Privacy Policy

Last updated: 1 January 2025
Website: dreammoments.co.nz and dreammomentz.co.nz (“Site”)
Business: DreamMomentz Photography (“we”, “us”, “our”)

We provide photography services to families, schools, centres, and community groups. This Privacy Policy explains how we collect, use, store, share, and protect personal information — with a special focus on photo sharing and photo storage.

We comply with the Privacy Act 2020 (NZ) and consider relevant international standards (e.g., GDPR) where they apply.

1) What this policy covers

• Images and videos we capture at school/preschool/class, family, sports, and event sessions.
• Personal information needed to identify, proof, purchase, and deliver images (e.g., names, class/room, unique codes, email addresses, delivery addresses for prints, order details).
• How we share access to proofs and deliver final images securely.
• How we store, retain, and protect information.

This policy sits alongside our Website Terms and any booking/consent forms.

2) Who is responsible

DreamMomentz Photography is the agency responsible for the personal information we process in connection with our services and the Site.

Contact — Email: contact@dreammomentz.co.nz · Phone: 020 400 46898 · Postal: 9 Ring Lane, Newlands, Wellington, New Zealand 6037

3) Consent for school/centre sessions

• Centres/schools are responsible for collecting and recording parent/guardian consent before photo day. We rely on the centre’s confirmation and any restrictions (e.g., no photo/no online).
• If a parent/guardian withdraws consent or requests restricted use, the centre or parent should notify us promptly so we can act (e.g., takedown, restrict access, or exclude from group images where feasible).

4) What we collect

We only collect what we need to provide and improve our services:

Images & session data

• Photos/videos taken on photo day; shoot metadata (date, location, group/class).

Identifiers & delivery details

• Parent/guardian and (where applicable) child name, class/room, unique access codes, email address, optional phone, and delivery address for prints.

Orders & payments

• Order contents, totals, delivery choices, and payment confirmation metadata from our payment provider(s).
• We do not store full card numbers, CVCs, or bank account details — card data is processed by our payment provider (e.g., Stripe/PayPal).

Technical data (site/app use)

• Basic logs (IP, device/browser info, timestamps) to run secure galleries, prevent misuse, and maintain performance.

5) How we use information

• Provide services: capture, edit, proof, sell, and deliver images; fulfil print orders and shipping; provide customer support; reissue links if needed.
• Proof & delivery flows: (see Section 6) manage watermarked proofs by unique code and final delivery by secure emailed link.
• Fundraising reconciliation: where relevant, share totals/participation with the organising centre (no card data).
• Security & compliance: verify identity, prevent misuse/fraud, keep tax records, and comply with law.
• Marketing usage: only with explicit opt-in consent (e.g., model release). You can withdraw at any time.

Legal bases (where applicable): performance of a contract, consent, and legitimate interests (secure galleries, quality, safety).

6) Photo sharing & delivery

Proofs (before purchase):

• We upload low-resolution, watermarked proofs after the shoot.
• Families access proofs using a private gallery protected by a unique link and/or code. Proof downloads are disabled unless specifically enabled for your package.
• Proof galleries are not publicly indexed.

Final delivery (after purchase):

• Once a package is purchased, we deliver high-resolution, unwatermarked images via a secure, unique download link emailed to the parent/guardian email address provided at booking/ordering.
• Download links may expire after a set period (we can reissue after verifying identity and/or relationship to the child).
• If a wrong email was supplied, we can invalidate the old link and send a new one to the corrected address.

Public use & social media:

• We will not publish or use images for marketing/social media without explicit, opt-in consent. Consent can be withdrawn at any time.

7) Payments & card data

• Payments are made through secure payment links provided by certified payment processors (e.g., Stripe/PayPal).
• We do not store full card details on our systems. Card data is handled by the payment provider (e.g., PCI DSS compliant).
• We retain only the minimum order metadata needed to fulfil your purchase and meet legal obligations (order ID, items, total, delivery info, payment confirmation status).

8) Where and how we store information

• Gallery hosting / delivery: proofs and final images are hosted on reputable platforms and delivered only via unique code/private link (proofs) or secure emailed link (purchased images).
• Working files & backups: we may use Google Drive for working edits and backups.
• Order forms & support: we may use secure platforms to collect order/delivery details and provide support.
• Payment processing: handled by Stripe, Afterpay and PayPal (we don’t store your card data).

International transfers: some providers may store data on servers outside New Zealand. We select providers with appropriate safeguards.

9) How long we keep information

• School/centre proofs: typically 3–6 months (aligned to fundraising/order windows).
• Purchased downloads: available for at least 6–12 months after delivery; we can reissue links upon request (identity check applies).
• Raw/working files: generally up to 12 months to allow re-edits or re-exports, then archived or deleted at our discretion.
• Order & tax records: retained as required by law (e.g., tax/audit requirements).

You can request earlier deletion of images (subject to legal/operational limits and excluding images already included in class composites or printed orders).

10) Who we share information with

We only share what’s necessary to deliver your services and meet obligations:

• Gallery/hosting providers (proof and delivery).
• Payment processors (secure payments; no card data stored by us).
• Print labs and couriers (to fulfil and deliver physical prints).
• Centres/schools (fundraisers) for totals/participation reconciliation (no card data).
• Professional editors/contractors under confidentiality and data-processing safeguards.
• Legal/insurers where required by law or to protect rights/safety.

We do not sell your personal information to third parties and do not disclose it for their own marketing without your explicit consent.

11) Security

We apply reasonable and appropriate safeguards, including:

• Access controls (unique codes, role-based staff access).
• Encrypted transmission (HTTPS) on our Site and gallery platforms.
• Watermarking and disabled downloads on proofs (unless enabled for your package).
• Limited retention, periodic archiving/deletion, and provider due diligence.

No method is 100% secure, but we work to reduce risk and respond promptly to issues.

12) Your choices & rights

Subject to the Privacy Act 2020, you can:

• Access and correct your personal information.
• Request deletion of images/information we hold (within legal/operational limits).
• Withdraw marketing consent at any time.
• Request takedown of a photo you believe should not be online; we’ll review promptly.
• Change delivery email / reissue links: we can update your email and invalidate previous links after verifying identity.

To make a request, contact us (Section 2). We may need to verify your identity to protect privacy.

13) Children’s privacy

We work with parents/guardians and centres/schools to ensure appropriate consent for photographing children and sharing galleries. If you have concerns about your child’s image, please contact us immediately for a prompt review and, if appropriate, removal or restriction.

14) Cookies & analytics

Our Site may use strictly necessary cookies to operate galleries, logins, carts, and checkout. We may use privacy-respecting analytics to understand usage and improve the Site. You can adjust browser settings to manage cookies; some features may not function without them.

15) Third-party links

Our Site may link to other websites. Their privacy practices are their own; please review their policies before providing personal information.

16) Changes to this policy

We may update this policy from time to time. The “Last updated” date will change, and the new policy will apply from the date it is posted on the Site.

17) Contact us

If you have questions, requests, or complaints regarding privacy, please contact: DreamMomentz Photography — Email: contact@dreammomentz.co.nz · Phone: 020 400 46898 · Postal: 9 Ring Lane, Newlands, Wellington, New Zealand 6037

If you’re not satisfied with our response, you may contact the Office of the Privacy Commissioner (NZ).