This Privacy Policy explains how this photography studio (the “Studio” — the name, ABN and contact details in the website footer) collects and handles personal information through this website, the client portal, and related studio work.
We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth) where they apply to us. This page is information about our practices, not legal advice.
What we collect
We only ask for what we need:
- Contact form: your name, email address, an optional phone number, and your message. Phone is optional.
- If you tick that the message is a request to access or delete personal information, we treat it as a privacy request.
- Client portal accounts are created by the Studio (there is no public sign-up): your name, username, a hashed password, optional email, and the private photographs we deliver to you.
- Bookings and invoices: job details, quotes, invoices, payments, and — for business customers — business name, ABN and billing address, which Australian tax invoicing can require.
- Technical data: a session cookie so the site works, a security cookie on forms, Cloudflare Turnstile to reduce spam, and optional Google Analytics cookies only if you accept analytics in the cookie banner.
Why we collect it
To reply to enquiries, deliver private galleries, issue invoices, keep records the law requires, and — only if you consent — understand how the public website is used.
We do not use the contact form to add you to a marketing list, and we do not sell personal information.
Who we share it with
We use service providers who process information for us:
- Website hosting and photograph storage (including Cloudflare R2 when that storage is configured)
- Email delivery so we can notify the Studio of an enquiry and send you a short confirmation
- Cloudflare Turnstile, which checks that a form was submitted by a person
- Google Analytics 4, only after you accept analytics cookies
- Video platforms (YouTube, Vimeo, Instagram, Facebook, TikTok and similar) only if you play an embedded video — those players are not loaded for analytics on their own
We do not take card payments on this website. Payment methods (PayID, transfer, cash, and so on) are recorded by the Studio when a payment is made.
Some providers store or access information outside Australia. We use them only where it is necessary to run the site or deliver the service.
How long we keep it
- Enquiry messages: while they are useful for your booking, then for a reasonable period.
- Client photographs: while your gallery is active and as needed to provide the service you booked.
- Invoices and payment records: at least five years, which Australian tax law requires. We cannot delete those records while we are legally required to keep them.
- Analytics: according to Google’s retention settings, and only if you consented.
Access, correction and deletion
You can ask for a copy of the personal information we hold about you, to correct it, or to delete it (except records we must keep). Use the contact form and tick the privacy-request box, or email the address in the footer. We will respond within a reasonable time.
Portal accounts are created by the Studio. There is no self-service “delete account” button because galleries, jobs and invoices are studio records (including tax records). Ask us and we will close portal access and remove personal details we are not required to retain.
Children
This website is not directed at children and we do not create portal accounts for children. Enquiries about family or child portraits are made by a parent or guardian.
Complaints
Contact us first using the details in the footer. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC): https://www.oaic.gov.au/
The public Cookie Policy explains cookies and similar technologies in more detail.