Privacy Policy
This policy applies to Coastal Properties Photography (operated by Zaid Taie), a sole proprietorship based in Vancouver, British Columbia, Canada. We are committed to protecting your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and BC's Personal Information Protection Act (PIPA).
1. Who We Are
Coastal Properties Photography provides real estate, architectural, and property photography services across Greater Vancouver and the Lower Mainland. Our website is located at coastalphoto.ca.
Privacy contact: info@coastalphoto.ca
2. What Personal Information We Collect
We collect personal information only when necessary to provide our services or improve the site experience.
Contact & Booking Inquiries
When you submit an inquiry through our contact, quick-quote, or booking form, we collect:
- Full name and email address (required)
- Phone number (required on the booking form, optional elsewhere)
- Property address, property type, square footage, and MLS status
- Preferred shoot date and additional notes
- Selected services and how you heard about us
To match leads back to the marketing channel that referred you (so we can measure which campaigns work), each form submission also stores:
- UTM parameters (
utm_source,utm_medium,utm_campaign,utm_term,utm_content) if present in the URL - Google Ads click ID (
gclid) and Meta click ID (fbclid) if present - The page you first landed on and the referring website
- A Google Analytics anonymous client ID (random number, not linked to your name) so we can join analytics behaviour to your inquiry
Analytics (with your consent)
If you accept analytics cookies, we use Google Analytics 4 to collect usage data, including:
- Pages visited, time spent, scroll depth, and page interactions (e.g. which pricing services you toggled, which FAQ you opened, which area page you viewed)
- Coverage checker activity, including the first three characters of the postal code, whether the area is covered, and the matched service region. We never collect the full postal code through this checker.
- Approximate geographic region (city/country level, derived from IP, we set anonymize_ip so the full IP is never stored)
- Device type and browser
- Referral source (e.g. Google search, social media)
You can decline analytics at any time using the controls in section 5 or through your browser settings.
Marketing measurement (with your consent)
If you accept analytics cookies and we have activated paid-ad measurement (Google Ads, Meta Pixel, and/or Microsoft Advertising), we additionally send the following to those platforms so we can measure ad performance and optimise spend:
- Conversion events when you submit a form, click a key call-to-action, or call us. These events include an estimated lead value (in CAD) for ad-bidder optimisation.
- Enhanced Conversions for Google Ads. When you submit a form, your email, phone, and name are hashed (one-way SHA-256) by Google's tag before transmission, then matched against ad-click data on Google's servers. The hashed values are not shared with us back as raw data. You can disable this by rejecting analytics cookies.
- Meta Pixel events. Standard events (
Lead,Schedule,Contact,InitiateCheckout) and a customCalculatorCompleteevent with the estimated quote value. - Microsoft Advertising (UET) tag. Page-visit data so Microsoft can attribute leads to Bing Ads campaigns and measure conversion goals (form submissions, quote requests).
Booking Payments
Online booking requests and payment processing may be handled through secure third-party providers. We do not collect or store your payment card information.
3. How We Use Your Information
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Respond to your inquiry and schedule a shoot | Name, email, phone, property details | Contract / consent |
| Deliver completed photos via private gallery link | Email address | Contract performance |
| Understand how visitors use the website | Analytics events (GA4) with anonymised IP | Consent (cookie opt-in) |
| Measure ad campaign performance and optimise spend | UTM / click-ID parameters, conversion events, hashed contact details for Enhanced Conversions | Consent (cookie opt-in) |
| Comply with applicable law | Any data we hold | Legal obligation |
We do not sell, rent, or trade your personal information to third parties. We do not use your information for automated decision-making or profiling. The ad-platform conversion data above is used only to attribute leads to the campaign that produced them, never to build profiles about you.
4. Third-Party Services
We use the following third-party services. Each has its own privacy policy. Services marked "consent required" do not run unless you accept analytics cookies.
| Service | Purpose | Data Sent |
|---|---|---|
| Google Analytics 4 | Website analytics (consent required) | Page views, event interactions, anonymised IP, device/browser, referrer |
| Google Ads | Conversion measurement and Enhanced Conversions for paid-search campaigns (consent required) | Conversion events with lead value (CAD); hashed email, phone, and name for ad-click matching |
| Meta (Facebook) Pixel | Conversion measurement for paid social campaigns (consent required) | Page views and standard events (Lead, Schedule, Contact, InitiateCheckout) |
| Microsoft Advertising (UET) | Conversion measurement for paid-search campaigns on Bing/Microsoft Ads (consent required) | Page views and conversion-goal events (form submissions, quote requests) |
| Supabase | Form submission storage | Inquiry form data plus attribution fields (UTMs, gclid, fbclid, GA4 client ID, landing page, referrer) |
| Formspree | Email delivery of form submissions | Inquiry form data including attribution fields |
| Secure payment processor | Online booking & payment processing | Booking details & payment information |
| Google Fonts | Typography (served from Google CDN) | IP address (standard web request) |
5. Cookies and Local Storage
Cookies are small text files stored on your device when you visit a website. Some browser storage works the same way without using a cookie (for example, localStorage), and both are covered here.
