Privacy policy

Last updated: August 2026


I respect your privacy and take reasonable steps to protect the personal information you share with me. This Privacy Policy explains what personal information I collect, why I collect it, how I use and store it, and the circumstances in which it may be shared with trusted service providers.


1. Information I Collect


When you visit my website, make an enquiry, or book photography services with me, I may collect information such as:

  • your name
  • email address
  • phone number
  • your preferred session or photography service
  • your preferred date or general availability
  • information you choose to provide in an enquiry or contact form
  • information needed to plan, book and provide your photography services
  • information relating to contracts, invoices and payments
  • information you provide when communicating with me about your session or event.


Please avoid including sensitive personal information in general enquiry forms unless it is necessary for your enquiry. I will collect any additional information needed for your photography session at the appropriate stage of the booking process.


2. How I Collect Your Information


I may collect personal information when you:

  • submit an enquiry through my website
  • contact me by email, phone or social media
  • complete a booking form, questionnaire or contract
  • make a payment or receive an invoice
  • communicate with me about your photography session or event.


My website is hosted using Pixieset, which provides website, contact-form, client-management and photography-related services. Information submitted through my website may therefore be collected and processed by Pixieset on my behalf.


Pixieset may also collect technical information such as IP address, browser type, device information and website usage information in connection with operating and securing its services.


3. How I Use Your Information


I use personal information only as reasonably necessary to operate my photography business and provide services to you.


This may include:

  • responding to enquiries
  • checking availability and discussing your photography requirements
  • communicating with you about your session or event
  • preparing contracts and invoices
  • processing payments
  • planning and delivering your photography services
  • delivering photographs and galleries
  • maintaining business and transaction records
  • responding to questions or requests from you
  • complying with legal or accounting requirements
  • protecting the security and integrity of my website, systems and business.


I do not sell your personal information.


I do not use your personal information for unrelated marketing purposes without a lawful basis to do so.


4. Sharing Your Information


I do not sell, rent or trade your personal information.


I may share personal information with trusted third-party service providers where this is reasonably necessary to operate my business and provide services to you.


These providers may include services used for:

  • website hosting and contact forms
  • client management
  • contracts and invoices
  • payment processing
  • email and communication
  • photography galleries and image delivery
  • accounting and business administration
  • website security, hosting or analytics.


I use Pixieset for website hosting, contact forms, client management and/or gallery delivery.


These service providers may process personal information on my behalf and are expected to handle it in accordance with applicable privacy and security requirements.


5. Overseas Service Providers


I use third-party service providers to operate my website, manage client galleries and deliver photography services.


Some of these providers, including Pixieset, may store or process personal information outside Australia. Personal information may therefore be transferred to overseas recipients where this is reasonably necessary to provide the services I use.


I take reasonable steps to use reputable service providers that have appropriate privacy and security measures in place. Where applicable, these providers are required to handle personal information in accordance with their contractual and legal obligations.


Pixieset may use third-party subprocessors to provide its services. Pixieset states that personal information may be transferred, stored or processed in countries other than where the user is located and that it uses mechanisms intended to provide appropriate protection for international data transfers.


6. Photography Images and Marketing


As part of providing photography services, I create photographs that may contain identifiable individuals. Photographs of identifiable people may constitute personal information.


I may use selected photographs from your session to showcase and promote my photography business, including on my website, blog, social media, portfolio, advertising, photography competitions and other promotional materials, where you have provided the appropriate permission or consent.


Your photography agreement will explain how your photographs may be used and will provide you with an opportunity to indicate whether you are happy for your photographs to be used for marketing purposes.


For sessions involving children, I take particular care with the use of children's photographs and obtain permission from a parent or legal guardian where required.


Your decision about whether your photographs may be used for marketing will not affect the photography services you receive from me.


If you later withdraw your permission, I will take reasonable steps to stop using your photographs for future marketing. However, I may not be able to recall or remove material that has already been printed, published, shared or used in completed advertising campaigns.


7. Data Storage and Security


I take reasonable steps to protect personal information from misuse, loss, unauthorised access, modification or disclosure.


Personal information may be stored on password-protected devices and through trusted third-party services that I use to operate my photography business.


I use reasonable security measures such as strong passwords, access controls and, where available, multi-factor authentication.


No method of electronic storage or transmission can be guaranteed to be completely secure. I therefore cannot guarantee absolute security of information transmitted or stored electronically.


8. How Long I Keep Your Information


I retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing services to you, maintaining appropriate business and financial records, resolving disputes and meeting legal or accounting obligations.


When information is no longer reasonably required, I will take reasonable steps to securely delete or de-identify it, where practicable.


Some information may need to be retained for longer periods where required by law or for legitimate business record-keeping purposes.


9. Cookies and Website Analytics


My website and third-party services may use cookies and similar technologies to operate the website, maintain security and understand website usage.


These technologies may collect technical information such as your IP address, browser type, device information and general website activity.


Where third-party analytics or similar services are used, their own privacy policies may also apply.


10. Accessing or Correcting Your Information


You may contact me to request access to personal information I hold about you or to ask me to correct information that is inaccurate or out of date.


You may also request deletion of your personal information where I am not required or permitted to retain it.


To make a request, please contact me using the details below.


11. Privacy Complaints


If you believe I have mishandled your personal information, please contact me so I can investigate and respond to your concerns.


I will take reasonable steps to investigate and resolve privacy complaints within a reasonable period.


If you are not satisfied with my response, you may contact the Office of the Australian Information Commissioner (OAIC).


12. Data Breaches


I take reasonable steps to protect personal information against unauthorised access, loss, misuse or disclosure.


If I become aware of a data breach involving personal information I hold, I will assess and respond to the incident in accordance with applicable privacy laws and take reasonable steps to contain, investigate and address the breach.


Where required by applicable law, I will notify affected individuals and/or the relevant regulator.


If a third-party service provider experiences a data breach affecting information processed on my behalf, I will take reasonable steps to assess the incident and respond appropriately.


13. Changes to This Privacy Policy


I may update this Privacy Policy from time to time to reflect changes to my business, the services I use or applicable privacy requirements.


The most recent version will be published on my website with the updated date shown at the beginning of the policy.


14. Contact


If you have any questions about this Privacy Policy, would like to access or correct your personal information, or wish to make a privacy complaint, please contact me:


Kelly Chapman Photographer

Email: kellygayechapman@gmail.com

Website: kellychapmanphotographer.au