1. Information We Collect
We collect information you provide directly to us, as well as data gathered automatically through your use of our website.

• Personal Contact Details: Names, email address, phone number, and physical billing/delivery addresses.
• Booking and Payment Data: Transaction details, session dates, and payment processing information (handled securely by our third-party processors).
• Visual Content: Images captured during our photography sessions and uploaded to your private client gallery.
• Technical Data: IP addresses, browser types, cookies, and website usage data, collected via analytics, advertising, and security tools as outlined in Section 4.
• Sensitive Information: For birth photography clients, session images and related notes may capture health-related circumstances (such as labour or medical intervention). This is treated as sensitive information under the Privacy Act and is only collected, used, or disclosed with your specific, express consent.

2. How We Collect Your Information
We collect data from you when you interact with our business, including when you:

• Fill out a contact, inquiry, or booking form.
• Sign up for our newsletter or marketing updates.
• Purchase digital images or packages through our e-commerce store or at our physical studio.
• Access and use your private client gallery.
• Browse our website (via cookies and similar tracking technologies — see Section 4).

3. How We Use Your Information
We use your personal data to run our business and provide you with a seamless photography experience. This includes:

• Responding to your inquiries and scheduling sessions.
• Fulfilling product orders and delivering digital download galleries.
• Processing secure payments and invoicing.
• Sending important updates regarding your booking or changes.
• Marketing our services, provided you have given us permission to use your images.
• Understanding how visitors use our website and measuring the performance of our marketing, using the analytics and advertising tools described in Section 4.
• Protecting our website against fraud, bots, and malicious traffic.

4. Sharing Your Data with Third Parties
We do not sell your personal data. We only share information with trusted third-party service providers necessary to operate our business, such as:

• Booking & Gallery Platforms: We use VSCO Workspace (formerly Táve) as our client management system, and Calendly to manage session bookings and scheduling.
• Payment Gateways: Secure processors used to handle financial transactions.
• Professional Printing Labs: Labs that receive your address and ordered images to print and ship physical products.
• Analytics & Advertising: We use Google Analytics and Google Ads to understand website usage and measure the performance of our marketing. These services may collect technical data such as your IP address, browser type, and browsing behaviour via cookies.
• Website Security: We use CHEQ, a fraud-prevention and traffic-security tool, to help protect our website from bots and fraudulent activity.
• Legal Obligations: We may disclose data if required by law or to protect our business rights.

Overseas Disclosure
Some of our service providers, including Google and CHEQ, store and process data on servers located outside Australia, including in the United States. Where this occurs, we take reasonable steps to ensure these providers handle your personal information in a manner consistent with the Australian Privacy Principles, but we cannot always guarantee that overseas recipients are bound by the same privacy protections as those under Australian law.

Cookies and Tracking Technologies
Our website uses cookies and similar technologies to operate correctly, understand how visitors use our site, and support our marketing. You can manage or withdraw your cookie preferences at any time via the cookie settings link in our website footer.

5. Data Security and Retention
We implement industry-standard security measures to protect your data from unauthorized access. We retain your personal data and session images only for as long as necessary to fulfill the purposes outlined in this policy, comply with financial and tax obligations (typically 7 years), or maintain your archive as agreed upon in your contract.

6. Your Rights
Under the Privacy Act 1988, you have the right to access, correct, update, or request the deletion of your personal information, and to opt out of marketing communications at any time. To exercise any of these rights, please contact us using the details in Section 8.

If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Website: [oaic.gov.au](https://oaic.gov.au)
Phone: 1300 363 992

7. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

8. Contact Us
If you have any questions about this Privacy Policy, please contact us at:

Email: info@naturalfocus.com.au
Phone: 0414 516 845