I run websites w/ photos of people on them (a hospital and a DAR chapter). One of our SOPs is that in order to have a picture of someone on a website, they need to sign a "media release". Basically just saying, "yes, please put my photo up." This way, if anyone complains, bitches about "invasion of privacy" or whatever chickie-boo was barking about, you can turn your palms skyward and say, "Hey, the people gave me permission and that's that."
Plus, only the person(s) who signed it can have it taken down.
I think the "we" in that nasty gram was actually "she".
It isn't hard if you have a standardized form and I've found out that it solves a lot of problems before they start. In the case of the hospital website, it's literally a federal law that media releases must be confirmed before putting up photos.
You were much nicer to chickie-boo than I would have been. The best I could have done was blow her off and block her email.
Adrienne