Legal

Privacy Policy

Last updated: March 2026

Your family's privacy matters to us. This policy explains what information we collect when you book a session or visit our website, how we use it, and the choices you have. We photograph babies and toddlers, so we take our responsibility to protect children's information seriously.

Who We Are

Cake Smash Photography is operated by TK Photography Chicago. We are a Chicago-based photography studio specializing in cake smash sessions for children around their first birthday.


Information We Collect

When you book a session, we collect:

When you contact us or sign up for our email list, we collect:

When you visit our website, we automatically collect:

We do not collect sensitive personal information such as Social Security numbers, government ID numbers, or financial account details beyond what is necessary to process payment.


Children's Privacy (COPPA Compliance)

We photograph minors. All bookings, consents, and communications must be made by a parent or legal guardian. We do not knowingly collect personal information directly from children under 13.

When you book a session for your child, you are confirming that you are the parent or legal guardian and that you have the authority to consent on your child's behalf — including consent for how photographs may be used as described in this policy and in your session agreement.

If you believe we have inadvertently received information from or about a child without proper parental consent, please contact us immediately at [email protected] and we will delete it promptly.


How We Use Your Information

We use the information we collect to:


Photo Usage Rights

The photographs taken during your session are owned by TK Photography. Unless you have specifically requested a private session with no portfolio use, the following applies:

With your consent (provided in your session agreement), we may use select photographs from your session for:

We will never sell your child's photos to third parties. We will never use photos in contexts that could be harmful or embarrassing to your family.

If you prefer privacy, you may request a no-portfolio session at the time of booking. There may be an additional fee for this option. You may also contact us after your session to request that specific images be removed from our public use.


Cookies and Analytics

Our website uses cookies — small text files stored on your device — to help us understand how visitors use the site and to improve your experience.

Essential cookies are required for the website to function. They cannot be turned off.

Analytics cookies are provided by Google Analytics 4 (GA4). These help us understand which pages are popular, how people find our site, and how we can improve. The data is aggregated and anonymous — we cannot identify individual visitors.

You can opt out of analytics tracking by:

For full details, see our Cookie Policy.


Third-Party Services

We use the following third-party services, each with their own privacy practices:

We choose service providers carefully and do not sell, rent, or share your personal information with third parties for their own marketing purposes.


Data Retention

We keep your booking information and session records for up to 5 years after your last session. This helps us provide continuity of service if you return for a sibling session or future milestone. After this period, your personal data is deleted or anonymized.

Photos from your session are retained in our archive indefinitely unless you request deletion. Gallery delivery links typically expire after 90 days — please download your photos promptly.


Your Rights

You have the right to:

California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

To exercise any of these rights, contact us at [email protected]. We will respond within 45 days.


Data Security

We take reasonable measures to protect your information from unauthorized access, disclosure, or loss. Our website uses HTTPS encryption. Payment processing is handled by PCI-compliant third-party providers. That said, no system is 100% secure — please contact us immediately if you have any security concerns.


Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify active clients by email. Continued use of our website or services after changes take effect constitutes acceptance of the updated policy.


Contact Us

For any questions about this Privacy Policy, to exercise your rights, or to make a privacy-related request, please contact us: