Privacy Policy

Effective September 12, 2026 · S.A.T School Photography · samthephotomansch@gmail.com · 908-875-6540

1. What we collect

• Account details: when you sign in with Google, we receive your name and email address, nothing else from your Google account.
• Enquiries and orders: the names, emails, phone numbers, school names and messages you type into our booking, order and contact forms.
• School pages: picture day dates and status information that you or your school provide.
• Usage counts: a simple daily count of website visits. We do not use cross site trackers, advertising pixels or profiling.
• Session cookie: a single cookie that keeps you signed in on this site. It expires after 30 days or when you sign out.

2. How we use it

To operate your school's private order desk, answer enquiries, fulfil orders, keep accounts secure, and improve how picture day runs. We never sell, rent or trade personal data, and we never share it with advertisers.

3. Student photographs

• Student images are uploaded only behind each school's private access, never on public pages, never with public student lists, never with names in any web address.
• Family galleries open only with a per child private access code. Each code shows that one child's photographs and nothing else, no other children, no names, no class lists, and galleries are not indexed or listed anywhere public.
• Opt out requests are honored before a single image is uploaded.
• Images are retained for five years so families can reorder, and are deleted earlier on written request from a parent or guardian.

4. Who can see your data

Only authorised S.A.T staff and the Google accounts your own school has authorised (or that created your school's page). Our hosting providers (Vercel and GitHub) store the data on our behalf under their own security obligations.

5. Your rights

You may ask us at any time to see, correct or delete your personal data, and we will action it within one business day where we can, and within 30 days in every case. Parents and guardians may request deletion of their child's images at any time.

6. Children

This service is directed to schools, school staff and parents. We do not knowingly collect personal data directly from children; all child related information reaches us through a school or a parent, and consents are managed by the school.