At PhotoKitch, we are committed to protecting the privacy and confidentiality of our clients' personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your data in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA).
1. Accountability
We are responsible for all personal information under our control. We have designated a Privacy Officer to ensure our ongoing compliance.
• Privacy Officer: Joti Kaur
• Contact: [email protected]
2. Identifying Purposes
We collect personal information for the following purposes:
• To communicate with you regarding inquiries and bookings.
• To fulfill contractual obligations (photography services, image delivery, and printing).
• To process payments and maintain financial records.
• To provide password-protected online galleries.
• With your explicit consent, to feature images in our professional portfolio or social media for marketing purposes.
3. Consent
We only collect, use, or disclose your personal information with your knowledge and consent.
• Implied Consent: When you provide your email to receive a quote, we imply consent to contact you regarding that quote.
• Express Consent: For marketing (newsletters) or publishing your wedding photos on our website/social media, we will obtain your explicit express consent (usually via our photography contract).
• You may withdraw your consent at any time by contacting us.
4. Limiting Collection
We only collect the information necessary for your wedding or portrait session. This may include:
• Names, email addresses, and phone numbers.
• Home or billing addresses.
• Event details (locations, dates, timelines).
• Photographic images (which are considered personal information in Canada).
5. Limiting Use, Disclosure, and Retention
We do not use or disclose your information for purposes other than those for which it was collected, except with your consent or as required by law.
• Third Parties: We may share data with trusted service providers (e.g., Tave for CRM, Pic-Time for galleries, or professional print labs). These providers are contractually bound to protect your data.
• Retention: We retain personal information only as long as necessary. Typical client files are kept for 7 years for tax and re-order purposes.
6. Accuracy
We strive to keep your personal information as accurate and up-to-date as necessary for the purposes for which it is used. Please notify us of any changes to your contact information.
7. Safeguards
We protect your personal information with security safeguards appropriate to the sensitivity of the information.
• Digital: We use encrypted cloud storage, secure passwords, and HTTPS on our website.
• Physical: Any physical contracts or hard drives are stored in a secure, monitored location.
8. Openness
This policy is publicly available on our website. We are happy to answer any questions about our data management practices.
9. Individual Access
Upon request, you have the right to access the personal information we hold about you. You may challenge the accuracy and completeness of the information and have it amended as appropriate. We will respond to such requests within 30 days.
10. Challenging Compliance
If you have concerns regarding our compliance with PIPEDA, please contact our Privacy Officer. If we cannot resolve the issue, you may contact the Office of the Privacy Commissioner of Canada.
