Privacy Policy
Stills Media (DBA Joseph Stills) (“Stills Media,” “Company,” “we,” “us,” or “our”) respects your privacy and is committed to responsibly handling personal information.
This Privacy Policy (“Policy”) explains how we collect, use, disclose, retain, and protect personal information when you access or use our websites, applications, online tools, client services, or other services that reference this Policy (collectively, the “Services”).
This Policy is intended to provide notice of our privacy practices and the rights and choices that may be available to you. It is not intended to create contractual rights beyond those provided by applicable law.
Please review this Policy carefully. If you do not wish for your information to be handled as described in this Policy, you should discontinue use of the applicable Services.
1. Scope and Applicability
This Policy applies to personal information collected through your interactions with the Services, including information collected through websites, accounts, forms, support requests, client-management tools, and other online systems administered by Stills Media.
Depending on your location and our activities, privacy laws that may apply to our handling of personal information include the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), Canada's Personal Information Protection and Electronic Documents Act (“PIPEDA”), and the European Union General Data Protection Regulation (“GDPR”).
References to a particular privacy law in this Policy do not necessarily mean that the law applies to Stills Media, every user, or every processing activity. Rights described in this Policy apply where required by applicable law or where we voluntarily choose to provide them.
2. Information We Collect
2.1 Information You Provide to Us
We may collect personal information that you voluntarily provide when you:
- create or maintain an account;
- submit a contact, registration, service-request, or other form;
- request technical support or customer service;
- communicate with us by email or through another communication method;
- request, purchase, or receive Services;
- provide feedback or otherwise interact with us.
Depending on your interaction with us, this information may include:
- full name;
- email address;
- telephone number;
- mailing or physical address;
- username, account credentials, and authentication information;
- contact and communication preferences;
- information contained in forms, support requests, or other messages you send to us; and
- other information you voluntarily choose to provide.
We ask that personal information you provide be accurate and current where reasonably necessary for us to provide the Services.
2.2 Information Collected Automatically
When you access or use our Services, certain technical and usage information may be collected automatically, including:
- Internet Protocol (“IP”) address;
- browser type and version;
- device type and characteristics;
- operating system;
- referring and destination URLs;
- language preferences;
- date and time of access;
- pages, features, or portions of the Services you interact with;
- device or session identifiers;
- log and diagnostic information; and
- approximate location information derived from an IP address.
We generally use this information to operate the Services, maintain security, troubleshoot technical problems, understand how the Services are used, detect fraud or misuse, and improve performance.
2.3 Log and Usage Data
Our servers and technology providers may generate logs when you access the Services.
These logs may include IP addresses, timestamps, browser or device information, authentication events, network information, error information, and other technical details associated with your interaction with the Services.
We use log data for security, fraud prevention, system administration, diagnostics, troubleshooting, performance monitoring, and service improvement.
2.4 Cookies and Similar Technologies
We may use cookies, pixels, web beacons, local storage, and similar technologies to operate our Services, remember user preferences, maintain sessions, improve security, and understand use of our Services.
Some cookies are necessary for the Services to function. Other cookies, including certain analytics technologies, may be optional.
We currently use Google Analytics as an analytics provider. Google Analytics may collect technical and usage information about interactions with our Services in accordance with our configuration of the service and Google's applicable privacy and contractual terms.
Where applicable law requires consent before non-essential cookies or analytics technologies are used, we will not activate those technologies until the required consent has been obtained.
Where cookie-management controls are provided, you may use those controls to accept, reject, or modify your preferences. You may also be able to control cookies through your browser settings.
Withdrawing or changing consent does not affect processing that lawfully occurred before the preference was changed.
For additional information about Google's data practices, please review Google's Privacy Policy and privacy documentation.
2.5 Sources of Personal Information
We may obtain personal information:
- directly from you;
- automatically from your browser, device, or interaction with the Services;
- from service providers acting on our behalf;
- from analytics and security systems; and
- from our own internal systems and business records.
We do not intentionally obtain personal information from data brokers for the purpose of building consumer advertising profiles.
3. How We Use Personal Information
We may use personal information for the following purposes:
3.1 Providing the Services
To create and manage accounts, authenticate users, respond to service requests, perform requested work, provide features, and otherwise operate our Services.
3.2 Customer Service and Support
To respond to questions, troubleshoot problems, provide technical assistance, manage support requests, and communicate regarding Services you receive from us.
3.3 Administrative Communications
To send information concerning accounts, Services, transactions, security matters, policy changes, Terms of Service, or other administrative matters.
