Privacy Policy

Sam Kroepsch Photography

Effective Date: 1 February 2025

1. Introduction

Sam Kroepsch Photography (“we”, “us”, “our”) is committed to protecting the privacy of individuals and handling personal information in an open and transparent manner.

This Privacy Policy sets out how we collect, hold, use, disclose, and protect personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where applicable, we also take reasonable steps to comply with the General Data Protection Regulation (EU) 2016/679 (GDPR) in respect of individuals located outside Australia.

By accessing our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy.

2. Personal Information Collected

We may collect personal information that is reasonably necessary for the operation of our business, including but not limited to:

(a) identifying and contact information, such as name, email address, telephone number, business name, and any other information voluntarily provided by you when making an enquiry, booking a service, or communicating with us;

(b) information relating to your use of our website, including pages viewed, time spent on pages, referring URLs, device type, and browser information; and

(c) information collected through cookies and similar technologies, as described in section 3 below.

We do not knowingly collect sensitive information unless required by law or with your consent.

3. Cookies and Website Analytics

Our website is hosted on the Squarespace platform and uses cookies and similar technologies to enable core website functionality, analyse website traffic, and improve user experience.

Cookies may collect anonymised or aggregated information such as browser type, operating system, and browsing behaviour. You may adjust your browser settings to refuse or manage cookies; however, doing so may affect the functionality of the website.

4. Use of Personal Information

We collect and use personal information for purposes including:

(a) responding to enquiries and communicating with clients;
(b) processing bookings and providing photography services;
(c) administering client relationships and project delivery;
(d) improving our website, services, and business operations;
(e) sending marketing or promotional communications where you have opted in or where permitted by law; and
(f) complying with legal, regulatory, and professional obligations.

We will not use personal information for purposes unrelated to the above without consent or unless otherwise permitted or required by law.

5. Legal Basis for Processing (GDPR)

Where the GDPR applies, we process personal data on one or more of the following lawful bases:

(a) consent, where required;
(b) contractual necessity, where processing is required to perform a contract or take steps prior to entering a contract;
(c) legitimate interests, where processing is necessary for the operation of our business and does not override your rights and freedoms; or
(d) compliance with a legal obligation.

6. Storage and Security of Personal Information

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.

Personal information may be stored using secure cloud-based systems and access is restricted to authorised persons where reasonably practicable. While we implement appropriate safeguards, no system of data transmission or storage can be guaranteed to be completely secure.

7. Disclosure of Personal Information

We do not sell, rent, or trade personal information.

We may disclose personal information to third parties where reasonably necessary, including:

(a) service providers such as website hosting platforms, email service providers, client management systems, and professional print labs;
(b) professional advisers, including accountants or legal advisers;
(c) government authorities or regulators where required or authorised by law; and
(d) third parties in connection with a business restructure, sale, or transfer, subject to appropriate confidentiality and privacy protections.

8. Overseas Disclosure

Some third-party service providers used in the operation of our business may store or process personal information outside Australia.

Where personal information is disclosed overseas, we take reasonable steps to ensure that the recipient handles the information in a manner consistent with the Australian Privacy Principles or applicable data protection laws, including through contractual arrangements where appropriate.

9. Retention of Personal Information

Personal information is retained only for as long as reasonably necessary to fulfil the purposes for which it was collected, including to comply with legal, accounting, or reporting requirements.

When personal information is no longer required, we take reasonable steps to securely delete or anonymise it.

10. Individual Rights

Subject to applicable laws, you may request:

(a) access to personal information we hold about you;
(b) correction of inaccurate or incomplete personal information;
(c) deletion of personal information, where permitted by law;
(d) restriction or objection to certain processing activities; and
(e) withdrawal of consent where processing is based on consent.

Where the GDPR applies, you may also request data portability.

Requests should be made using the contact details set out in section 14.

11. Privacy Complaints

If you believe that we have breached the Australian Privacy Principles or mishandled personal information, you may contact us in writing using the details below.

We will acknowledge and investigate complaints and endeavour to respond within a reasonable period.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) via www.oaic.gov.au.

12. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and recommend that you review their privacy policies independently.

13. Children

Our services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from children.

14. Amendments

We may amend this Privacy Policy from time to time to reflect changes in legal requirements or business practices. The current version will be published on our website and will apply from the effective date stated above.

15. Contact Details

All privacy-related enquiries, requests, or complaints should be directed to:

Sam Kroepsch Photography
Email: hello@samkimages.com.au
Website: www.samkimages.com.au