Privacy Policy.

PhotoSale follows the Australian Privacy Principles in the Privacy Act 1988 (Cth). This page explains what we collect, why, how long we keep it, and how you can access or correct it.

1. What we collect

• Account details: name, email, phone (optional), city, ABN (photographers only), payout details (photographers only).
• Profile content: portfolio photos, biography, tagline, hero image, avatar, social and website links.
• Buyer and enquiry data: name, email, the message you send a photographer, and order details when you purchase a print or a licence.
• Technical data: IP address, browser type, device type, and pages visited. We use this for security and traffic analysis.
• Photo metadata: only the fields we ask for in a caption or location box. EXIF data, including GPS coordinates, is stripped from uploaded photos before public display.

2. Why we collect it

• To create and run your account.
• To process print orders and licence purchases.
• To deliver enquiries to the right photographer.
• To prevent fraud, abuse, and copyright infringement.
• To meet our tax and record-keeping obligations.

3. Who we share it with

• The photographer you enquire with receives your name, email, and message so they can reply directly.
• Stripe processes payments and stores card details. We never see your full card number.
• Our email provider delivers transactional messages such as receipts and reset links.
• Our hosting provider stores the site and the SQLite database file that backs it.
• Law enforcement, regulators, or courts where a valid request compels us.

We do not sell personal information. We do not share enquiry or order data with third-party advertisers.

4. Cookies

We use first-party cookies for session login and for basic analytics (page counts, referrer, no cross-site tracking). You can clear cookies in your browser at any time. Logging out clears the session cookie.

5. How long we keep it

• Account data: while the account is open, plus seven years for tax records after closure.
• Enquiry messages: three years from the date sent.
• Order records: seven years (tax law minimum).
• Server logs: 90 days, then aggregated and discarded.

6. Storage and security

Data is stored on Australian infrastructure. Connections are HTTPS. Passwords are hashed. Passwords are never stored in plain text. We restrict admin access to the people who need it to run the site.

7. Your rights

• Ask what information we hold about you.
• Correct anything that is wrong.
• Request deletion of your account.
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you are not happy with our response.

Send requests to privacy@photosale.net. We aim to reply within 30 days.

8. Children

PhotoSale is not for under-18s. We do not knowingly collect information about children. Identifiable photos of minors are not accepted.

9. Overseas transfers

Our payment processor (Stripe) and our email provider may transfer data outside Australia in the course of operating their services. We use providers that bind themselves to comparable privacy standards.

10. Changes

Material changes to this policy will be flagged with a new last-updated date. Continued use of the site after a change means you accept the updated policy.

11. Contact

Privacy questions and access requests go to privacy@photosale.net. Anything else, see the contact page.