Thank you for choosing Shenu's Studio,
see our privacy policy below
Who We Are
Shenu’s Studio (“we”, “us”) provides newborn, maternity, family, and event photography services in and around Surrey, British Columbia, Canada.
Contact details to include: business name, email, phone, and mailing address so clients know how to reach you for privacy questions.
What we collect
For a photography studio in BC, typical “personal information” includes:
-
Identity and contact: names, phone numbers, email addresses, postal addresses, and emergency contacts (for sessions or events).
-
Session details: session type (newborn, maternity, family, events), dates, locations, names and ages of participants, preferences, and notes you need to deliver the service.
-
Photos and video: images and recordings of clients and their family members, including children and newborns, plus any metadata attached to files (date, time, location if enabled).
-
Booking and payment data: invoices, payment confirmations, partial card data handled via your payment processor, and order history for prints and products.
-
Online and Meta ads data: IP address, device and browser type, pages viewed, form submissions, and interactions with your Meta (Facebook/Instagram) ads, including data from Meta Pixel, Conversions API, and lead forms.
Why and how we use it
For a Canadian photography business, your policy should explain that you only collect what a reasonable person would see as appropriate for photography services and marketing. Typical uses are:
-
Service delivery: booking, planning, shooting, editing, delivering galleries/products, and managing client accounts.
-
Communication: sending quotes, contracts, questionnaires, reminders, galleries, and customer service messages.
-
Marketing and portfolio: using selected images on your website, social media, sample albums, studio displays, ads, and printed materials, but only with appropriate consent, especially for children.
-
Meta advertising: building and refining audiences, tracking conversions (e.g., inquiries, bookings), and measuring the performance of your Meta ads using tools like Meta Pixel and lead forms.
-
Legal and business: bookkeeping, tax obligations, record‑keeping, and protecting your legal rights if there is a dispute.
You should state that you do not sell personal information and that any marketing emails or SMS are sent only with consent and can be opted out of at any time.
Legal basis, consent, and your rights (Canada/BC)
As a Surrey, BC business, you are subject to PIPA (BC) and PIPEDA, which both require you to get meaningful consent and limit collection to what is necessary. Your policy should cover:
-
Consent:
-
Written/checkbox consent in contracts or model releases for image use in portfolio, social media, and advertising, with separate consent for newborn and child images where appropriate.
-
Clear explanation that clients can refuse or later withdraw consent for marketing use of their images (subject to what’s already printed/published).
-
-
Client rights:
-
Access: clients can request to see the personal information you hold (including images) and ask how it has been used or shared.
-
Correction: they can request corrections to inaccurate contact or booking info.
-
Deletion/withdrawal: you explain when you can delete data or stop using images, noting any legal retention obligations or contractual limits.
-
-
How to make a request: provide a clear email or postal address where clients can send privacy requests and a timeframe in which you respond (for example, 30 days, per federal guidance).
Sharing, storage, Meta tools, and retention
To “not miss anything,” your policy should also clearly spell out these operational details:
-
Sharing with third parties:
-
Service providers: online gallery platforms, editing tools, backup and cloud storage, email and CRM tools, payment processors, print labs, and advertising platforms such as Meta.
-
Professional advisors: accountants or legal advisors as needed for business operations.
-
Legal/required disclosures: when required by law or to protect your rights or safety.
-
-
Meta/Facebook and Instagram tools:
-
Use of Meta Pixel and/or Conversions API on your website to track visits, inquiries, and bookings that result from ads, and to build or refine custom/lookalike audiences.
-
Use of Meta lead forms, collecting names, emails, phone numbers, and session interests directly in the ad, and how that information flows into your email/CRM or booking system.
-
Directions to Meta’s own privacy policy and ad preference settings so users can control how Meta uses their data.
-
-
Storage and security:
-
Where files and data are stored (for example, local encrypted drives in Canada plus reputable cloud providers that may store data in or outside Canada).
-
Basic safeguards: password protection, limited access, secure payment processing, and secure sharing of galleries or download links.
-
-
Retention:
-
How long you keep:
-
Client records (contracts, invoices, contact info) for tax and business records (often several years).
-
Master image files for a stated period (for example, 1–5 years) as many Canadian photographers do.
-
-
That once the retention period has passed or the files are no longer needed, they are securely deleted or anonymized.
-
-
Children’s images:
-
Explicit statement that you obtain consent from a parent or legal guardian when photographing newborns and minors and before using those images for portfolio or advertising purposes.
-

