Privacy Policy

Effective date: August 9, 2026

Coconut Product Photography, operated by Coconut Studio, respects the privacy of website visitors, prospective clients, and project contacts. This Privacy Policy explains what information we collect, why we use it, when we share it, and the choices available to you.

This policy applies to coconutproductphotography.com and to information Coconut receives in connection with project inquiries. It does not replace the privacy policies of third-party services that you choose to use, including Lenso and Stripe.

1. Information you provide

You may provide information when you email or call the studio, submit a project request, participate in a project, request support, or otherwise communicate with Coconut. This information may include:

your name, email address, phone number, company, and role;
project descriptions, product or SKU lists, shot requirements, references, deadlines, and delivery specifications;
shipping, return, and product-handling information;
messages, comments, approvals, and files shared for a project;
billing contact information, invoice details, and payment status; and
any other information you choose to provide.

Please do not send passwords, full payment-card numbers, Social Security numbers, government identifiers, health information, or other sensitive personal information that is not necessary for the project.

2. Information collected automatically

When you visit the website, the hosting and network systems may automatically record technical information such as:

Internet Protocol address;
browser and device type;
operating system;
requested page and referring page;
date and time of the request;
response status and basic diagnostic information; and
security and rate-limit events.

This information is used to operate, secure, troubleshoot, and measure the website. Server logs are not intended to identify you by name, but an IP address or other technical information may be considered personal information under some laws.

3. Cookies, local storage, and analytics

The website may use strictly necessary browser storage for functions such as remembering your privacy choice. Optional analytics are not loaded until you grant analytics consent through the website's privacy controls.

When enabled with your consent, Google Analytics may collect information about page views, approximate location derived from IP address, device and browser characteristics, referral source, and interactions with the website. Coconut uses this information to understand which public pages are useful and to improve navigation and content. Coconut does not use Google Analytics for advertising or cross-context behavioral advertising.

You can accept or decline optional analytics when the consent notice appears, and you can change that choice through the Privacy choices link in the footer. If your browser sends a recognized Global Privacy Control signal, the website will treat optional analytics as declined unless you later make a different choice through the site controls.

4. Lenso project requests and client portal

Coconut uses Lenso for project intake, briefs, proofs, comments, revisions, approvals, messages, and final delivery when those features are enabled for a project. Information submitted through a Coconut request form or invited client portal is processed by Lenso under Lenso's own privacy and security terms as well as Coconut's instructions.

Clients generally access invited projects through a secure email link. Do not forward a project invitation link. Ask the studio to invite the correct email address instead.

5. Payments

When Coconut enables invoicing through Lenso, payment is completed on a Stripe-hosted page. Stripe processes payment-card information. Coconut and Lenso may receive invoice details, payment status, transaction references, and limited billing information, but Lenso states that it does not store your card details. Payment methods and payment data practices are also governed by Stripe's terms and privacy policy.

6. How Coconut uses information

Coconut may use information to:

respond to inquiries and provide estimates;
evaluate, schedule, produce, review, and deliver photography projects;
communicate about products, shipping, approvals, revisions, invoices, and support;
maintain project and business records;
operate, secure, troubleshoot, and improve the website and workflow;
prevent fraud, misuse, and security incidents;
comply with legal, accounting, tax, insurance, and contractual obligations; and
protect the rights, safety, property, and legitimate interests of Coconut, clients, service providers, and others.

Where a law requires a legal basis for processing, Coconut relies as applicable on your consent, steps requested before entering an agreement, performance of an agreement, compliance with legal obligations, and legitimate interests that are not overridden by your rights.

7. How information is shared

Coconut may share information with service providers that perform work on its behalf, such as:

Lenso for intake, project collaboration, approvals, invoicing coordination, and delivery;
Stripe for payment processing;
Sanity for website editorial content;
hosting, domain, network, backup, email, monitoring, and security providers;
professional advisers such as accountants, insurers, and attorneys; and
shipping carriers when needed to receive or return products.

Coconut may also disclose information when required by law, legal process, or a valid government request; to investigate fraud or security incidents; to protect rights and safety; with your direction or consent; or as part of a merger, financing, sale, or transfer of the business, subject to appropriate protections.

Coconut does not sell personal information. Coconut does not use website information for cross-context behavioral advertising. If those practices change, this policy and the website's privacy controls will be updated before the change takes effect.

8. Data retention

Coconut keeps information only for as long as reasonably needed for the purposes described in this policy, including project delivery, client support, reorders, accounting, tax, insurance, dispute resolution, security, backup, and legal obligations.

Retention periods vary by record type. Project files and business records may be retained longer than routine website logs. When information is no longer needed, Coconut may delete, anonymize, or securely archive it, subject to legal and operational requirements. Backup copies may remain for a limited period until they are overwritten.

9. Security

Coconut uses reasonable administrative, technical, and physical safeguards appropriate to the size and nature of the business. These may include access controls, encrypted connections, limited collection, protected credentials, software updates, backups, logging, and service providers with security responsibilities.

No Internet transmission, storage system, or business process can be guaranteed completely secure. You are responsible for using secure email accounts, protecting project links, and avoiding unnecessary sensitive information.

10. Your choices and privacy rights

You may:

decline optional analytics;
change your analytics choice through the Privacy choices link;
ask Coconut to correct inaccurate contact information;
request access to or deletion of information, subject to identity verification and legal exceptions;
ask questions about retention or sharing; and
unsubscribe from non-transactional marketing messages, if Coconut sends them.

Privacy rights vary by location and may include rights to know, access, correct, delete, restrict, object, withdraw consent, or receive a portable copy of certain information. Coconut will evaluate a verified request under the law that applies to the request and the business. Coconut will not discriminate against you for exercising an applicable privacy right.

To make a request, email sepideh@coconutstudiowa.com with the subject line Privacy request. Describe the request and the relationship or project that will help locate the information. Coconut may ask for additional information to verify identity and authority. An authorized agent may be required to provide proof of authorization.

11. Children's privacy

The website and services are intended for businesses and adults. They are not directed to children under 13, and Coconut does not knowingly collect personal information from children under 13 through the website. Contact the studio if you believe a child has provided personal information so the situation can be reviewed.

12. International visitors

Coconut is based in Washington State in the United States. If you access the website or provide information from another country, your information may be processed in the United States and other locations where service providers operate. Those locations may have different data-protection laws than your country.

13. Third-party websites and services

The website may link to Lenso, Stripe-hosted payment pages, social platforms, client websites, or other third-party services. Coconut does not control their privacy, security, availability, or content. Review the third party's policies before submitting information.

14. Changes to this policy

Coconut may update this Privacy Policy to reflect changes in the website, services, vendors, or legal obligations. The effective date at the top will be updated when the policy changes. Material changes may also be announced on the website or through another appropriate channel.

15. Contact

Questions or privacy requests may be sent to:

Coconut Product Photography
Operated by Coconut Studio
Lynnwood, Washington, United States
Email: sepideh@coconutstudiowa.com
Phone: (425) 245-4645