3.4 Analytics and Service Improvement
To understand how our Services are used, identify technical issues, measure performance, improve functionality, and enhance the user experience.
3.5 Personalization
To remember preferences and, where appropriate, tailor features or content based on your interactions with the Services.
3.6 Marketing and Promotional Communications
Where permitted by law, to send newsletters, announcements, promotional messages, or information about Services that may be relevant to you.
You may opt out of marketing communications as described in Section 10.
3.7 Security and Fraud Prevention
To authenticate users, protect accounts and infrastructure, investigate suspicious activity, prevent fraud or abuse, enforce our legal rights, and maintain the integrity of our Services.
3.8 Legal and Regulatory Compliance
To comply with applicable laws, regulations, legal processes, court orders, governmental requests, accounting requirements, and other legal obligations.
3.9 Business Administration
To maintain records, manage client relationships, administer our business, protect legal rights, resolve disputes, and support potential business transactions.
We will not use personal information for a materially different purpose that is incompatible with the purpose for which it was collected unless permitted by law or we provide any notice or obtain any consent required by applicable law.
4. Legal Bases for Processing
Where the GDPR or another law requiring a legal basis for processing applies, we generally rely on one or more of the following bases.
4.1 Performance of a Contract
We may process personal information when necessary to provide Services you requested, administer your account, communicate regarding those Services, or otherwise perform a contract with you.
4.2 Legitimate Interests
We may process information when reasonably necessary for legitimate business interests, including:
- maintaining and improving the Services;
- protecting systems, users, and data;
- preventing fraud or misuse;
- responding to inquiries;
- maintaining appropriate business records; and
- establishing, exercising, or defending legal rights.
Where required, we consider whether those interests are overridden by your rights and interests.
4.3 Consent
We may rely on your consent where required or appropriate, including for certain marketing communications, optional analytics technologies, or other non-essential processing.
Where processing is based on consent, you may withdraw consent at any time using the controls we provide or by contacting us. Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.
4.4 Legal Obligations
We may process personal information where necessary to comply with legal, tax, accounting, regulatory, law-enforcement, or other obligations imposed on us.
4.5 Protection of Legal Rights
Where permitted by law, we may process information when reasonably necessary to establish, exercise, or defend legal claims or protect the rights and safety of Stills Media, our users, or others.
5. How We Disclose Personal Information
We do not disclose personal information indiscriminately.
We may disclose information in the following circumstances.
5.1 Service Providers and Contractors
We may provide personal information to vendors and service providers that perform functions on our behalf.
Depending on the Services involved, these providers may assist with matters such as website and infrastructure operation, analytics, communications, security, technical support, storage, backup, or other business functions.
These providers are expected to handle information in accordance with applicable contractual and legal requirements.
5.2 Google Analytics
We use Google Analytics to help us measure and understand use of our Services.
Information processed through Google Analytics is handled in accordance with our configured privacy settings, applicable agreements with Google, and Google's privacy practices.
Where required by law, optional analytics will not be activated until the appropriate consent has been obtained.
5.3 Internal Client Management Systems
We operate an internal client relationship management system accessible through client.stillsmedia.co.
This system is used to organize and manage client information, communications, service requests, and related business records. Personal information maintained through this system remains subject to this Policy.
5.4 Business Transactions
If Stills Media is involved in a merger, acquisition, financing, reorganization, sale of assets, transfer of business operations, or similar transaction, personal information may be disclosed or transferred as part of that transaction or related negotiations.
Where required by law, we will provide appropriate notice concerning any material change in the handling of personal information.
5.5 Legal Requirements and Protection
We may disclose personal information when we reasonably believe disclosure is necessary to:
- comply with applicable law, regulation, legal process, or governmental request;
- respond to a valid subpoena, court order, warrant, or similar legal demand;
- investigate suspected fraud, security incidents, or violations of our legal terms;
- establish, exercise, or defend legal claims; or
- protect the rights, safety, property, systems, or users of Stills Media or others.
5.6 With Your Direction or Consent
We may disclose personal information when you direct us to do so or provide consent for a particular disclosure.
6. Sale and Sharing of Personal Information
As of the Last Updated date of this Policy, Stills Media does not sell personal information.
We also do not share personal information for cross-context behavioral advertising as the term “sharing” is defined under the CCPA.
We do not knowingly sell or share the personal information of individuals under 16 years of age.
Disclosures to service providers and contractors that process information on our behalf are not intended to constitute a “sale” or “sharing” of personal information where applicable law excludes those disclosures from those definitions.
