Privacy Policy

Shelby Vilate Studios (ABN 86 570 632 160), trading as Shelby, is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains how Shelby collects, holds, uses and discloses your personal information when you use her website or book a photography session with her.

Shelby also endeavours to meet the spirit of the EU General Data Protection Regulation (GDPR) where clients may be located in or have connections to the European Economic Area.

Shelby collects the following personal information:

• Contact details, full name, email address, phone number, and postal address.
• Baby's date of birth, to schedule your session within the optimal newborn window (5-14 days after birth).
• Booking and payment information, session date, package selection, deposit and payment records. Payment card details are processed directly by Stripe and are never stored by Shelby.
• Contract information, electronic signature records via Adobe Sign where applicable.
• Marketing preferences, whether you have consented to receiving future communications from Shelby, and when that consent was given.
• Referral source, how you heard about Shelby (Google, Instagram, word of mouth, etc.), collected to understand how clients find Shelby.
• Correspondence, messages sent via Shelby's contact form or directly by email.

Shelby collects information directly from you when you submit an enquiry, make a booking, or communicate with Shelby. Shelby does not collect sensitive information (as defined by the Privacy Act) unless specifically required and with your consent.

Shelby uses your personal information to:

• Process and manage your booking and session scheduling.
• Communicate with you about your upcoming session, including preparation tips, reminders, and payment requests.
• Process payments and issue receipts via Stripe.
• Generate and manage your session contract via Adobe Sign where applicable.
• Schedule your session in Shelby's calendar via Google Calendar.
• Deliver your completed gallery via Pic-Time.
• Respond to enquiries and provide customer support.
• Send marketing communications, only where you have given explicit consent.
• Maintain business records as required by law.

Your personal information is stored securely in Supabase, a cloud database platform that uses industry-standard encryption at rest and in transit. Access to your data is restricted to authorised personnel only.

Shelby takes reasonable steps to protect your information from misuse, interference, loss, and unauthorised access, modification, or disclosure. However, no method of electronic transmission or storage is 100% secure, and Shelby cannot guarantee absolute security.

Shelby retains your personal information for as long as necessary to fulfil the purposes described in this policy, or as required by law. If you request deletion of your data, Shelby will remove it within 30 days unless retention is required for legal or tax compliance purposes.

Shelby shares your information with the following third-party providers solely to deliver Shelby's services. Each provider is bound by their own privacy policies and data protection obligations.

• Stripe, payment processing. Stripe handles all payment card data in accordance with PCI-DSS Level 1 standards. Shelby does not store your card details. See Stripe's Privacy Policy.
• Adobe Sign, electronic signature for your session contract. Your name and email address are shared with Adobe Sign to facilitate contract generation and signing. See Adobe's Privacy Policy.
• Google Calendar, session scheduling. Your name and session details are used to create a calendar event. See Google's Privacy Policy.
• Resend, transactional email delivery. Your email address is used to send booking confirmations, reminders, and receipts. See Resend's Privacy Policy.
• Supabase, database hosting. Your data is stored in Supabase's secure, encrypted cloud infrastructure. See Supabase's Privacy Policy.
• Pic-Time, online gallery delivery. Your name and images are stored in your private Pic-Time gallery for 60 days following delivery. See Pic-Time's Privacy Policy.
• Meta (Facebook and Instagram), advertising measurement. The Meta Pixel shares site activity, such as pages viewed and whether a booking was started or completed, with Meta to measure and improve Shelby's ads. See Meta's Privacy Policy.

Shelby does not sell, rent, or trade your personal information to any third party for marketing purposes.

Shelby will only send you marketing or promotional communications if you have explicitly opted in. You may withdraw your consent at any time by:

• Clicking the "unsubscribe" link in any marketing email Shelby sends.
• Contacting Shelby directly at bookings@shelbyvilatestudios.com.au.

Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal. Transactional emails (booking confirmations, receipts, reminders) are not marketing communications and will be sent regardless of marketing consent.

You have the right to:

• Access, request a copy of the personal information Shelby holds about you.
• Correction, request that Shelby corrects inaccurate or incomplete information.
• Deletion, request that Shelby deletes your personal information, subject to any legal obligations requiring retention.
• Portability, request a copy of your data in a structured, machine-readable format.
• Objection, object to the use of your data for direct marketing at any time.

To exercise any of these rights, please contact Shelby at bookings@shelbyvilatestudios.com.au. Shelby will respond within 30 days.

This website uses cookies and similar technologies to improve your browsing experience and to understand how visitors use the site. This includes the Meta Pixel (Facebook Pixel), which measures the performance of Shelby's Facebook and Instagram advertising and may be used to show relevant ads to people who have visited the site. The Meta Pixel shares certain activity, such as pages viewed and whether a booking was started or completed, with Meta Platforms, Inc.

You can read more in Meta's Privacy Policy, and you can control or limit this tracking through your browser settings and your Meta ad preferences.

Shelby may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Your continued use of Shelby's services after changes are made constitutes acceptance of the updated policy.

If you have any questions, concerns, or complaints about how Shelby handles your personal information, please contact Shelby:

If you are not satisfied with Shelby's response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.