Privacy Policy
Last updated August 12, 2026
This Privacy Policy describes how JM Photography LLC, doing business as The Picture Day Rig (“we,” “us,” or “our”), collects, uses, discloses, and protects information across thepicturedayrig.com and our own picture-day photography services.
JM Photography LLC also builds Lineup, software we license to other youth sports photography businesses. Lineup has its own, separate privacy policy at lineupcentral.com/privacy — if your picture day was run by a business using Lineup rather than booked directly with The Picture Day Rig, that’s the policy that applies to you.
Information We Collect
- Booking and inquiry information submitted through the website, including organization name, contact name, email, phone number, sport, athlete count, preferred dates, and notes.
- Parent and athlete order information for Picture Day Special orders, including parent or guardian name, email, phone number, athlete name, jersey number, league, team, selected payment method, order number, payment status, and order amounts.
- Photographer store purchase information, including customer name, email address, selected digital products, order number, payment status, download tokens, download counts, and download timestamps.
- Picture day schedule images and related metadata displayed on the parent page.
- Technical and security information such as IP-derived rate-limit keys, admin audit events, error logs, request timing, and browser/device information from standard hosting logs.
Payments
Card payments on the website are processed through Stripe Checkout. This website creates Stripe Checkout sessions on the server and receives payment status from Stripe webhooks. We do not store raw credit card numbers, card security codes, or full payment card details on our servers. Stripe may collect and process payment information according to its own terms and privacy policy.
How We Use Information
- To respond to booking, contact, beta, and waitlist requests.
- To display picture day schedules for parents.
- To create, process, reconcile, and support Picture Day Special orders.
- To create digital product orders, send download links, verify download tokens, and record download activity.
- To send transactional emails such as order confirmations, payment confirmations, store delivery emails, admin summaries, and support responses when email services are configured.
- To operate protected admin tools, audit important admin actions, prevent abuse, troubleshoot errors, and maintain site security.
The website may send transactional emails related to inquiries, picture day orders, payment status, digital download delivery, and operational summaries, via Resend. Some waitlist or beta forms may also add a contact to a Resend audience when that service is configured — if you’d like to confirm whether you’re on such a list or be removed, contact us.
You can contact us to update an email address or ask to be removed from non-transactional updates. Transactional emails may still be sent when needed to complete an order, deliver photos, or respond to a service request.
Children And Athlete Information
The Picture Day Rig provides youth sports photography services directly to leagues, teams, and families. Athlete information — name, jersey number, team, and similar order details — may be submitted by a parent, guardian, league, coach, or authorized organizer so that we can run picture day, identify galleries, and fulfill orders.
This website is not designed for children to create accounts, and we do not knowingly collect information directly from athletes. Athlete information reaches us because a parent, guardian, or league organizer submits it as part of booking or ordering.
Parents, guardians, and league organizers with questions about athlete information, opt-outs, corrections, or deletion requests connected to a picture day booked directly with The Picture Day Rig should contact us at support@thepicturedayrig.com. If your picture day was run by a different photography business using our Lineup software, contact that business directly, or see lineupcentral.com/privacy — as between the parties, that business is the data controller for its own families’ information.
Data Retention, Correction, And Deletion
The current codebase does not implement an automatic public deletion workflow or a fixed universal retention schedule for website records. We retain operational records for as long as needed to provide services, process orders, support customers, prevent fraud or abuse, comply with tax/accounting obligations, and maintain business records. Digital store download links expire after 7 days, but order records, download counters, and audit records may remain for support, abuse prevention, and accounting purposes.
| Information | Retention |
|---|---|
| Customer support communications | Three (3) years |
| Legal compliance records | As required by applicable law |
To request correction, deletion, or a copy of information connected to you or your athlete, email support@thepicturedayrig.com. We may need to verify the request and may retain information where required for legal, tax, fraud-prevention, order-fulfillment, or dispute-resolution reasons.
Security
We use practical safeguards including server-side validation, rate limiting, password-protected admin routes, HMAC session cookies, and protected admin API checks on the website.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe information has been exposed or used incorrectly, contact us promptly.
Your Privacy Rights
Depending on your state of residence, you may have rights under state privacy laws, which may include the right to know, access, correct, delete, and obtain a portable copy of personal information, and to opt out of sale/sharing or targeted advertising (we do not sell, share for targeted advertising, or engage in such activities). These laws include, among others:
California’s Consumer Privacy Act (CCPA), as amended by the CPRA; Virginia’s Consumer Data Protection Act (VCDPA); Colorado’s Privacy Act (CPA); Connecticut’s Data Privacy Act (CTDPA); and Texas’s Data Privacy and Security Act (TDPSA).
To exercise any available right, contact support@thepicturedayrig.com. We will not discriminate against you for exercising your rights.
International Users
The Picture Day Rig is operated from the United States. If you access our services from another country, your information may be transferred to and processed in the United States where permitted by applicable law.
Changes To This Policy
We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page. Continued use after the effective date constitutes acceptance where permitted by applicable law.
See also our Terms of Service, Refund Policy, and Digital Download Policy.
Questions about these policies? Email support@thepicturedayrig.com.