Legal
Privacy Policy
This policy applies to Coastal Properties Photography (operated by Zaid Al-Taie), a sole proprietorship based in Vancouver, British Columbia, Canada. We are committed to protecting your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and BC's Personal Information Protection Act (PIPA).
1. Who We Are
Coastal Properties Photography provides real estate, architectural, and property photography services across Greater Vancouver and the Lower Mainland. Our website is located at coastalphoto.ca.
Privacy contact: zaid@coastalphoto.ca
2. What Personal Information We Collect
We collect personal information only when necessary to provide our services or improve the site experience.
Contact & Booking Inquiries
When you submit an inquiry through our contact, quick-quote, or booking form, we collect:
- Full name and email address (required)
- Phone number (required on the booking form, optional elsewhere)
- Property address, property type, square footage, and MLS status
- Preferred shoot date and additional notes
- Selected services and how you heard about us
To match leads back to the marketing channel that referred you (so we can measure which campaigns work), each form submission also stores:
- UTM parameters (
utm_source,utm_medium,utm_campaign,utm_term,utm_content) if present in the URL - Google Ads click ID (
gclid) and Meta click ID (fbclid) if present - The page you first landed on and the referring website
- A Google Analytics anonymous client ID (random number, not linked to your name) so we can join analytics behaviour to your inquiry
Analytics (with your consent)
If you accept analytics cookies, we use Google Analytics 4 to collect usage data, including:
- Pages visited, time spent, scroll depth, and page interactions (e.g. which pricing services you toggled, which FAQ you opened, which area page you viewed)
- Approximate geographic region (city/country level, derived from IP — we set anonymize_ip so the full IP is never stored)
- Device type and browser
- Referral source (e.g. Google search, social media)
You can decline analytics at any time using the controls on our Cookie Policy page or through your browser settings.
Marketing measurement (with your consent)
If you accept analytics cookies and we have activated paid-ad measurement (Google Ads and/or Meta Pixel), we additionally send the following to those platforms so we can measure ad performance and optimise spend:
- Conversion events when you submit a form, click a key call-to-action, or call us. These events include an estimated lead value (in CAD) for ad-bidder optimisation.
- Enhanced Conversions for Google Ads. When you submit a form, your email, phone, and name are hashed (one-way SHA-256) by Google's tag before transmission, then matched against ad-click data on Google's servers. The hashed values are not shared with us back as raw data. You can disable this by rejecting analytics cookies.
- Meta Pixel events. Standard events (
Lead,Schedule,Contact,InitiateCheckout) and a customCalculatorCompleteevent with the estimated quote value.
Booking Payments
Online booking requests and payment processing may be handled through secure third-party providers. We do not collect or store your payment card information.
3. How We Use Your Information
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Respond to your inquiry and schedule a shoot | Name, email, phone, property details | Contract / consent |
| Deliver completed photos via private gallery link | Email address | Contract performance |
| Understand how visitors use the website | Analytics events (GA4) with anonymised IP | Consent (cookie opt-in) |
| Measure ad campaign performance and optimise spend | UTM / click-ID parameters, conversion events, hashed contact details for Enhanced Conversions | Consent (cookie opt-in) |
| Comply with applicable law | Any data we hold | Legal obligation |
We do not sell, rent, or trade your personal information to third parties. We do not use your information for automated decision-making or profiling. The ad-platform conversion data above is used only to attribute leads to the campaign that produced them, never to build profiles about you.
4. Third-Party Services
We use the following third-party services. Each has its own privacy policy. Services marked "consent required" do not run unless you accept analytics cookies.
| Service | Purpose | Data Sent |
|---|---|---|
| Google Analytics 4 | Website analytics (consent required) | Page views, event interactions, anonymised IP, device/browser, referrer |
| Google Ads | Conversion measurement and Enhanced Conversions for paid-search campaigns (consent required) | Conversion events with lead value (CAD); hashed email, phone, and name for ad-click matching |
| Meta (Facebook) Pixel | Conversion measurement for paid social campaigns (consent required) | Page views and standard events (Lead, Schedule, Contact, InitiateCheckout) |
| Supabase | Form submission storage | Inquiry form data plus attribution fields (UTMs, gclid, fbclid, GA4 client ID, landing page, referrer) |
| Formspree | Email delivery of form submissions | Inquiry form data including attribution fields |
| Secure payment processor | Online booking & payment processing | Booking details & payment information |
| Google Fonts | Typography (served from Google CDN) | IP address (standard web request) |
5. Cookies and Local Storage
Our site sets a small set of cookies and uses your browser's local storage. Analytics and advertising-measurement items are set only after you accept the cookie banner. We do not use cookies to build profiles about you across unrelated websites.
What we use
| Name | Provider | Purpose | Duration |
|---|---|---|---|
cpp_cookie_consent |
This site (first-party cookie + localStorage) | Stores your cookie preference (accepted/declined). Always on. | 180 days |
cpp_attribution |
This site (localStorage only, no cookie) | Remembers which campaign brought you here (UTM parameters, gclid, fbclid, landing page, referrer) so we can attribute later inquiries to the right campaign. Always on (no personal data). |
90 days |
_ga, _ga_* |
Google Analytics 4 | Distinguish unique visitors and sessions | 2 years (consent required) |
_gcl_au, _gcl_* |
Google Ads | Measure ad clicks and conversions (consent required) | 90 days |
_fbp |
Meta (Facebook) Pixel | Distinguish unique visitors for ad conversion measurement (consent required) | 90 days |
You can withdraw your consent at any time on the Cookie Policy page or by using your browser's privacy controls. The cpp_attribution entry is removed automatically after 90 days; you can also clear it by clearing your browser's site data.
6. Data Retention
- Inquiry form data. Retained for as long as needed to fulfil your booking and for up to 2 years for legitimate business records (invoicing, communications), after which it is deleted.
- Analytics data. Retained for 14 months within Google Analytics, after which it is automatically deleted per our GA4 data retention settings.
- Email correspondence. Retained in our email system for up to 3 years.
7. Your Rights
Under PIPEDA and BC PIPA, you have the right to:
- Access. Request a summary of the personal information we hold about you.
- Correction. Ask us to correct inaccurate or incomplete information.
- Withdrawal of consent. Withdraw your consent to any use of your personal information where consent is the basis for processing. This does not affect the lawfulness of processing before withdrawal.
- Deletion. Request deletion of your personal information, subject to our legal retention obligations.
- Complaint. File a complaint with the Office of the Privacy Commissioner of Canada or the Office of the Information & Privacy Commissioner for BC.
To exercise any of these rights, email us at zaid@coastalphoto.ca. We will respond within 30 days.
8. Data Security
We take reasonable precautions to protect your personal information. Form data is transmitted over HTTPS and stored on Supabase's encrypted infrastructure. Access to your information is limited to Zaid Al-Taie and the third-party service providers listed above, each of whom is bound by their own privacy and security commitments.
No method of transmission or storage over the internet is 100% secure. If you believe your information has been compromised, please contact us immediately.
9. Children's Privacy
Our services are not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted information through our site, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically. Continued use of the site after changes are posted constitutes acceptance of the updated policy.
11. Contact Us
For any privacy-related questions, requests, or concerns:
- Email: zaid@coastalphoto.ca
- Phone: (250) 880-3776
- Address: Vancouver, BC, Canada