deliver their headshots.
- Attendee images are delivered to the attendee and to the organization that commissioned the session.
- Where an event organizer or sponsor has requested a list of attendee contacts, the signup form includes a specific, optional consent for that sharing. Contact information is shared only where the attendee has given that consent. Declining does not affect the attendee’s headshots.
- Organizations that receive attendee information handle it under their own privacy practices, not mine.
Coaching and Education
Coaching sessions are conducted by video call and may be recorded.
- I ask for and obtain your consent before any recording begins.
- The recording is made for your benefit and is provided to you after the session.
- Recordings are made through whichever video platform we use for your session and are deleted from my systems once delivery is confirmed.
- I do not use coaching recordings for marketing, promotion, or publication without your separate written consent.
Minors
I photograph minors when a parent or legal guardian books the session.
- All information about a minor is provided by a parent or legal guardian, not collected from the child.
- A parent or legal guardian must consent to the session and to any use of the resulting images.
- I will not use a minor’s image for promotional or marketing purposes without separate written consent from a parent or legal guardian.
- This website is not directed to children and I do not knowingly collect information online directly from children.
Text Messages
If you provide your phone number, I may send text messages related to your inquiry, booking, session, or delivery.
- Message frequency varies based on your inquiry and booking activity.
- Message and data rates may apply.
- Reply STOP to any message to opt out. Reply HELP for assistance.
- Consent to receive text messages is not a condition of purchase.
- I do not sell or share your phone number with third parties for their own marketing, and I do not include phone numbers in event attendee lists.
If you provide your email address, I may send messages related to your inquiry, booking, session, and delivery, and occasional updates about my services. Every marketing email includes an unsubscribe link. Operational messages about an active booking are not marketing and will continue regardless of marketing preferences.
Service Providers
I use third-party services to operate the business. I provide each one the information it needs to perform its function.
| Provider | Purpose | Information handled |
|---|---|---|
| GoHighLevel | CRM, email, text messaging, invoicing, forms | Contact details, communications, booking records |
| Stripe | Payment processing | Billing and payment details |
| Square | Payment processing | Billing and payment details |
| YouCanBookMe | Scheduling | Name, email, phone, session details |
| Dropbox | Image delivery | Delivered images, recipient email |
| Cloudways | Website hosting | Website traffic and submitted form data |
| Google Tag Manager | Tag deployment | Website usage data |
| Google Analytics | Website analytics | Pseudonymous usage data |
| Microsoft Clarity | Session analytics and heatmaps | Pseudonymous session activity |
| Adobe | Image editing, including cloud generative tools | Image data during processing |
| Evoto | Image retouching | Image data during processing |
I do not sell, rent, or trade your personal information.
Beyond the providers listed above, I may share information with organizations that commissioned a session, with an attendee’s consent as described in the Event and Conference Headshots section, with my accountant, attorney, or insurer, with a collections provider or a court in the event of non-payment, and where required by law.
Cloud-Based Editing Tools
Some retouching is processed on third-party servers rather than on my computer. This means image data is transmitted off my device during editing.
- Evoto. Portrait retouching and background replacement are processed on Evoto’s servers in the United States.
- Adobe. A small portion of my work uses Adobe’s generative editing features for background, clothing, and stray hair corrections. These features process image data on Adobe’s servers.
What I control: I do not knowingly consent to the use of client images for AI model training, and I turn off cloud storage and content analysis options where those settings are available to me. In Evoto, usage sharing, content analysis, and cloud storage are switched off. I do not submit client images to general-purpose AI services.
What I cannot control: these providers operate under their own privacy policies and retention schedules, and may retain limited copies in caches, logs, or backups. I cannot guarantee the timing of deletion on systems I do not operate.
Cookies, Analytics, and Tracking
The website uses cookies for basic functionality and deploys analytics through Google Tag Manager.
- Google Analytics measures traffic and site usage.
- Microsoft Clarity records session activity, including clicks, scrolling, and mouse movement, and produces heatmaps and session replays.
This data is pseudonymous. It is not directly identified to you by name, but it can be associated with a device or session identifier. These providers may collect information about your activity over time and across other websites.
You can set your browser to refuse cookies or to notify you when cookies are sent. Refusing cookies may affect how parts of the website function. You can opt out of Google Analytics using Google’s browser add-on at https://tools.google.com/dlpage/gaoptout.
Do Not Track. Some browsers send a Do Not Track signal. There is no common industry standard for responding to these signals, and this website does not currently respond to them.
Retention and Deletion
| Category | Retention |
|---|---|
| Unselected session files | Removed from my systems the same day, immediately following your session |
| Delivered final images | Retained for 12 months, then deleted |
| Event attendee images and contact lists | Delivered to the commissioning organization, then deleted once delivery is confirmed |
| Coaching session recordings | Delivered to the participant, then deleted once delivery is confirmed |
| Client records (contact details, invoices, agreements) | Retained for 7 years |
| Email and SMS opt-out records | Retained indefinitely, so that opt-outs continue to be honored |
| Website and session analytics | Per each provider’s configured retention period |
Unselected files are deleted the same day. You select your images before the session ends. Everything not selected is deleted immediately afterward and cannot be recovered. This is stated at booking, before the session, and during image selection.
You are responsible for downloading and backing up your delivered files. After 12 months, delivered images are deleted and I cannot reissue them.
Deletion applies to my active systems. Copies may persist for a limited period in provider backups, caches, and logs under their own retention schedules.
Data Security
I use reasonable administrative and technical safeguards to protect information against unauthorized access, alteration, disclosure, or destruction, and I rely on established providers that offer encryption in transit and at rest. No method of transmission or storage is completely secure, and I cannot guarantee absolute security.
Your Choices and Requests
You may request to:
- Access the personal information I hold about you
- Correct inaccurate information
- Delete your information
- Opt out of marketing emails or text messages
Submit requests using the contact details below. I will respond within a reasonable time. I may retain certain records where required for tax, accounting, legal, or contractual purposes.
Third-Party Links
The website may link to third-party sites. I am not responsible for the privacy practices or content of those sites.
Changes to This Policy
I may update this policy. The effective date at the top reflects the most recent version.
If I make a material change to how I collect, use, or share your information, I will post notice on this page before the change takes effect.
Governing Law
This Privacy Policy is governed by the laws of the Commonwealth of Virginia.
Contact
For questions about this policy, or to make a request regarding your information:
Email: privacy@theheadshotguy.us
The Headshot Guy LLC 9645 Benbow Rd Richmond, VA 23235 Virginia Entity ID 11649373