Privacy policy.
Effective Date: 08/01/2024
Business Name: Gregorio Productions
Location: New Jersey, United States
1. Purpose and Scope
This Privacy Policy (“Policy”) sets forth the practices of [Your Photography Business Name] (“Company,” “we,” “us,” or “our”) regarding the collection, use, storage, disclosure, and protection of personal information in accordance with the New Jersey Data Privacy Act, N.J. Stat. § 56:8-1 et seq. (“NJDPA”) and other applicable federal and state laws. This Policy applies to all personal information collected from clients, prospective clients, website users, and individuals photographed or otherwise identifiable in media created by the Company.
2. Categories of Personal Information Collected
The Company may collect and process the following categories of personal information:
Identifiers: Name, postal address, email address, telephone number, and similar contact information.
Commercial Information: Records of services purchased, obtained, or considered, including booking details and transaction history.
Payment Information: Billing details and payment confirmations, processed exclusively through secure third-party vendors (the Company does not retain complete credit card numbers).
Biometric or Visual Data: Photographs, videos, likeness, and related metadata.
Internet or Technical Data: IP address, browser type, device information, and website interaction data.
Other Information: Notes or instructions provided in connection with photography services.
3. Purpose of Collection and Use of Personal Information
The Company may use personal information for the following purposes:
To perform and deliver contracted photography services.
To communicate with clients regarding bookings, services, or inquiries.
To edit, process, deliver, and archive photographs.
To process payments and issue invoices, receipts, or refunds.
To market services or display portfolio work, subject to written client consent or contractual terms.
To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
To protect the rights, property, or safety of the Company, its clients, or the public.
4. Disclosure of Personal Information
The Company does not sell personal information. Personal information may be disclosed only under the following circumstances:
Service Providers: To vendors or subcontractors providing printing, album design, editing, storage, or payment processing.
Legal Compliance: To law enforcement, courts, or regulatory authorities when required by applicable law.
Business Transfers: In connection with a merger, acquisition, or transfer of assets, provided that the recipient is subject to confidentiality obligations.
5. Data Subject Rights Under the NJDPA
Pursuant to the NJDPA, individuals whose personal information is collected by the Company have the following rights:
Right to Access: To obtain confirmation as to whether personal data concerning them is being processed and to access such data.
Right to Correction: To request rectification of inaccurate personal data.
Right to Deletion: To request erasure of personal data, subject to legal and contractual retention requirements.
Right to Data Portability: To receive personal data in a structured, commonly used, and machine-readable format.
Right to Opt-Out: To decline the processing of personal data for targeted advertising, sale, or profiling. (Note: The Company does not engage in the sale of personal data.)
Requests to exercise these rights must be submitted in writing to the contact information provided in Section 10. The Company will verify and respond in accordance with statutory timelines.
6. Data Retention
The Company retains personal information only as long as necessary to fulfill contractual obligations, maintain business and legal records, and comply with applicable law. Photographs and related media may be archived indefinitely unless otherwise agreed upon in writing.
7. Data Security
The Company implements commercially reasonable technical, administrative, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure, and the Company cannot guarantee absolute security.
8. Children’s Privacy
The Company does not knowingly collect personal information from children under the age of 13 without verifiable parental consent. If such information is inadvertently collected, it will be promptly deleted upon discovery.
9. Amendments to Policy
The Company reserves the right to amend this Policy at any time to reflect changes in legal requirements, business practices, or technological advances. Material changes will be posted on the Company’s website and will be effective as of the updated Effective Date.
10. Contact Information
For questions regarding this Policy or to exercise any rights afforded under the NJDPA, please contact:
Gregorio Productions
Email: contact@gregorioproductions.com
Phone: (609) 579-9341