1. Who we are

ohiomichael.com is operated by Potts Digital Services LLC, an Ohio limited liability company. This policy explains what personal information we collect when you use the site, why we collect it, who we share it with, and what control you have over it.

The site is operated from the United States and intended for customers in the United States. If you access it from elsewhere, your information will be processed in the United States.

2. Information you give us

Account information

Creating an account requires your name and email address, and a password. Passwords are stored only as a cryptographic hash — we cannot read your password, and neither can anyone who obtains our database.

Order information

When you place an order we record the photographs ordered, the quantities and prices, the order total and any tax, the order status and timestamps, and the email address the receipt and download notice were sent to. We keep that email as a snapshot of the order, so changing your account email later does not rewrite your past receipts.

Your cart

Photographs you add to your cart are saved to your account so the cart survives closing your browser. That record is kept until you check out, remove the item, or ask us to delete your account.

Payment information

We do not collect, process, or store your card number, expiry date, or security code. Checkout is handled entirely on Stripe's own hosted payment page. What comes back to us is a Stripe session identifier and payment identifier, the amount, the currency, and whether the payment succeeded. What Stripe itself does with your card details is governed by Stripe's Privacy Policy.

If sales tax applies to your order, Stripe may collect a billing address in order to calculate it. That address is held by Stripe as part of the transaction record.

Messages you send us

The contact form collects your name, email address, subject, and message, which are emailed to us so we can reply. We keep that correspondence in our email account for as long as we need it to handle your enquiry and any follow-up.

Newsletter

If you subscribe to our newsletter we collect your email address for that purpose. We send marketing email only to people who have asked for it, every marketing message includes an unsubscribe link, and unsubscribing takes effect promptly. Unsubscribing from marketing does not stop transactional email about orders you have placed.

3. Information collected automatically

Our servers keep standard records needed to run and secure the site:

• Session records — a session identifier, your IP address, your browser's user-agent string, and the time of your last activity. These keep you signed in and help us detect abuse.
• Server and error logs — requests made to the site and any errors they produced, used for diagnosing faults and investigating security incidents.
• Download records — when your files were prepared and how many times an order has been downloaded, used to support you and to detect license abuse such as a shared account.
• Analytics records — the pages you view and when, the link, search or campaign that sent you here, and general details about your device, browser and approximate location. This is recorded by Matomo, analytics software we run on our own server. If you are signed in, these records are linked to your account, so we can see how customers actually move through the shop rather than only how anonymous traffic does. Section 4 explains how to switch this off.

4. Analytics and cookies

We measure how this site is used, with Matomo installed on our own server. That distinction is the important one: the records stay on our infrastructure, they are not sent to Google or to any advertising network, and no third party gets to see them or combine them with what it knows about you from elsewhere. There are no advertising cookies on this site and no cross-site profiling.

While you are signed in, what you look at is linked to your account. We do this so we can see how real customers move through the shop — which photographs they compare, where a purchase stalls — rather than guessing from anonymous totals. The identifier we send Matomo is a random internal reference for your account — not your name, and not your email address.

The cookies we set

Strictly necessary — the site does not work without them:

• Session cookie — identifies your browser session so your cart and sign-in persist between pages.
• CSRF token cookie — a security measure that stops other websites submitting forms as you.

Analytics — set by Matomo, readable only by this site, and removable at any time:

• Visitor cookie — a random identifier that lets us recognise a returning browser, so someone who visits twice in a week counts as one person rather than two. Expires after 13 months.
• Visit cookie — groups the pages you view into a single visit. Expires after 30 minutes of inactivity.
• Referrer cookie — remembers the link or search that first brought you here, so we can tell which ones lead to sales. Expires after 6 months.
• Opt-out cookie — set only if you use the control below, to record that you asked not to be measured.

You can block or delete any of these in your browser settings. Blocking the analytics cookies costs you nothing; blocking the first two stops the cart and sign-in working.

Opting out

You do not have to accept anything to use this site, and we do not put a consent banner in front of you. What we collect never leaves our server and is never sold, shared or used to advertise to you — so rather than asking you to click through a dialogue on every visit, we simply give you the switch:

Checking your current setting…

The opt-out is remembered per browser, so if you use more than one you will need to set it in each. Opting out does not affect your account, your orders, or your downloads.

