CM Media · Your information

Privacy policy

Effective date: 2026-11-12 (Pacific Time).

CM Media, operated by Chris Martinez in Santa Clarita, California, uses this website to present photography and video services and respond to inquiries. For privacy questions or requests, contact chris@chrismartinez.online. This policy covers website use and inquiries; project agreements may also apply to booked work.

Information you provide

The inquiry form collects your name, email, selected service and project details. You may also select a package. We include your service and package choice in the inquiry notification. You may also provide a preferred date, location and budget. We use this information to respond, discuss availability and scope, prepare a quote and manage your request. An inquiry does not confirm a booking or automatically add you to a marketing list. Please avoid sensitive information or unnecessary details about other people.

Service providers

Inquiry forms are processed by Formspree and notifications are sent to CM Media’s Google Workspace/Gmail business inbox. These are the current destinations for website inquiries. This website uses Cloudflare Pages for hosting and Cloudflare R2 for portfolio video storage and delivery. Hosting, form, email and security providers may process technical information, such as IP addresses, browser information, request times and security signals, to deliver services and prevent abuse. Information may be processed in the United States or other countries where providers operate. Provider logs and backups have their own retention practices.

We may disclose information when required by law or reasonably necessary to protect rights or security. External websites have their own practices. See Formspree’s privacy policy (Formspree privacy policy) and Google’s privacy policy (Google privacy policy).

For information about Cloudflare’s handling of data, see the Cloudflare privacy policy.

Optional analytics — currently disabled

Google Analytics is currently disabled. Using Accept in Privacy settings does not activate it while it remains disabled for the website. No automatic analytics prompt is shown; Privacy settings remain available in the footer.

If separately activated, optional analytics would help us understand traffic sources, service-page and portfolio interest, and successful inquiry submissions. It may process website activity, a pseudonymous identifier, browser/device information and approximate location. Pseudonymous information is not necessarily anonymous. Our custom events are designed to exclude names, email addresses, phone numbers, project addresses and inquiry text, and to limit URL and event information. We do not plan to use this setup for advertising audiences, remarketing or Google Signals.

Your privacy choices

Under the prepared setup, analytics would load only after you accept it on the current page and browser storage passes reliability checks. Permission does not carry to another page or survive a reload. A saved reminder avoids repeated automatic prompts but never permits tracking. You can reopen Privacy settings in the footer to make a choice on any page. This approach limits how much browsing and inquiry activity analytics can measure. Navigation, galleries and the inquiry form work with either choice.

Reject takes effect immediately on the current page, before saving is attempted. Withdrawing consent would stop subsequent optional measurement and remove this site’s accessible Google Analytics cookies. It cannot cancel a request already in transit, undo information already sent or automatically delete historical Google records. Contact us separately about deletion requests. If storage is unavailable or unreliable, analytics stays off and acceptance is unavailable on that page. Reload after storage works to make a fresh choice.

Browser storage and signals

Privacy settings store a rejection or a reminder that you made a choice, with a date and preference version, in browser local storage for up to 180 days. Neither record permits tracking. Storage checks normally remove their temporary test values; a failed removal may leave a non-identifying value. A failed save cannot restore an earlier permission. Blocking storage can prevent remembering a choice, but does not enable analytics.

If analytics is later enabled and accepted, its cookie expiry is configured to 90 days and may refresh on later visits. Cookie expiry is separate from Google’s server-side data retention.

Global Privacy Control (GPC) communicates a privacy preference used for sale/sharing opt-outs under applicable laws. Do Not Track (DNT) is a separate, older tracking signal. We voluntarily keep optional analytics off when either signal is detected. Their meanings and legal requirements are not identical. These signals do not prevent necessary website security processing or delivery of an inquiry you submit. This website does not install advertising pixels for cross-site targeted advertising.

Retention

Inquiry emails and business correspondence in CM Media’s Google Workspace/Gmail inbox may be retained for an extended period, including indefinitely. CM Media does not currently operate a fixed automatic deletion schedule or a formal periodic deletion process for this correspondence.

We retain information for legitimate purposes such as client communication, project follow-up, business administration and necessary recordkeeping. Relevant considerations include the nature of the inquiry, continuing client or project relationships, and legal, accounting, security or dispute-related needs. Any retention must respect applicable legal obligations and limitations.

Formspree stores form submissions separately from the notification emails delivered to us. Its plan-based archive limits and service policies apply to those copies. Expiration or deletion of a submission in Formspree does not delete an email already delivered to Gmail, and deleting an email does not delete the Formspree submission. Provider logs and backups may follow separate retention schedules.

You can contact chris@chrismartinez.online with privacy or deletion requests. We assess requests under applicable law and may need to retain relevant information for active projects, necessary recordkeeping, legal obligations or other lawful exceptions. We will explain any applicable preservation limit. Changing analytics preferences does not delete inquiry records. Future analytics, if separately approved and activated, would have separate retention settings; no server-side retention period is promised before those settings are verified.

Privacy requests

Email chris@chrismartinez.online with the subject “Privacy request” to ask about, correct or request deletion of information you provided. Include only enough context to locate the inquiry. We may verify your request using proportionate information and explain any required preservation or other limitation. Please do not send identification documents or other sensitive information unless we arrange an appropriate method. Changing analytics preferences does not delete an inquiry.

Security and children

The website and form use HTTPS, and providers supply security and access controls. No transmission or storage method is completely secure. This business-services website is not directed to children under 13. Contact us if you believe a child provided personal information.

Changes

We will post revisions here and update the effective or revision date. A material change to optional analytics purposes or providers will require a fresh choice before the new settings are used.