If our practices materially change, we will update this Policy and provide any opt-out mechanisms or notices required by applicable law.
7. Data Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to provide the Services, or to satisfy legitimate business and legal requirements.
Retention periods may vary based on the nature of the information and the reason it is being processed.
Account and Profile Information
Account information may be retained for the duration of an active account and for a reasonable period afterward when necessary to complete account closure, maintain business records, resolve disputes, prevent fraud, or satisfy legal obligations.
Forms, Communications, and Support Records
Contact forms, support tickets, correspondence, and service requests may be retained while the matter remains active and afterward for a reasonable period based on customer-service needs, continuity of service, dispute resolution, legal obligations, and applicable limitation periods.
Analytics and Technical Data
Analytics, device, usage, and technical data are retained in accordance with the retention settings of the applicable systems and only for as long as reasonably useful for analytics, security, troubleshooting, or service improvement.
Where practicable, data may be aggregated or de-identified so that it no longer identifies an individual.
Security Logs
Security and diagnostic logs are generally retained for a limited period appropriate to security monitoring, incident investigation, fraud prevention, troubleshooting, and legal requirements.
Marketing Records
Marketing preferences may be maintained for as long as you remain subscribed.
We may retain limited suppression or opt-out information after you unsubscribe so that we can honor your request not to receive future marketing communications.
Legal, Accounting, and Business Records
Information contained in contracts, business records, tax records, accounting records, or records relating to disputes may be retained for the period required by applicable law or reasonably necessary to establish, exercise, or defend legal rights.
Backups and Archives
Information contained in backups may remain for a period of time after it has been removed from active systems. Backup information is generally deleted or overwritten through our normal backup lifecycle.
If immediate deletion from a backup is not technically practicable, we will continue to protect the information and will not actively use it except as necessary for backup restoration, security, or legal purposes.
We do not retain identifiable personal information indefinitely merely because it may someday be useful. When information is no longer reasonably necessary, we will delete it, anonymize it, or otherwise dispose of it in accordance with applicable requirements.
8. Security
We implement commercially reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, acquisition, use, alteration, disclosure, loss, or destruction.
The safeguards used may vary according to the nature and sensitivity of the information and the systems through which it is processed.
These measures may include access controls, authentication protections, system monitoring, network and application security, data-management procedures, and restrictions on access to personal information.
No method of transmission, storage, or information security can be guaranteed to be completely secure. Accordingly, while we work to protect personal information, we cannot guarantee that unauthorized access or a security incident will never occur.
If we become aware of a security incident involving personal information, we will investigate and take reasonable remedial steps and will provide legally required notifications where applicable.
Users are responsible for maintaining the confidentiality of their login credentials and should use strong, unique passwords and appropriately secured devices and networks.
9. Minors' Privacy
Our Services are not directed to individuals under 18 years of age, and we do not knowingly solicit personal information from individuals under 18.
If we learn that we have collected personal information from a minor in circumstances where we were not legally permitted to do so, we will take reasonable steps to delete or otherwise appropriately handle that information.
If you believe that a minor has provided personal information to us, please contact:
data-management@stillsmedia.co
Nothing in this section is intended to limit additional protections provided to children or minors by applicable law.
10. Your Privacy Rights and Choices
Privacy rights vary by jurisdiction.
Subject to applicable law and any permitted exceptions, you may have the right to:
- request information about personal information we maintain about you;
- obtain access to personal information;
- correct inaccurate or incomplete information;
- request deletion of personal information;
- restrict certain processing;
- object to certain processing;
- withdraw consent where processing is based on consent;
- opt out of certain marketing communications;
- obtain a portable copy of certain personal information; or
- submit a complaint to an applicable privacy or data-protection authority.
Requests may be submitted to:
data-management@stillsmedia.co
General privacy questions may be submitted to:
We may need to verify your identity before processing certain requests. We will use information provided for verification only as reasonably necessary to authenticate the request, prevent fraud, and satisfy legal obligations.
Some requests may be denied or limited where permitted by law, including where information must be retained for legal compliance, security, fraud prevention, contractual obligations, dispute resolution, or protection of the rights of others.
We will respond within the period required by applicable law.
11. European Economic Area — GDPR Rights
Where the GDPR applies to our processing of your personal information, Stills Media acts as the data controller unless another notice states otherwise.
Subject to applicable conditions and exceptions, individuals protected by the GDPR may have the following rights.
11.1 Right of Access
You may request confirmation of whether we process personal information about you and request access to that information.
