Privacy notice
Collect less. Protect what matters.
This product-ready privacy template describes the implemented data flows, but it must be finalised against the operating company, vendors and launch jurisdictions by privacy counsel.
Last updated: 19 July 2026
Information handled
PhotoTalent handles account identifiers, profile information, authentication sessions, photographs and metadata, community activity, course progress, event RSVPs, orders, subscription state, reports, audit records and operational telemetry. Stripe handles payment-card and seller-verification information.
Purpose and lawful use
Data is used to provide requested services, secure accounts, process media, personalise chosen feeds, fulfil purchases, operate events, moderate harmful content, prevent fraud, meet legal obligations and improve reliability. Optional uses require a separate consent or clear preference.
Location and sensitive metadata
Exact image GPS is hidden by default. Public event coordinates are approximate. Private meetup addresses are encrypted. Camera serial numbers and other unnecessary identifiers should not appear in public derivatives.
Retention and control
Members can edit profile and content controls, revoke sessions, delete photographs through durable cleanup jobs and request account export or deletion. Financial, safety and legal records may require limited retention. A deployed service needs a documented retention schedule and deletion runbook.
International transfers and processors
The operating company must list its actual hosting, email, payment, monitoring, video and support processors, their regions and transfer safeguards. Production data must never be copied into development environments.
Contact and complaints
The final notice must identify the legal entity, privacy contact, applicable regulators and a clear process for access, correction, deletion, objection and complaints.