Privacy / Plain language

What this site collects—and what it does not.

This notice covers visits to ardaniphotography.com and the website inquiry path. It does not replace the terms provided for a booked photography project.

Last updated August 19, 2026

When you visit

Amazon Web Services hosts and delivers this site. Like any web host, AWS processes the network request needed to return a page, including an IP address, the requested address, and browser or device headers. Ardani's current source-controlled setup does not enable CloudFront viewer access logs.

The public site does not set analytics or advertising cookies, load advertising pixels, or use a visitor analytics service. There are no public visitor accounts and no visitor uploads.

When inquiry sending is enabled

Submitting once enabled the form will send the information you choose to provide: your name, email address, selected service, optional target date, and message. Please do not include payment-card details, government ID numbers, health information, or other sensitive information; the form does not need it.

Ardani will use the inquiry to reply, understand the requested work, prepare a quote or schedule, prevent duplicate submissions, and protect the service from abuse. Inquiry information will not be sold or used for third-party behavioral advertising.

  1. 01

    The browser sends the inquiry over HTTPS to an AWS API.

  2. 02

    An AWS queue encrypted at rest holds it while the delivery worker processes it.

  3. 03

    Amazon SES sends an email notice to one fixed business mailbox so David can reply.

AWS WAF will use the source IP for a rolling five-minute abuse check. The application does not write that IP into its logs. WAF request logging and sampled-request capture are disabled; only aggregate request and blocked-request counts are enabled.

Retention and deletion

  • Inquiry content is normally removed from the delivery queue after successful processing. An unsuccessful or undeliverable queue copy expires within 14 days.
  • Duplicate-prevention records contain one-way hashes derived from the submission, workflow IDs, timestamps, and status—not readable copies of the inquiry message or email address. They are marked to expire after 24 hours. AWS normally deletes expired records asynchronously within a few days, and table recovery points may remain available for up to 35 days.
  • Operational API and function logs are kept for 30 days. Their planned format contains request or message IDs, timing, status, and error classes, but excludes inquiry fields, email addresses, and request bodies.
  • The delivered email will be kept while reasonably needed to respond, prepare or carry out requested work, maintain necessary business records, resolve a dispute, or meet a legal obligation. Ardani will adopt a written mailbox retention schedule before inquiry sending is enabled.

Your choices

Once inquiry sending is enabled, you may ask to access, correct, or delete personal information Ardani holds about your website inquiry. Ardani may need to verify the request and may retain limited information when reasonably necessary for an existing transaction, security, or a legal obligation. Applicable rights and exceptions vary by law.

Before collection starts

Ardani will adopt a written business-mailbox retention schedule before inquiry sending is enabled. Until then, the form does not transmit what you type.

Service providers and disclosures

AWS provides site hosting, abuse protection, queueing, and email-delivery services. Its own handling of customer content is described in the AWS Data Privacy FAQ.

When inquiry sending is enabled, Ardani may disclose inquiry information to the cloud and business-email providers needed to deliver and store it. Ardani may also disclose limited information when reasonably necessary to comply with law, protect legal rights, or address fraud or security. It does not sell inquiry information.

This notice may change when the inquiry service or its handling changes. The updated date will change with it.

Return home