11.2 Right to Rectification
You may request correction of inaccurate personal information and completion of incomplete information.
11.3 Right to Erasure
You may request deletion of personal information in circumstances where the GDPR provides a right to erasure.
This right is subject to exceptions, including where continued processing is necessary to comply with a legal obligation or establish, exercise, or defend legal claims.
11.4 Right to Restriction
You may request that we restrict processing of personal information in certain circumstances.
11.5 Right to Object
Where processing is based on legitimate interests, you may have the right to object based on circumstances specific to you.
Where personal information is processed for direct marketing, you may object to that processing at any time.
11.6 Right to Data Portability
Where applicable, you may request personal information that you provided to us in a structured, commonly used, machine-readable format and may have the right to transmit that information to another controller.
11.7 Withdrawal of Consent
Where we rely on consent, you may withdraw that consent at any time.
Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.
11.8 Automated Decisionmaking
Unless we provide a specific notice stating otherwise, we do not use personal information to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning an individual.
If this practice changes, we will provide information and rights required by applicable law.
11.9 Right to Lodge a Complaint
If you believe that our processing of your personal information violates the GDPR, you may have the right to lodge a complaint with a competent data-protection supervisory authority, including the authority in the country in which you reside or work or where the alleged violation occurred.
We encourage you to contact us first if you have a privacy concern so that we have an opportunity to address it.
12. California Residents
This section applies where the CCPA applies to Stills Media's processing of a California resident's personal information.
12.1 Categories of Personal Information
Depending on your interaction with the Services, during the preceding 12 months we may have collected the following categories of personal information:
Identifiers, including name, email address, telephone number, mailing address, username, IP address, and similar identifiers.
Customer-record information, including contact details and information you provide in connection with a service or business relationship.
Internet or other electronic network activity, including browser information, device information, referring URLs, log information, and information regarding interactions with the Services.
Geolocation information, consisting of approximate location derived from an IP address.
Sensitive personal information, where applicable, may include account login credentials used for authentication or security purposes.
We do not use or disclose sensitive personal information for the purpose of inferring characteristics about individuals or for purposes that would, based on our current practices, require a right to limit under the CCPA.
12.2 Sources
These categories of information may be collected:
- directly from you;
- automatically from your browser or device;
- from service providers or contractors operating on our behalf; and
- from our internal systems.
12.3 Business and Commercial Purposes
We may collect and use these categories of personal information to:
- provide and administer the Services;
- create and authenticate accounts;
- respond to communications and support requests;
- maintain customer and business relationships;
- operate and secure our systems;
- detect fraud or misuse;
- conduct analytics;
- improve the Services;
- maintain records;
- comply with applicable law; and
- establish, exercise, or defend legal rights.
12.4 Disclosure for Business Purposes
During the preceding 12 months, we may have disclosed identifiers, customer-record information, internet or electronic-network activity, approximate geolocation information, and authentication information to service providers or contractors as reasonably necessary to perform services on our behalf.
These recipients may include analytics, infrastructure, security, communications, technical-support, and other operational service providers, depending on the Services involved.
12.5 Sale and Sharing
During the preceding 12 months, we have not sold personal information.
During the preceding 12 months, we have not shared personal information for cross-context behavioral advertising as “sharing” is defined by the CCPA.
We do not have actual knowledge that we sell or share the personal information of individuals under 16 years of age.
12.6 California Privacy Rights
Where applicable, California residents may have:
The Right to Know and Access — You may request information about the personal information we have collected about you, including categories of information, sources, purposes, recipients, and specific pieces of information.
The Right to Delete — You may request deletion of personal information we collected from you, subject to applicable exceptions.
The Right to Correct — You may request correction of inaccurate personal information we maintain about you.
The Right to Opt Out of Sale or Sharing — California residents have the right to opt out when a covered business sells personal information or shares it for cross-context behavioral advertising.
Because Stills Media does not currently sell or share personal information as described above, there is currently no sale or sharing from which you need to opt out. If our practices change, we will provide the controls required by applicable law.
The Right to Limit Certain Uses of Sensitive Personal Information — This right may apply where a business uses or discloses sensitive personal information for purposes specified by California law as subject to limitation.
Based on our current practices, we do not use or disclose sensitive personal information in a manner requiring such a limitation mechanism. If that changes, we will provide any controls required by law.
The Right to Non-Discrimination — We will not unlawfully discriminate against you because you exercised a privacy right provided by the CCPA.
12.7 Authorized Agents
Where permitted by California law, you may authorize another person to submit a privacy request on your behalf.
