Privacy Policy

NN Popa Photography ("we," "us," or "our") is committed to protecting the personal information of our clients and website visitors. This Privacy Policy explains what information we collect, how we use it, and your rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian provincial privacy legislation.

1. Information We Collect

We collect personal information only when you voluntarily provide it to us, including:

• Contact and inquiry data — your name, email address, phone number, and event details submitted through our contact form.
• Booking and contract data — event date, venue, wedding party details, and payment information required to fulfil a photography service agreement.
• Photography materials — images captured during your event session that form the deliverables of our service.
• Website usage data — anonymised analytics data (e.g., pages visited, referral source) collected through privacy-respecting analytics tools to help us improve the site. No personally identifiable information is included in analytics.

2. How We Use Your Information

Your personal information is used solely to:

• Respond to your inquiry and provide a photography services quote.
• Fulfil your booked photography service, including scheduling, delivery of images, and post-session support.
• Issue invoices and process payments.
• Communicate with you about your booking or session.
• Improve our website experience through aggregated, anonymised analytics.

We do not sell, rent, or trade your personal information to any third party.

3. Portfolio and Marketing Use of Images

With your consent (included in our service agreement), we may feature images from your session on our website portfolio, social media channels (Instagram, Facebook, Pinterest), and marketing materials. You may withdraw this consent at any time by contacting us at the address below; previously published images will be removed within a reasonable timeframe.

4. Disclosure to Third Parties

We share your personal information only as necessary to deliver our services — for example, with a second photographer, videographer, or an online gallery delivery platform (such as Pixieset or Pic-Time). These third parties are contractually obligated to handle your information in accordance with applicable privacy law and are not permitted to use it for their own purposes.

We may also disclose information where required by law or legal process.

5. Data Retention

Contact inquiry data is retained for up to 24 months. Booking and contract data is retained for a minimum of seven (7) years for accounting and legal purposes. Delivered image files are retained for up to one (1) year after delivery; we recommend downloading and backing up your gallery promptly. You may request earlier deletion of your inquiry or contact data at any time.

6. Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, disclosure, or loss. Communication through our contact form uses HTTPS encryption. However, no method of electronic transmission is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Under PIPEDA you have the right to:

• Know what personal information we hold about you.
• Request access to your personal information.
• Request correction of inaccurate or incomplete information.
• Withdraw consent for optional uses (such as portfolio display) at any time.
• File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

8. Cookies and Analytics

Our website may use minimal, privacy-respecting analytics. We do not use third-party advertising cookies or cross-site tracking. If you have a browser-level "Do Not Track" signal enabled, we honour it by not collecting analytics data from your session.

9. External Links

Our website contains links to third-party platforms (Instagram, Facebook, Pinterest, LinkedIn). We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies.

10. Contact Us

For any privacy-related questions, to access or correct your personal information, or to withdraw consent, please contact:

We will respond to privacy requests within 30 days.

This policy may be updated periodically. Material changes will be noted with a revised "Last updated" date at the top of this page.

← Back to Contact