As a photographer, your lens is focused on what’s happening in front of the camera so the paperwork behind the scenes is often not getting the love it may deserve.
What is a Privacy Policy?
In your business, you are dealing with client information everyday – whether that’s via your website or in person, so it is crucial for you to have a privacy policy in place that explains:
- Types of information you collect,
- How you collect the information;
- How you store the information (and for how long);
- How you will use the information (contacting them, processing payments);
- How clients can access, modify or delete their data;
- How your business will notify clients of any changes to its privacy policy;
- How clients can lodge a complaint if the personal information they provide your business with is mishandled and how your business will deal with complaints; and
- Steps you are taking to protect the information from unapproved use.
By outlining your data protection measures, you can identify potential vulnerabilities and take steps to address them, minimising the risk of data breaches and cyber-attacks. This not only protects your clients' data but also your business reputation.
Legal (and Ethical) Reasons for Privacy Policies
- You are required by law in many countries, including the United States and the European Union, to have a privacy policy if you collect personal information from clients, such as their name, address, and email address.
- In Australia, you are required to have a privacy policy if your photography business turns over more than $3 million annually or if it has a contract with the Australian government.
- It can help build trust with your clients by showing them that you take their privacy seriously. By being transparent about how you handle their data, you can create a positive relationship with them.
- Some clients may require a privacy policy as a condition of doing business with you.
Platforms can impose Rules around Privacy Policies
Both Meta (formerly Facebook) and Google have policies in place that require businesses to have privacy policies if they collect personal information from users through their platforms.
For Meta, their policy requires that apps and websites that use a Meta Login or the Meta SDKs (i.e. software that developers use to find out why people use an app) must have a privacy policy that is easily accessible to users. The policy must also explain what data is collected and how it is used.
Google also requires that apps and websites that use its platform have a privacy policy that is easily accessible to users. The policy should be located on the app, the website's homepage or within the app or website's settings. Additionally, Google's policies also require that apps and websites must disclose what data is being collected and how it is being used.
Foundd Tip: It is important to note that the policies of Meta and Google are subject to change over time, so it is the responsibility of your business to check for updates and comply with the current policies.
What makes a Great Privacy Policy
1. Using plain language
Avoid using legal jargon or technical terms that your clients may not understand. Use simple language that is easy to comprehend.
2. Being specific & transparent
Provide details about the types of personal information you collect, how you will use it, and who you will share it with. Don't hide any information from your clients. Be upfront about everything related to their data. The more specific you are, the more transparent you appear.
3. Complying with data privacy laws in your country or region
If you operate in Australia, you should comply with the Australian Privacy Principles. If you conduct your photography business in the European Union, you must comply with GDPR regulations.
4. Making the policy accessible
Include a link to your privacy policy on your website's homepage, in your email signature and provide a printed copy to clients during their initial consultation with you.
5. Keeping your policy up to date
Your privacy policy should be a living document that you update as required. Here are some instances when you should update your policy:
- When you change your data collection or usage practices.
- When you add or remove third-party vendors or service providers.
- When there are changes to data privacy laws in your country or region.
- When you receive feedback from your clients about your policy.
You should also notify your clients when you update your policy.
In Summary
Having a privacy policy is essential for any photography business. It helps you comply with data privacy laws, minimise the risk of data breaches, and build trust with your clients. When drafting your policy, remember to be transparent, specific, and use plain language. Make your policy easily accessible to your clients and update it regularly to reflect any changes in your data collection or usage practices. By doing so, you can protect your clients' data and your business reputation.
Still unclear on where to start with drafting your privacy policy? Lucky you – we have a privacy policy template especially for photographers.
***Disclaimer. Please read!!***
This article is for general information purposes only and should be used solely as general guidance. It does not and is not intended to represent legal advice or other professional advice.
All rights reserved. © Foundd Legal Pty Ltd
