Policy Version: 2026.1, Effective Date: June 18, 2026

Cavan Images (“we,” “our,” or “us”) values your privacy. This Privacy Policy explains how we collect, use, share, and safeguard your Personal Data when you use our website, services, and platforms (collectively, the “Services”).

For users located in the European Economic Area (EEA), United Kingdom (UK), and Switzerland: Cavan Images acts as the Data Controller of your Personal Data. We process your data in strict accordance with the General Data Protection Regulation (GDPR) and applicable national laws.

1. Information We Collect

We collect the following categories of information:

• Identity & Contact Data: Name, email address, billing information, mailing address, and account credentials.
• Financial Data: Processed securely by our third-party payment gateways. We do not store full credit card details.
• Technical & Usage Data: IP address, device type, browser metadata, and activity logs.
• Contributor & Model Data: Information necessary for contributor agreements, payments, intellectual property management, and model releases (which may include explicit consent for the processing of special category data inherent in photographs).

2. Legal Basis and How We Use Your Information (EEA/UK Users)

Under the GDPR, we only process your Personal Data when we have a valid legal basis:

• Performance of a Contract: To process transactions, deliver purchased content, and manage contributor payouts.
• Legitimate Interests: To protect against fraud, ensure network security, and perform essential business operations, provided these interests are not overridden by your fundamental rights.
• Legal Obligation: To comply with tax, intellectual property, and regulatory requirements.
• Consent: Where required by law (e.g., for non-essential cookies, marketing emails, and processing biometric/special category data via model releases), we rely on your explicit, granular, and easily withdrawable consent.

3. Tracking, Cookies, and Real-Time Monitoring

We use cookies, scripts, and similar technologies.

EEA/UK Users (Opt-In): We will not deploy non-essential cookies, analytics, or session-replay scripts on your device without your prior explicit consent, which you can manage or withdraw at any time via our Cookie Preference Center.

US & Non-EEA Users (Notice of Monitoring): By accessing or interacting with the Cavan Images website, you expressly consent to the real-time monitoring, interception, and recording of your activities (including browsing behavior, clicks, and chat interactions) by Cavan Images and its designated service providers for security, analytics, and optimization. These vendors act strictly as our agents and are prohibited from retaining this data for their own independent commercial benefit.

4. How We Share Information

We do not sell your personal data. We share information with:

• Data Processors: Third-party vendors (analytics platforms, hosting providers, customer support tools) who process data strictly on our behalf under binding Data Processing Agreements (DPAs).
• Legal Authorities: When mandated by applicable law or enforceable government requests.
• Google APIs: Our use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. International Data Transfers

Cavan Images is headquartered in the United States. If you are located in the EEA/UK, your data will be transferred to the U.S. We ensure your data receives an adequate level of protection by utilizing appropriate safeguards, primarily by relying on the EU-U.S. Data Privacy Framework (DPF) (or UK equivalent) and/or executing Standard Contractual Clauses (SCCs) approved by the European Commission.

6. Your Privacy Rights

Depending on your jurisdiction, you have specific rights regarding your data:

• EEA/UK Users (GDPR): You have the right to Access, Rectify, Erase ("Right to be Forgotten"), Restrict processing, Object to processing (especially for direct marketing), and request Data Portability. To exercise these rights, or to withdraw your consent at any time, contact us below. You also have the right to lodge a complaint with your local Data Protection Authority.
• California Users (CCPA/CPRA): You have the right to know what data is collected, request deletion, and opt-out of the "sharing" or "sale" of personal data. We do not sell your data.

To exercise any of these rights, please contact: hello@cavanimages.com.

7. Data Retention & Security

We implement reasonable technical, administrative, and physical safeguards to protect your data. We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, including to satisfy any legal, accounting, or reporting requirements.

8. Dispute Resolution (U.S. & Non-EEA Users Only)

Mandatory Arbitration and Class Action Waiver: For all other users, any dispute arising out of or relating to your use of our Services—including claims alleging violations of statutory privacy rights, the California Invasion of Privacy Act (CIPA), or wiretapping laws—shall be resolved by mandatory, binding arbitration. YOU AND CAVAN IMAGES AGREE TO WAIVE ANY RIGHT TO A JURY TRIAL OR TO PARTICIPATE IN A CLASS ACTION OR REPRESENTATIVE PROCEEDING.

10. Turnstile Privacy Addendum

Our website utilizes Cloudflare Turnstile, a privacy-focused CAPTCHA service, to protect against automated abuse. Please refer to Turnstile Privacy Policy for more information.

11. Stripe

Stripe, a third-party payment processor, utilizes cookies for fraud prevention and payment processing.

12. Contact Us

If you have any questions, wish to exercise your rights, or require our EU Representative's contact details, please contact us at: hello@cavanimages.com