We may require reasonable evidence that the individual has authority to act for you and may verify your identity directly where permitted by law.
12.8 Exercising California Rights
California privacy requests may be submitted to:
data-management@stillsmedia.co
We may request information reasonably necessary to verify your identity or authority to make the request.
13. Canadian Residents
Where PIPEDA applies, Stills Media handles personal information in accordance with applicable Canadian privacy requirements.
13.1 Privacy Accountability
Stills Media has designated a Privacy Officer responsible for overseeing our privacy practices and responding to privacy questions and complaints.
The Privacy Officer may be contacted at:
13.2 Consent
Where consent is required, we will seek consent appropriate to the sensitivity of the information and the circumstances.
We seek to explain the nature, purposes, and reasonably foreseeable consequences of relevant collection, use, or disclosure so that consent can be meaningful.
Consent may be express or implied where permitted by law.
13.3 Access and Correction
You may request access to personal information we hold about you and may request correction where information is inaccurate or incomplete, subject to applicable legal exceptions.
13.4 Withdrawal of Consent
Where processing depends upon your consent, you may withdraw that consent, subject to applicable legal or contractual restrictions and reasonable notice.
Withdrawal of consent may affect our ability to provide a Service where the information is reasonably necessary to provide that Service.
13.5 Privacy Complaints
You may contact our Privacy Officer if you have questions or concerns regarding our privacy practices.
We will investigate legitimate complaints and take appropriate steps where we determine that a privacy practice should be corrected.
14. Marketing Communications
You may opt out of promotional emails by using an unsubscribe mechanism included in the communication, where available, or by contacting us.
An opt-out from marketing does not necessarily prevent us from sending non-promotional messages such as security notices, account notices, service communications, invoices, responses to requests, or information necessary to administer an existing relationship.
We may maintain limited records of marketing opt-outs so that we can continue honoring your preference.
15. Do Not Track and Browser Privacy Signals
Some browsers provide a “Do Not Track” (“DNT”) setting.
Because there is not a single universally applicable standard governing all DNT signals, our Services may not respond to a traditional DNT setting.
Separate browser-based privacy signals may have legal significance under particular privacy laws.
Where applicable law requires us to recognize an opt-out preference signal, such as a legally recognized browser signal concerning the sale or sharing of personal information, we will process that signal as required by law.
Because we do not currently sell personal information or share it for cross-context behavioral advertising, such a signal does not presently change a user's sale or sharing status.
16. International Data Transfers
Stills Media operates primarily in the United States and Canada.
Personal information may therefore be transferred to, stored in, or processed in the United States or Canada.
Information may also be processed in other jurisdictions where authorized service providers maintain infrastructure or personnel.
Privacy and government-access laws may differ between jurisdictions, and personal information processed in another country may be subject to lawful access by courts, law-enforcement authorities, national-security authorities, or other governmental bodies in that jurisdiction.
Where applicable privacy law restricts international transfers of personal information, we will use an appropriate legal transfer mechanism or other legally recognized safeguard where required.
Such safeguards may include applicable adequacy decisions, contractual protections, standard contractual clauses, or other mechanisms recognized under applicable data-protection law.
We also require service providers handling personal information on our behalf to protect that information in accordance with applicable contractual and legal obligations.
17. Third-Party Websites and Services
Our Services may contain links to websites, applications, or services operated by third parties.
This Policy does not govern the independent privacy practices of third parties that control their own collection and use of personal information.
We encourage you to review the privacy information provided by a third party before providing personal information through its services.
This section does not apply where a third party processes personal information solely on our behalf as a service provider and that processing is otherwise addressed by this Policy.
18. Changes to This Privacy Policy
We may update this Policy periodically to reflect changes in our Services, technology, business practices, or legal requirements.
When we update this Policy, we will revise the Last Updated date at the top.
If an update materially changes how personal information is collected, used, or disclosed, we will provide any additional notice or obtain any consent required by applicable law.
We encourage you to periodically review this Policy to remain informed about our privacy practices.
19. Contact Us
Questions, comments, or concerns regarding this Privacy Policy or our handling of personal information may be directed to:
Stills Media
Privacy Officer / Compliance
Email: compliance@stillsmedia.co
Privacy-rights requests, including requests for access, correction, or deletion, may be directed to:
Email: data-management@stillsmedia.co
When submitting a privacy request, please provide enough information for us to understand the request and, where required, reasonably verify your identity.
We will respond in accordance with applicable privacy law.