Privacy Policy

Effective Date: [EFFECTIVE DATE]
Last Updated: [LAST UPDATED]

Important: Complete every bracketed placeholder before publishing this document. Also verify that the sections addressing cookies, analytics, Global Privacy Control, and advertising match your actual implementation before you post this Privacy Policy.

This Privacy Policy explains how [LEGAL ENTITY NAME], doing business as order.pics ("order.pics," "we," "us," or "our"), collects, uses, discloses, and otherwise processes personal information in connection with the order.pics websites, applications, hosted galleries, storefront tools, order flows, and related services (collectively, the "Service").

1. Scope

This Privacy Policy applies to personal information we process when you visit or use the Service as a photographer, buyer, gallery invitee, or visitor; communicate with us; or otherwise interact with the Service.

This Privacy Policy does not apply to:

• personal information processed by photographers outside the Service;
• third-party websites, payment providers, labs, or services that have their own privacy notices; or
• information that has been de-identified or aggregated so that it can no longer reasonably be linked to an individual.

2. Our Role and the Photographer's Role

order.pics operates a platform used by independent photographers to run their own storefronts and fulfill their own orders.

Depending on the context, order.pics may process personal information:

• for its own business purposes, such as account administration, billing, authentication, support, analytics, abuse prevention, security, legal compliance, and platform improvement; and/or
• on behalf of photographers, such as when we host a photographer's storefront or gallery, transmit order details, deliver downloads, or send operational emails relating to a photographer's orders.

In many cases, the photographer decides what buyer information to request, what gallery settings to enable, what products to offer, and how long to retain content. In those cases, the photographer may be the business or controller for that information, and order.pics acts as a service provider or processor to the extent required by law.

If you are a buyer or gallery user and your request relates primarily to an order, gallery, or storefront operated by a particular photographer, we may direct you to that photographer or forward your request to the photographer so it can be handled appropriately.

3. Personal Information We Collect

We collect the following categories of personal information, depending on how you use the Service.

3.1 Information You Provide Directly

From photographers and account holders

• name, business name, username, account credentials, profile information, and contact details;
• billing contact information;
• storefront settings, pricing, policies, tax settings, delivery preferences, and related business data;
• support requests, communications, and feedback.

From buyers and gallery users

• name, email address, phone number, billing and shipping information, and other contact information submitted during checkout, inquiry, booking, or gallery access;
• order details, selections, notes, download requests, favorites, or other information submitted through the Service;
• communications with photographers or with us through the Service.

Content you upload or submit

• photographs, videos, captions, tags, album names, logos, designs, comments, messages, and metadata;
• records of downloads, shares, approvals, and other gallery or order activity.

3.2 Information Collected Automatically

When you use the Service, we and our service providers may automatically collect:

• IP address;
• device identifiers and approximate location derived from IP;
• browser type, operating system, referring URLs, pages viewed, clicks, timestamps, and session information;
• log data, diagnostic data, and security event data;
• cookie data, local storage data, and similar technology data, subject to your browser settings and applicable law.

3.3 Information from Other Sources

We may receive information from:

• payment processors and billing providers;
• photographers, buyers, schools, venues, or other persons interacting through the Service;
• service providers that help with authentication, fraud prevention, hosting, analytics, communications, or support;
• rights holders, complainants, law enforcement, or other persons who submit reports or legal requests to us.

4. How We Use Personal Information

We use personal information for the following business and commercial purposes:

• to provide, operate, and maintain the Service;
• to create and administer accounts, storefronts, galleries, and access credentials;
• to process orders, transmit order information, facilitate fulfillment, and send transactional or service-related communications;
• to process subscriptions, invoices, and platform billing;
• to authenticate users and secure the Service;
• to detect, investigate, prevent, and address fraud, abuse, chargebacks, copyright claims, privacy complaints, security incidents, and other harmful or unlawful activity;
• to respond to inquiries, provide customer support, and communicate about the Service;
• to enforce our agreements, policies, and legal rights;
• to comply with legal obligations, court orders, lawful requests, tax requirements, and industry standards;
• to analyze usage trends, troubleshoot, test, improve, and develop the Service;
• to create aggregated or de-identified information for lawful business purposes; and
• where authorized, to market the Service using limited business information, logos, testimonials, or content that a photographer has separately authorized for promotional use.

5. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients:

5.1 Photographers and Their Authorized Users

If you are a buyer or gallery user, we disclose information to the photographer whose storefront or gallery you are using, and to that photographer's authorized team members or service providers, as necessary for the photographer to provide services, fulfill orders, respond to inquiries, manage disputes, and comply with law.

5.2 Buyers and Recipients

If you are a photographer, we may disclose information you choose to make available through your storefront or gallery to buyers, invitees, or other persons you authorize to access the relevant content or transaction.

5.3 Service Providers and Contractors

We disclose information to vendors and service providers that perform services for us, such as hosting, cloud storage, content delivery, authentication, billing, payment processing, customer support, email delivery, fraud prevention, professional services, security monitoring, and any analytics or performance tools actually enabled on the Service.

5.4 Payment Processors and Financial Institutions

When a payment is initiated, relevant payment and transaction information is disclosed to the applicable payment processor and other financial institutions involved in the transaction.

5.5 Legal, Safety, and Compliance Recipients

We may disclose information to courts, regulators, law enforcement, rights holders, insurers, auditors, advisors, or other parties when we believe disclosure is reasonably necessary to:

• comply with law or legal process;
• enforce our agreements or protect our rights;
• investigate or prevent fraud, abuse, infringement, or safety issues;
• protect the rights, property, privacy, or safety of order.pics, our users, or others.

5.6 Corporate Transaction Recipients

We may disclose information in connection with a merger, acquisition, financing, bankruptcy, reorganization, sale of assets, or similar corporate transaction.

5.7 With Your Direction or Consent

We may disclose information to other parties when you direct us to do so or otherwise consent.

6. Public, Shared, and Restricted Content

The Service allows photographers to choose whether a gallery or storefront is public, password-protected, invite-only, or otherwise access-restricted. Information and content made public or shared through a gallery, link, or download flow may be accessible to the persons with whom it is shared and may be copied or further distributed by them. Please use care when deciding what to upload and how to configure access.

7. Payments

Payments made through the Service are processed by independent third-party payment providers. order.pics does not store full payment card numbers. Payment processors receive the information necessary to authorize, process, and settle transactions and may use that information according to their own privacy notices and legal obligations.

8. Cookies, Similar Technologies, and Analytics

The Service uses cookies, similar storage technologies, and server or application logs that are reasonably necessary to operate, secure, and maintain the Service, such as to keep users signed in, remember preferences, route traffic, prevent abuse, and troubleshoot errors.

Depending on the features you use and the tools actually enabled on the Service, order.pics and its service providers may also use limited analytics, performance-monitoring, or fraud-prevention technologies to understand reliability and general usage patterns and to improve the Service.

This section is not intended to suggest that the Service uses advertising cookies, cross-context behavioral advertising pixels, session-replay tools, or mobile SDKs unless and until those tools are actually deployed and disclosed through an updated privacy notice and, where required, an appropriate cookie banner, consent flow, or opt-out mechanism.

You can adjust certain browser or device settings to limit cookies or similar technologies, but blocking some technologies may affect Service functionality.

Do Not Track and Global Privacy Control. Some browsers offer a "Do Not Track" setting, and some browsers or extensions send a Global Privacy Control ("GPC") signal. The Service may not respond to all "Do Not Track" signals. Where required by applicable law, we will treat a valid GPC signal as a request to opt out of certain processing for the browser or device that sent the signal.

9. Sale, Sharing, and Targeted Advertising

order.pics does not sell personal information for money.

order.pics does not knowingly engage in cross-context behavioral advertising using personal information collected through the Service. If our practices change in a way that triggers opt-out rights under applicable law, we will update this Privacy Policy and provide any required notices, choices, or opt-out mechanisms.

10. Images of Minors and Other Sensitive Content

The Service may host photographs or limited information relating to minors because photographers may provide family, school, sports, or youth-event photography. We do not knowingly permit children to create photographer accounts, and any transaction requiring a binding agreement or payment authorization should be completed by a parent, guardian, or other adult authorized to contract.

