At Lynx Studios, located in Nakusp, BC, Canada, we are committed to protecting the privacy of our clients in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you interact with our services, including our website https://www.lynxstudios.ca, client galleries hosted on platforms like GotPhoto, photo shoots, and online sales of prints and digital downloads. By using our services, you consent to the practices described in this policy.
If you have questions or wish to exercise your privacy rights, contact our Privacy Officer at contact@lynxstudios.ca or Nakusp, BC, Canada.
1. Personal Information We Collect
We collect personal information that you provide directly or that is generated through your use of our services. This includes:
- Contact and Identification Information: Name, email address, phone number, mailing address, and billing details (e.g., for ordering prints).
- Photo-Related Data: Images and metadata from photo shoots, which may include identifiable details like faces, locations, or events (e.g., school photos, graduations, sports events).
- Account and Order Information: Login credentials, purchase history, preferences, and payment information (processed securely via third-party providers like Stripe).
- Usage Data: Automatically collected data such as IP address, browser type, device information, pages visited, and time spent on our site or galleries.
- Marketing and Communication Data: Subscription preferences for newsletters or promotional emails.
- Children's Information: For school or family photography, we may collect minors' names and images with parental/guardian consent.
We do not collect sensitive personal information (e.g., health data) unless directly relevant and with explicit consent.
2. How We Collect Your Information
- Directly from You: When you book a shoot, create an account, access a gallery via QR code, place an order, or contact us.
- Automatically: Through cookies, analytics tools (e.g., Google Analytics), and our platform partners like GotPhoto.
- From Third Parties: Such as schools providing student lists for group shoots, or payment processors.
For a list of tools and services integrated with our online shop (e.g., via GotPhoto), including data they process, see below under "Third-Party Sharing."
3. Purposes for Collecting and Using Your Information
We collect and use your personal information for legitimate business purposes, including:
- Providing services: Managing photo shoots, creating and sharing galleries, processing orders, and fulfilling print requests (which we handle in-house).
- Communication: Sending confirmations, updates, or marketing materials (with opt-out options).
- Improving Services: Analyzing usage to enhance our website and galleries.
- Legal Compliance: Complying with laws, preventing fraud, or responding to legal requests.
- With Your Consent: For any other purpose disclosed at the time of collection.
We limit collection to what is necessary and obtain your consent where required (e.g., explicit for marketing or children's data).
4. Disclosure of Your Personal Information
We do not sell your personal information. We may share it with:
- Service Providers: Third-party tools for hosting galleries (e.g., GotPhoto), payments (e.g., Stripe), analytics (e.g., Google), and marketing (e.g., Mailchimp). These providers are bound by confidentiality and process data only on our behalf.
- Business Partners: For joint events (e.g., schools for student photos), with your consent.
- Legal Authorities: If required by law, such as under a court order.
- Successors: In the event of a business sale or merger.
Specific GotPhoto-integrated tools include:
- Google Analytics: Processes usage data (IP addresses, browsing behavior).
- Stripe: Handles payment data (credit card details, encrypted).
- AWS: Stores photos and data securely.
- Other: See full list at [link to GotPhoto's tools document: https://docs.google.com/document/d/e/2PACX-1vQckNl3bfyOyqMlDQHmQSYsMWNEyehtifQclNqMBS4Ma4Cw8PkB3y30yBVy92GHPQ/pub].
International transfers (e.g., to U.S.-based servers) are protected by safeguards like standard contractual clauses.
5. Retention of Your Personal Information
We retain your information only as long as necessary for the purposes outlined (e.g., 7 years for financial records per tax laws) or as required by law. After that, it is securely deleted or anonymized.
6. Safeguarding Your Information
We use industry-standard security measures, including encryption, firewalls, access controls, and regular audits, to protect against unauthorized access, loss, or breach. However, no system is infallible. In case of a breach posing real risk of harm, we will notify you and the Office of the Privacy Commissioner of Canada as required by PIPEDA.
7. Your Privacy Rights Under PIPEDA
You have the right to:
- Access, correct, or update your personal information.
- Withdraw consent (where applicable), though this may limit services.
- Request deletion (subject to legal retention requirements).
- Complain to us or the Privacy Commissioner if you believe your rights are violated.
To exercise these, contact our Privacy Officer. We respond within 30 days, free of charge (unless excessive).
8. Cookies and Tracking Technologies
We use cookies for functionality (e.g., session management) and analytics. You can manage preferences via your browser. For details, see our Cookie Policy [link if separate].
9. Children's Privacy
For services involving minors (e.g., school photos), we require parental/guardian consent. We do not knowingly collect data from children under 13 without it.
10. Changes to This Policy
We may update this policy periodically. Changes will be posted here with the updated date. Continued use constitutes acceptance.
This policy complies with PIPEDA's 10 principles (e.g., accountability, consent, safeguards). For more on PIPEDA, visit the Office of the Privacy Commissioner of Canada.