A quick note first
You're trusting me with a lot: your home, your kids, your brand-new baby, and quite possibly the laundry pile. This page explains, in plain English, what information I collect, why, where it goes, and what you can ask me to do with it.
Who I am
Amy Oliver Photographer (ABN 97 826 542 993) is a family and newborn photography business in Melbourne, Victoria, run by me, Amy Oliver. You can reach me any time at amyoliverportraits@gmail.com.
As a small business, I may not be bound by the Privacy Act 1988 (Cth), but I aim to follow its Australian Privacy Principles. Because some of what families share with me is health information, I also follow the Health Privacy Principles in the Health Records Act 2001 (Vic).
What I collect
• When you enquire or book: your name, email, phone number and address (or session location), your due date or baby's birth date, your children's names and ages, and messages you send me by contact form, email, phone, text, WhatsApp, Messenger or Instagram. If someone buys you a gift voucher, I'll get your name and contact details from them, too.
• Anything you choose to share about your family, like a child's sensory needs or what helps them feel safe
• When you pay: payments run through Studio Ninja and its payment provider, so I never see your full card details. Bank transfers show your name in my business accounts
• During your session: photographs of you, your family and your home. Yes, including the toddler mid-meltdown.
• On my website: general information through cookies and Google Analytics, like the pages you visit and the device you use. It doesn't tell me who you are
• On my email list: your name, email address, and whether you open or click my emails.
Pregnancy details and anything about your child's needs count as health information. Sharing them is always optional, I only collect them with your consent, and I only use them to plan a gentler session. For children, I rely on a parent or guardian's consent. If you tell me about other adults, like a partner or grandparents, please check they're comfortable with that.
You can ask me a general question without giving your full name. If you'd rather not share some details, I may not be able to book or plan your session properly. If you send me something I didn't ask for and don't need, I'll delete it.
How I use it
To reply to you, plan and deliver your session, send invoices and your gallery, keep the tax records I'm required to keep, improve my website, and send occasional emails if you've signed up. I don't sell, rent or trade your information. Ever.
Photographs of your family
Your gallery is private to you and only reachable by its link and password, so share it with care. Once you've downloaded or shared your images, how they're used from there is up to you. Who owns the copyright, and how each of us can use the images, is set out in my booking agreement.
I only share images on my website, blog or socials with your permission, which I ask for in my booking agreement.
A parent or guardian decides for children, and if an older child tells me they'd rather not be shared, I listen.
When I share
• I never use your names. I may mention your suburb for SEO purposes, but nothing more specific than that
• I take care not to show your house number, street or other details that could pinpoint where you live
• I never tag you, or publish your review with your name, without your yes
You can change your mind any time. I'll remove images from my website and socials within 14 days, though I can't pull back anything already printed or reshared by someone else.
Who I share it with
I only share what each of these tools needs to do its job:
I may also share information with my accountant, insurer or legal adviser, or when the law requires it.
Some of these providers store data outside Australia, including in the United States. Their own privacy policies apply to how they handle your information, as do those of any site my website links to, like Instagram.
Cookies and emails
My website uses cookies to work properly and to show me, in general terms, which pages people find useful. Embedded content, like my Instagram feed, may set cookies of its own. You can block cookies in your browser settings or opt out of Google Analytics with Google's opt-out browser add-on. The site still works either way.
You're only on my email list if you signed up. Every email has an unsubscribe link, and I'll remove you within five business days (usually straight away). Emails about your booking, like gallery delivery, will still come through.
Keeping it safe
I keep your information in password-protected accounts and secure, backed-up storage. No system is perfect, so please don't email or message me things like bank details or detailed medical information. If a data breach ever affected you, I'd tell you as soon as practicable and explain what I'm doing about it.
How long I keep it
• Enquiries that don't go ahead: deleted after 12 months
• Health details: deleted within 30 days of your gallery being delivered
• Online galleries: available for 12 months after delivery
• Unedited files: deleted 24 months after delivery
• Final images: I may keep a backup, but I can't guarantee it, so please download yours
• Booking, contract and invoice records: at least 5 years, as the ATO requires. After that, I delete it or remove anything that identifies you.
Your rights and complaints
You can ask to see, correct or delete what I hold about you. Email amyoliverportraits@gmail.com and I'll reply within 30 days. If I have to keep something for tax reasons, I'll tell you what and why. If something doesn't sit right, please tell me first at amyoliverportraits@gmail.com. I'll look into it and reply within 30 days.
Changes to this policy
I'll update this page if the way I work changes. This policy explains how I handle your information. It isn't a contract, and it doesn't change the terms of your booking agreement.
Last updated: 21 October 2026
