Privacy policy

Last reviewed and updated: July 17, 2026

1. The short version

This site collects almost nothing. It has no user accounts, no shopping cart, and no checkout, and it does not track its readers across the web for its own purposes. The only personal information it ever holds is what you type into the contact form, plus the routine technical logs that any web host keeps. The rest of this page explains that in full, including the rights you have and exactly how to use them.

2. Who is responsible

The operator of travelinggoosephotography.com, and the data controller where that term applies, is:

Traveling Goose Photography LLC
New Mexico Limited Liability Company (LLC) · New Mexico Secretary of State Reg. No. 6248317
2921 Central Ave NE, Suite 108, Albuquerque, NM 87106
Phone: +1 (505) 214-3690
Privacy contact: [email protected]

For any question about privacy, or to exercise a right described below, write to [email protected]. A person handles these requests, not an automated system.

3. What is collected, and why

Things you send us

• Contact form: your name, email address, chosen topic, and message. It is used for one purpose, reading and answering your message. Legal basis: our legitimate interest in replying to mail you chose to send. If your message concerns a privacy request, we keep only what is needed to handle and document it.

Things collected automatically

• Hosting logs: the infrastructure that serves these pages records standard technical entries, such as IP address, browser type, page requested, and time, for security, abuse prevention, and keeping the site online. Logs rotate on the host's standard short schedule and are not used to build reader profiles or to identify you personally.
• Browser storage: one strictly necessary entry remembering your cookie-banner choice, described fully in the cookie policy. Anything optional runs only after you consent.

What we do not ask for

There is no registration, so we never ask for a password, a date of birth, a mailing address, or any payment detail. If a field is not in the contact form, the site is not collecting it.

4. What this site does not currently do

The statements below describe how the site works today. If any of them ever changes, this policy would be updated first, before the change took effect:

• Personal information is not sold or rented, and it is not shared for advertising or traded. If consent-based advertising is ever enabled, any data sharing it involved would happen only after an explicit opt-in, and this policy would be updated before it began.
• No cross-site tracking is run for the site's own benefit, and no data brokers are involved. If that ever changed, it would be disclosed here and, where required, gated behind your consent.
• No payment data is collected, because nothing here is for sale.
• The site is written for adult travelers and does not knowingly collect information from children under 13. If you believe a child has sent personal information, write to [email protected] and it will be deleted.

5. Analytics and advertising, current status

At the date at the top of this page, no analytics service and no advertising network are active on this site. The cookie policy is written to cover the possibility that clearly labeled, consent-based advertising or aggregate analytics could be added later, because it is easier to be honest about that in advance than to surprise you. If either is ever switched on, it would load only after you choose to accept optional storage, the cookie inventory would be updated first, and this section would say so plainly.

6. Service providers

A short list of processors keeps the site running, each handling data only as needed for its job: a hosting and content-delivery provider that serves the pages and generates the logs above, a form-relay service that carries contact-form submissions to our inbox, and an email provider that stores correspondence. Each acts on our instructions and is bound to protect the data it handles. If consent-based advertising is ever active, the ad network would process technical data as described in the cookie policy, only after you accept. Information may also be disclosed if the law genuinely requires it, or to protect the site and its readers against attack. There are no other recipients.

7. Where the data lives

The journal is published from the United States, and its providers process data in the United States. If you are reading from a jurisdiction with its own data protection law, your information is transferred to the United States and protected by the practices on this page. Where a transfer mechanism is legally required, we rely on the appropriate safeguards for such transfers.

8. How long things are kept

• Correspondence: kept while the conversation is live, then for up to two years, then deleted.
• Hosting logs: kept for the provider's standard short window, typically 30-90 days.
• Consent choice: stays in your own browser until you clear it; we never see it.
• Privacy-request records: a minimal record of a request and our response is kept as long as the law requires us to be able to demonstrate compliance, then deleted.

9. Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to receive a portable copy, to restrict or object to processing, and to withdraw any consent you previously gave.

EEA and UK. Readers in the European Economic Area and the United Kingdom hold these rights under the GDPR and UK GDPR, including the right to lodge a complaint with your local supervisory authority if you are not satisfied with how a request was handled.

California. California readers hold rights under the CCPA as amended by the CPRA: to know and access, to correct, and to delete personal information, and to opt out of the sale or sharing of personal information and of cross-context behavioral advertising. This site does not sell or share personal information as those terms are defined, so there is nothing to opt out of today; if that ever changes, a clear opt-out control would appear first. Exercising a right never results in different pricing or service, because there is nothing here to buy.

Other United States state privacy rights

Residents of several other states have comparable rights under their own laws, including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and Texas (TDPSA). In general these laws give you the right to confirm whether we process your personal data and to access it, to correct inaccuracies, to delete it, to obtain a portable copy, and to opt out of targeted advertising, the sale of personal data, and certain kinds of profiling. Because this site collects so little and does not sell data or run targeted advertising, most of these rights are satisfied by default, but you are welcome to exercise any of them, and some of these states also give you the right to appeal a refusal.

How to exercise a right

Email [email protected] or use the contact form and choose the privacy topic. Tell us plainly what you would like. For example, you might ask what personal information we hold about you, or ask us to delete a message and email address you sent earlier. We answer within the window the law requires, 30 days in most cases and up to 45 under some state laws, and where the law allows one extension we will tell you why we need it. We may need to confirm you are the person the data concerns, or your authorized agent, before we act. If we cannot honor a request, we explain why, and, in states that provide it, you may appeal that decision by replying to our answer.

10. Security

Pages are served over HTTPS. The little data that exists is reachable only by the publisher. No system is perfectly secure, but the most effective protection here is structural: the site simply does not hold much about you, so there is very little to lose.

11. A short glossary

Privacy language is dense, so here is plain-English help with the terms used above:

• Personal information / personal data: anything that identifies you or could be linked to you, such as your name, email address, or IP address.
• Data controller: the party that decides why and how your data is handled. Here, that is the publisher named in section 2.
• Processor or service provider: a company that handles data on the controller's behalf and on its instructions, such as the web host.
• Sale or sharing: under United States state laws, exchanging personal data for money or for cross-context advertising. This site does neither.
• Targeted advertising: ads selected based on your activity across different sites and over time.
• Consent: a clear, freely given, opt-in yes that you can withdraw at any time.

12. Changes

Any revision to this policy appears on this page with a new date at the top. Nothing changes retroactively, and a material change to how data is handled would be highlighted so that returning readers can see what is different.