Privacy Policy 

1. Introduction
Graduation Photography (“we,” “our,” or “us”) is committed to safeguarding the privacy of individuals and ensuring the security of personal information. We adhere to the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) when handling personal data.

This Privacy Policy outlines how we collect, use, store, and disclose personal information in the course of providing our services.

2. What Personal Information We Collect 

We may collect the following types of personal information:

• Full name of the graduate
• Contact details (email, phone number)
• Student ID
• Date of Birth (if required)
• Selected photography packages or services (if required)
• Payment details (if applicable)

3. How We Use Personal Information Personal information is used for the following purposes

• Facilitating event registration and participation
• Confirming bookings and providing updates
• Processing payments securely via Stripe (Stripe Privacy Policy)
• Generating official graduation-related documentation

We do not sell or use your personal information for unrelated marketing purposes without your consent. Consent is obtained through explicit agreement, such as opt-in checkboxes or direct confirmation during the registration process.

4. Storage and Security of Personal Information 

We implement stringent security measures to protect personal data from unauthorized access, misuse, loss, or disclosure. These include:

4.1 System Security Measures

• Encryption of the registration portal to protect personal data
• Restricted access to stored information, limited to authorized personnel
• Implementation of firewalls and intrusion detection systems

4.2 Payment Security

• Payments are processed through Stripe, Paypal, ANZ eGate a PCI DSS Level 1 certified provider, ensuring secure transactions

4.3 Additional Security Measures

• Regular security audits and continuous system monitoring
• Multi-factor authentication for access control
• Secure data backups and comprehensive recovery procedures
• SSL/TLS encryption for secure data transmission
• Adherence to the Australian Privacy Act and APPs
• Regular penetration testing and vulnerability assessments

5. Disclosure of Personal Information 

We may share personal data with:

• Your educational institution for verification purposes
• Third-party service providers (e.g., payment processors, IT support)
• Government authorities where legally required

All third parties handling data are obligated to maintain stringent privacy and security standards. We do not sell or rent your personal information to external parties

6. Access and Correction You have the right to:

• Request access to the personal data we hold about you
• Request corrections to any inaccurate or incomplete information

To make a request, please contact us at info@graduationphotography.com.au. Requests will be processed within a reasonable timeframe.

7. Retention and Disposal 

We retain personal data collected through our Graduation Registration Portal for up to thirty (30) days after the Graduation Photography. After this period:

• Data is permanently removed from our servers and all associated backups
• Any stored information is securely deleted or anonymised to prevent unauthorized access

Data may only be retained beyond this time-frame if required for legal or regulatory obligations.

8. Complaints and Contact Information 

For any privacy-related concerns, please contact us:

Graduation Photography
info@graduationphotography.com.au
02 9804 7777
1004 Victoria Road, West Ryde, NSW 2160

We will respond to complaints as promptly as possible, typically within 10 business days, in compliance with privacy regulations.

9. Policy Updates 

This Privacy Policy may be updated periodically. Any changes will be published on our website, and we encourage you to review this policy regularly.