Privacy Policy

At StudentPhotos.com, we are committed to protecting the privacy and security of student data. This Privacy Policy explains how we collect, use, store, and protect personal information when you use our Service.

This policy complies with applicable laws in the United Kingdom (UK GDPR, Data Protection Act 2018), the United States (CCPA), and Bahrain (PDPL, Legislative Decree No. 30 of 2018).

By using the Service, you consent to the practices described below.

We collect the following types of personal information to provide and improve the Service:

We use the collected information for the following purposes:

• Service Delivery: Providing access to student photos and videos
• Order Fulfillment: Processing digital downloads and print orders
• Communication: Sending order confirmations and updates
• Security: Protecting against unauthorized access and fraud
• Legal Compliance: Meeting regulatory and legal requirements

We implement industry-standard security measures to protect your data:

• Encryption: All data encrypted in transit and at rest
• Access Controls: Strict access controls and authentication
• AWS Security: Photos stored securely in Amazon S3
• Payment Security: PCI DSS compliant payment processing
• Regular Audits: Security assessments and monitoring

Data is retained for the duration necessary to provide services and comply with legal obligations.

You have the following rights regarding your personal data:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data on delete@studentphotos.com
• Portability: Request transfer of your data

To exercise these rights, contact us using the information provided below.

We do not sell, trade, or rent your personal data. We may share information only in the following circumstances:

• Service Providers: Third-party services that help operate our platform
• Legal Requirements: When required by law or legal process
• Safety: To protect rights, property, or safety of users
• Business Transfer: In case of merger, acquisition, or asset sale

We use cookies and similar technologies to:

• Essential: Enable core functionality of the Service
• Security: Maintain secure sessions and prevent fraud
• Analytics: Understand usage patterns and improve service
• Preferences: Remember your settings and preferences

You can control cookies through your browser settings.

We are committed to protecting children's privacy:

• COPPA Compliance: Adhering to Children's Online Privacy Protection Act
• Parental Consent: Requiring appropriate consent for minors
• Limited Collection: Collecting only necessary information
• Secure Storage: Enhanced security for children's data

We may update this Privacy Policy from time to time: