Privacy Policy.

Martin Mills Photography (“we”, “us”) takes your privacy seriously. This policy explains what personal information we collect, why we collect it, how we use it, and the choices you have. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

We collect only what we need to run your session and deliver your images. This typically includes:

• Contact details — name, email, phone number and business name, collected when you enquire or book.
• Booking details — session type, preferred date, location and brief, collected through the booking form.
• Message content — anything you tell us in the contact or booking form or in subsequent emails and messages.
• Photographs — images taken during your session, and any reference images you share for the brief.
• Account details — if you create a Client Portal account to view and download your gallery, your email address and a password.
• Usage data — basic information such as pages visited and the device used, collected automatically when you browse the site.

We use your information to:

• respond to enquiries and prepare your quote or proposal;
• schedule, plan and run your session;
• retouch, deliver and provide access to your final images;
• process payments and issue invoices and receipts;
• communicate with you about your booking and any follow-up; and
• improve the site and our services.

We do not use your information to send marketing material you haven’t asked for. Where we display work in our portfolio, you can opt out at any time (see our Terms of Service).

We collect and use your information because it is necessary to provide the services you ask us for, to keep records for our business, and (where relevant) because you have consented. You can withdraw consent at any time by contacting us — though we may still need to keep some records for legal or accounting reasons.

Your information is stored securely through our managed cloud backend, which handles our database, account sign-in and file storage. Access to personal information is restricted to the Studio and our service providers, and protected by access controls and encryption in transit and at rest.

Galleries and delivered images are accessed through the Client Portal, which requires you to sign in with your email and password. Keep those details private.

We do not sell your information. We share it only where necessary to deliver the service or where we’re required to by law. This can include:

• our cloud hosting and storage provider, to store data and images securely;
• payment processors, to take and reconcile payments;
• third-party tools such as email and calendar integrations, where needed to coordinate bookings; and
• regulators or law enforcement, if legally compelled.

We keep your information for as long as we need it for the purposes above, and then for a reasonable period to meet legal, accounting or record-keeping obligations — generally a minimum of seven years for financial records. After that, we delete or de-identify it.

Our site uses essential cookies and similar technologies to keep you signed in to the Client Portal and to keep the site working. Where we use analytics, it is limited to understanding how the site is used so we can improve it, and it does not identify you personally.

Under the Australian Privacy Principles, you can ask us to:

• access the personal information we hold about you;
• correct information that is inaccurate or out of date;
• request that we delete or de-identify your information (subject to legal obligations); and
• withdraw consent for marketing or portfolio use.

To make any of these requests, or to raise a concern about how we’ve handled your information, contact us using the details on our Contact page and we’ll respond within a reasonable time.

No system is completely secure, but we take reasonable steps to protect your information using access controls, encryption in transit and at rest, and a managed cloud backend with row-level security on your data. If we become aware of a data breach affecting your information, we will take steps to contain it and notify you and regulators where required.

If you have a privacy question or a complaint, please contact us through our Contact page. We aim to resolve complaints promptly. If you’re not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC).