PRIVACY POLICY
Effective Date: 1st July 2020
Your Privacy and Elk and Fir Photography Pty Ltd (ABN 25 654 987 872) (collectively and individually referred to as "Elk and Fir Photography", "we", "us" or "our").

WHO WE ARE AND HOW YOU CAN CONTACT US
We are Elk and Fir Photography Pty Ltd and we are based in Queensland, Australia. We are committed to protecting your privacy and respecting and upholding your rights when you use our services. This Privacy Policy applies to the products and/or services we provide on our websites elkandfir.com, elkandfir_boudoir.com, and venturefolkretreat.com.au ("Sites") and our social media channels, and explains how we collect, hold, use and disclose data and comply with the requirements of the Privacy Act 1988 (Cth) and constitutes part of our Website Terms & Conditions. This Privacy Policy does not cover information that you submit on other websites, even if we communicate with you on those sites. For example, if you post something on Instagram, Facebook, Pinterest, Twitter, or YouTube, that information is governed by the privacy policies on those websites, and is not governed by this Privacy Policy.

You can contact us for privacy-related questions by contacting us at: hello@elkandfir.com.

We will only use your personal information in compliance with Australian Privacy Laws (Privacy Act 1988 (Cth)), Australian Privacy Principles and to the extent applicable, with the EU General Data Protection Regulation (GDPR) and any replacement legislation or regulation or guidelines and standards governing the use, storage or transmission of personal data.

OUR ROLE IN YOUR PRIVACY
If you are a customer, subscriber or just a visitor on our Sites, this Privacy Policy will apply to you.

OUR RESPONSIBILITIES
As we are the providers of the products and services on our Sites, we determine how and why your data is processed. We do not sell or rent your details to any third parties. We are committed to protecting your privacy and we want you to know exactly what information is collected and how we use it.

YOUR RESPONSIBILITIES
Please read this Privacy Policy and our Website Terms & Conditions. If you provide us with any data relating to a third party, you confirm that you have the right to authorise us to process that data on your behalf in accordance with this Privacy Policy.

WHEN AND HOW WE COLLECT DATA
From the moment you visit our Sites, we are collecting data, sometimes you might provide this data by completing a form or setting up an account, otherwise we might collect the data automatically. We may also collect data when:
You send us an enquiry form
You complete a questionnaire about your wedding or elopement vision
You subscribe to our newsletter
You make a wedding, elopement, or boudoir photography booking
You register for Venture Folk Retreat workshops or events
You interact with us on social media (@elkandfir, @elkandfir_boudoir, @venturefolkretreat)
You complete any sign-up forms, landing pages or send us a direct message via social media or an email
You participate in events, promotions and giveaways or any request for additional data such as customer surveys
You accept our cookies and other tracking technologies on any device you use to interact with us
You voluntarily submit your data to us for any reason

TYPES OF DATA WE MAY COLLECT
Contact details (name, address, email, mobile number)
Financial information (bank details when you are making a purchase)
Wedding or elopement details (date, location, guest count, vision)
Data about the photography services you purchase
Data about your experience with our Sites and our services
Data relating to your circumstances and such other information that is relevant to the photography services we provide to you
Data relating to your attendance at Venture Folk Retreat workshops or other events held by us
Data that identifies you (your IP address, login, browser type, time zone, browser plugins, geolocation, what operating system and version) - we do not link this with any personal data
Data on how you use our Sites (URL clicks, service views, how long you are on our pages and other actions)

USE AND DISCLOSURE OF YOUR DATA
Under data laws, we are only allowed to use your data for specific reasons and where we have the legal basis to do so.
We will use your data for the purposes it was collected and related purposes which include:
Operating our Sites
Providing you with photography services, information and support
Customer support and creating personalised timelines for your wedding or elopement
Tracking your booking history
Detecting and preventing fraud
Improving our Sites and services
Making your experience on our Sites more efficient and enjoyable
Market research e.g. we may contact you for feedback about our services
Provide you with information about Venture Folk Retreat events, other services or opportunities that may be of interest
Marketing (with your consent)
Monitoring your compliance with our Website Terms and Conditions
We may disclose your data for the purposes it was collected and also:
As required by law subject to our legal obligations
With your explicit consent
Within our business, limited to employees and trusted service providers who have a legitimate interest to access your data in order to provide our photography services
To send you marketing material (with your consent)
To process your participation in any promotions and giveaways (including contacting you if you win, displaying your name online and on our social media platforms)
Share with third parties who are necessary to enable us to provide our photography services to you, subject to appropriate confidentiality and data protection agreements