Our site sets a small set of cookies and uses your browser's local storage: one item to remember your consent choice, one to remember which campaign brought you here, and, only after you accept, Google Analytics, Google Ads, Meta Pixel, and Microsoft Advertising items used to measure how the site performs. We do not use cookies to build profiles about you across unrelated websites, and we do not sell your data to third parties.
What we use
| Name | Provider | Purpose | Duration |
|---|---|---|---|
cpp_cookie_consent |
This site (first-party cookie + localStorage) | Stores your cookie preference (accepted/declined). Always on. | 180 days |
cpp_attribution |
This site (localStorage only, no cookie) | Remembers which campaign brought you here (UTM parameters, gclid, fbclid, landing page, referrer) so we can attribute later inquiries to the right campaign. Always on (no personal data). |
90 days |
_ga, _ga_* |
Google Analytics 4 | Distinguish unique visitors and sessions | 2 years (consent required) |
_gcl_au, _gcl_* |
Google Ads | Measure ad clicks and conversions (consent required) | 90 days |
_fbp |
Meta (Facebook) Pixel | Distinguish unique visitors for ad conversion measurement (consent required) | 90 days |
_uetsid, _uetvid |
Microsoft Advertising (UET) | Distinguish unique visitors and sessions for ad conversion measurement (consent required) | 16 days to 13 months |
The third-party items above are set by Google, Meta, and Microsoft only after you accept analytics cookies. We also embed Google Fonts, which may set performance cookies as part of serving the typefaces.
URL parameters we read
If you arrive on the site with marketing-attribution parameters in the URL, we read them and store them in your browser's localStorage so a later inquiry can be attributed to the right campaign:
utm_source,utm_medium,utm_campaign,utm_term,utm_contentgclid(Google Ads click identifier)fbclid(Meta click identifier)
These values stay on your device for 90 days. They are not personal information on their own, and they are sent to our backend only when you submit a form.
Your consent choice
On your first visit, a banner asks whether you want to allow analytics cookies. If you decline, no analytics or advertising cookies are set on your device, and Meta Pixel and Microsoft Advertising do not load at all. The Google tag stays in a cookieless, consent-denied mode: it stores nothing on your device and cannot identify you, and only sends anonymous, aggregated signals Google uses to model conversions. Full analytics and advertising cookies, and identified events, are only used after you accept.
Managing cookies in your browser
You can also delete or block cookies through your browser settings. Blocking all cookies may affect how the site functions, but no core content will be hidden.
The cpp_attribution entry is removed automatically after 90 days; you can also clear it by clearing your browser's site data.
6. Data Retention
- Inquiry form data. Retained for as long as needed to fulfil your booking and for up to 2 years for legitimate business records (invoicing, communications), after which it is deleted.
- Analytics data. Coverage checks and other first-party analytics are retained in Supabase for service-demand reporting. Google Analytics data is retained for 14 months, after which it is automatically deleted per our GA4 data retention settings.
- Email correspondence. Retained in our email system for up to 3 years.
7. Your Rights
Under PIPEDA and BC PIPA, you have the right to:
- Access. Request a summary of the personal information we hold about you.
- Correction. Ask us to correct inaccurate or incomplete information.
- Withdrawal of consent. Withdraw your consent to any use of your personal information where consent is the basis for processing. This does not affect the lawfulness of processing before withdrawal.
- Deletion. Request deletion of your personal information, subject to our legal retention obligations.
- Complaint. File a complaint with the Office of the Privacy Commissioner of Canada or the Office of the Information & Privacy Commissioner for BC.
To exercise any of these rights, email us at info@coastalphoto.ca. We will respond within 30 days.
8. Data Security
We take reasonable precautions to protect your personal information. Form data is transmitted over HTTPS and stored on Supabase's encrypted infrastructure. Access to your information is limited to Zaid Taie and the third-party service providers listed above, each of whom is bound by their own privacy and security commitments.
No method of transmission or storage over the internet is 100% secure. If you believe your information has been compromised, please contact us immediately.
9. Children's Privacy
Our services are not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted information through our site, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically. Continued use of the site after changes are posted constitutes acceptance of the updated policy.
11. Contact Us
For any privacy-related questions, requests, or concerns:
- Email: info@coastalphoto.ca
- Phone: (250) 880-3776
- Address: Vancouver, BC, Canada