Privacy Policy

Use of Personal Information

Personally identifiable data is strictly for: 

 

Processing and delivering photo orders.

Managing order details and customer service inquiries.

 

How Is your Information handled?

 

Customer Payments

Payments are processed through Direct Deposit into Elaine Harriott All Point Photography business account. All Point Photography does not store or access customer payment information. 

 

Data Storage & Security

Elaine Harriott All Point Photography securely stores student, customer, and guardian information within Australia, accessible only by Elaine Harriott. 

 

All customer data and photographs are stored on a Hard Drive - NOT on any servers and therefore cannot be accessed via hacking or externally.

 

Image and Data Retention

Images are stored indefinitely by number (not child's name) for parental access.
Images are stored for 12 months and then permanently deleted.

Elaine Harriott All Point Photography is compliant with NSW privacy laws and the State Records Act 1998.
 

Parents request to access a digital version of their child's image by providing a number code corresponding to their child's image folder. Children names are never requested for retrieval of images.

 

Use of Student Images and Data

Elaine Harriott All Point Photography does not use images or data collected from schools, parents, or students without explicit written consent from: 

 

Schools – Authorised by a designated school representative.

Parents – Only the data owner may grant permission.

Students – The legal guardian, or the student if aged 18+.

Accessing Digital Images
Parents request to access a digital version of their child's image by providing a number code corresponding to their child's image folder. Children names are never requested for retrieval of images.

Digital images are sent via Dropbox Download to their nominated email address.
Dropbox protects your data using encryption, two-factor authentication, and advanced sharing controls. Key features include 256-bit AES encryption for files at rest, SSL/TLS tunnels for data in transit, and granular link permissions. [1, 2, 3]

Sent Dropbox folders are permanently deleted within two weeks (14 days).