GOOGLE ANALYTICS
We use Google Analytics functions. You can find out how your data is collected here and there are instructions here on how to opt-out of Google Analytics data tracking.
Our use of Google Analytics may include but is not limited to display advertising and remarketing. You may see our adverts across the internet, this is due to the use of tracking technologies (cookies) to optimise and serve our adverts based on past visits to our Sites.

META INSIGHTS
We use META Insights to track your interaction with our Facebook and Instagram pages, this will allow us to track usage and improve the performance of our pages. We will use META Analytics to better measure, track and understand customer user experience to enable us to improve our photography services that we offer.

CHOOSING NOT TO PROVIDE PERSONAL DATA
You can choose not to provide us with any personal data. However, if you do this, we will not be able to provide you with any photography services, however, you can continue to use our Sites and browse the pages.

MARKETING
We will always let you know before we collect any data from you what the intended use is and if we intend to use it for marketing. You can change your mind about marketing material by opting out by:
contacting us via email (hello@elkandfir.com); or
unsubscribing within the email if you have previously subscribed to our newsletter.

YOUR RIGHTS
You can exercise your rights at any time by contacting us via email at hello@elkandfir.com.

ACCESSING INFORMATION WE HOLD ABOUT YOU
We will provide you with the information within 30 days of your request, unless doing so would adversely affect the rights and freedoms of others. We will tell you if we can't comply with your request and why.

INACCURATE INFORMATION
You can contact us to ask us to correct any information we hold about you that you believe is inaccurate.

THE RIGHT TO BE FORGOTTEN
You have the right to request for your data to be erased. This means we have to delete all information that we hold about you, except to the extent of any information we are required to hold due to our legal obligations.

MAKING A COMPLAINT
If you have any complaints regarding how your data is handled, please contact us via email (hello@elkandfir.com). If you are not satisfied with our response to your complaint you may seek a review by contacting the Office of the Australian Information Commissioner.

SECURITY OF THE DATA WE COLLECT
We maintain reasonable and appropriate physical, electronic and procedural safeguards to help protect your data. This includes:
Password access to accounts
Storing electronic data with reputable third party storage providers who have appropriate security protections
Limit access to personal information to individuals who need to know
Using payment providers who are PCI DSS compliant
We do not store your payment details

WHERE WE STORE DATA
We use service providers based in Australia. If we transfer personal data outside of Australia, we will ensure that your privacy rights are adequately protected.

HOW LONG WE STORE DATA FOR
We will retain your data for as long as it is reasonably necessary for the purposes for which it was collected, and as required by Australian law. If you have booked photography services, we will keep a record for the period necessary to fulfil our invoicing and tax obligations as mandated by Australian tax laws.

THIRD PARTIES WHO ACCESS YOUR DATA
We share data with third parties in the following circumstances:
Our suppliers and service providers working for us e.g. payment processors
Payment processors such as Stripe, PayPal, Xero
Social media and analytics such as Facebook, Instagram and Google for custom audience generation
Other third parties such as Google Meet, and Calendly for processing bookings and communications
Where we have your consent to do so or otherwise where we are legally permitted to do so

AGE OF CONSENT
By using our Sites, you warrant that you are at least the age of majority in your State or Territory of residence.

COOKIES AND HOW TO BLOCK THEM
Our Sites use cookies and similar technologies. You can turn off cookies by activating the setting in your browser. For more information about cookies, visit http://www.allaboutcookies.org.

GOVERNING LAW
This Privacy Policy and your use of our Sites is governed in all respects by the laws of Australia.

UPDATES TO OUR PRIVACY POLICY
Please check our Privacy Policy periodically, as we may update this Privacy Policy from time to time. The current "Effective Date" is prominently displayed at the top of this Privacy Policy.