Photographers are responsible for obtaining all notices, consents, releases, and other permissions required to capture, upload, sell, share, or otherwise use photographs or personal information relating to minors or other sensitive subjects.

If you are a parent, guardian, school, venue, or rights holder and believe a photographer uploaded content involving a minor or other sensitive material without proper authorization or in violation of law, contact us at [PRIVACY EMAIL] or [SUPPORT EMAIL]. We may remove content, request documentation, restrict access, or take other action as appropriate.

The Service is not designed to identify people using face recognition or to collect biometric identifiers. If we introduce a feature that does so, we will provide additional notice as required by law.

11. Data Retention

We retain personal information for as long as reasonably necessary to provide the Service, fulfill transactions, maintain business and legal records, resolve disputes, enforce agreements, detect and prevent abuse, and comply with law.

Retention periods vary depending on the category of information, the context in which it was collected, our role in processing it, and legal or operational requirements. In general:

• account and business profile information is retained while the account remains active and for a reasonable period afterward;
• order, billing, tax, chargeback, fraud, audit, and legal-compliance records may be retained for the period reasonably necessary to satisfy accounting, tax, payment-network, contractual, dispute, and legal obligations, which may extend several years after the relevant transaction;
• support communications may be retained for as long as reasonably necessary to respond to the issue, maintain records of support activity, improve support operations, or defend against claims;
• logs, security records, and diagnostic data are typically retained only as long as reasonably necessary for security, fraud prevention, troubleshooting, performance monitoring, and system integrity;
• hosted photos and gallery content are generally retained until deleted by the photographer or until the associated account is closed, after which they are removed from active systems within a commercially reasonable period and from backup systems in the ordinary backup cycle, unless we need to retain them for legal, security, dispute, or abuse-prevention reasons.

12. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no system is completely secure, and we cannot guarantee absolute security. You are responsible for protecting your account credentials and for promptly notifying us of any suspected unauthorized access or misuse.

13. International Data Transfers

order.pics is based in the United States, and we and our service providers may process and store information in the United States and other jurisdictions where we or our providers operate. By using the Service, you understand that your information may be transferred to and processed in countries that may have data-protection laws different from those of your jurisdiction.

14. Your Rights and Choices

Depending on where you live and the nature of our role in processing your information, you may have rights under applicable law, such as the right to:

• know whether we process your personal information and access a copy of it;
• correct inaccurate personal information;
• delete personal information;
• receive a portable copy of certain personal information;
• opt out of the sale or sharing of personal information, targeted advertising, or certain profiling;
• limit certain uses of sensitive personal information where applicable; and
• appeal the denial of a privacy request where applicable law provides that right.

14.1 How to Exercise Your Rights

To submit a privacy request, contact us at [PRIVACY EMAIL]. We may need to verify your identity and authority before fulfilling a request. We may deny a request where permitted by law, such as when an exception applies, when we cannot verify the request, or when we act only as a service provider or processor for a photographer.

If your request primarily concerns an order, gallery, or storefront operated by a photographer, we may direct you to the relevant photographer or forward your request so the photographer can respond.

14.2 Authorized Agents

If applicable law allows you to use an authorized agent, we may require proof of the agent's authority and may still ask you to verify your identity directly.

14.3 Communications Preferences

You may opt out of non-essential promotional emails from us by using the unsubscribe link in those emails. You cannot opt out of service-related or transactional communications that are necessary for the Service, security, billing, or your transactions.

14.4 Non-Discrimination

We will not discriminate against you for exercising privacy rights granted by applicable law.

15. Third-Party Services

The Service may contain links to or integrations with third-party websites, applications, or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy notices before providing information to them.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date and, where required by law, provide additional notice. Any updated Privacy Policy becomes effective when posted unless a later date is stated.

17. Contact Us

If you have questions or requests about this Privacy Policy or our privacy practices, contact:

[LEGAL ENTITY NAME]
[NOTICE ADDRESS]
[PRIVACY EMAIL]
[SUPPORT EMAIL]