Do Not Track. We do not act on your browser's "Do Not Track" or Global Privacy Control signals. The opt-out control above is how you switch our analytics off.

If we ever change what we measure, or start sending any of it to a third party, we will update this policy before that takes effect, not after.

5. How we use your information

We use the information described above to:

• Create and maintain your account and keep you signed in;
• Take payment, calculate any tax, and issue receipts;
• Prepare, deliver, and re-deliver the files you purchased;
• Email you about your order — payment confirmation and download-ready notices;
• Answer your messages and provide support;
• Keep records required for accounting and tax purposes;
• Detect, investigate, and prevent fraud, abuse, and breaches of our license terms;
• Diagnose faults and improve how the site works;
• Understand how the shop is used — which photographs and collections draw interest, which pages people leave from, and where a purchase gets stuck — so we can make it better;
• Send you marketing email, if and only if you asked for it.

We do not use your information to make automated decisions that produce legal or similarly significant effects about you.

6. Who we share it with

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share it only with service providers who need it to operate the site, and only for that purpose:

• Stripe, Inc. — payment processing. Stripe handles your card details directly, as an independent controller of that data, under its own Privacy Policy. That policy covers end customers who buy from businesses using Stripe, and it governs what Stripe does with your payment details once they leave this site.
• Our hosting and file storage provider — runs the site and stores the photograph files and prepared download archives.
• Our email delivery provider — sends order confirmations, download notices, password resets, and newsletters.

We may also disclose information where we are legally required to, specifically:

• To comply with a law, subpoena, court order, or other lawful request;
• To enforce our terms, or to establish, exercise, or defend a legal claim, including a copyright claim;
• To protect the rights, property, or safety of our customers, the public, or us;
• To a successor entity in connection with a merger, acquisition, or sale of the business — in which case this policy continues to apply to information transferred.

7. How long we keep it

• Account information — for as long as your account is open, and then as needed to resolve disputes and enforce our agreements.
• Order and payment records — retained after account closure as required by tax and accounting law, generally seven years.
• Purchased files — the prepared archive is kept so you can re-download it. We may remove archives for closed accounts.
• Session records — expire and are cleared automatically.
• Server and error logs — kept for a limited period for security and diagnostic purposes.
• Analytics records — kept indefinitely. We do not delete these on a schedule. If you opt out, we stop adding to them; if you ask us to delete your account, or to remove your analytics history on its own, we delete the records linked to you.
• Contact messages — kept for as long as needed to handle the enquiry.
• Newsletter subscriptions — until you unsubscribe. We retain a record of the unsubscribe so we do not email you again.

8. How we protect it

We take reasonable measures to protect your information, including encrypting traffic to the site in transit, storing passwords only as hashes, keeping purchased originals on private storage that is never publicly addressable, and serving downloads only after checking that the order belongs to the signed-in account.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you as required by applicable law.

9. Your choices and rights

You can, at any time:

• Access your account details and full order history from your account page;
• Correct your name or email address in your account;
• Unsubscribe from marketing email using the link in any such message;
• Opt out of analytics using the control in Section 4, which stops the measurement described there;
• Request deletion of your account by emailing contact@ohiomichael.com.

Two things to know about deletion. We must keep order and payment records for the retention period in Section 7 even after your account is closed, because tax law requires it. And deleting your account ends your access to your downloads — save your files first, because we cannot restore them afterwards.

Depending on where you live, you may have additional rights under state privacy law, such as the right to know what we collect, to request deletion, to correct inaccuracies, or to opt out of sale or targeted advertising. We honour these requests regardless of whether a particular law applies to us. We will not discriminate against you for exercising them. To make a request, email contact@ohiomichael.com from the address on your account so we can verify who you are. As stated above, we do not sell personal information and do not engage in targeted advertising, so there is nothing to opt out of.

10. Children

The site is not directed to children, and accounts are limited to adults. We do not knowingly collect personal information from anyone under 13. If you believe a child has given us personal information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page reflects the current version. If we make a material change to how we handle your information, we will post the revised policy here before it takes effect and, where appropriate, notify you by email.

12. Contact us

Questions about this policy, or about the information we hold on you:

Potts Digital Services LLC
9064 Ellersly Dr, Lewis Center, OHIO 43035
contact@ohiomichael.com