Privacy Policy

Who we are

Benver Studios(“we”, “us”) is a photography and aerial content business based in Sydney, New South Wales, operated by its co-founders, Ben and Denver. This policy explains how we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our website or services you consent to the practices described here.

You can contact us about anything in this policy at benverstudios@gmail.com.

What we collect

• Enquiry and booking details— your name, email address, phone number, the service you're interested in, your preferred location and date, and anything you tell us in your message.
• Photographs and video — the images and footage we create for you during a commissioned shoot, which may include identifiable images of you, your family (including children, with your explicit consent), your pets and your property.
• Contract and invoice records — contracts signed electronically via SignWell, and invoice/payment status.
• Payment information — handled entirely by Stripe. Card numbers are never transmitted to, stored on, or accessible from our systems.
• Website analytics — we use Cloudflare Web Analytics, a privacy-first tool that does not use cookies and does not track you across sites. We do not run advertising trackers.
• Spam protection — our booking form uses Cloudflare Turnstile to tell real people from automated submissions. It receives your IP address for that check and does not use tracking cookies.

Photographs of children

For family sessions involving children, we ask for explicit, recorded consent at booking as to whether images of your children may be used in our portfolio or marketing. If you say no — or say nothing — those images are used solely for your private gallery and are never published. You can withdraw consent at any time by emailing us, and we will remove the images from public display as soon as practicable.

How we use your information

• To respond to enquiries and provide quotes;
• To schedule, shoot and deliver your session or project;
• To prepare contracts and process payments;
• To deliver your private online gallery and notify you about it;
• To display selected work in our portfolio and marketing — only where you have consented;
• To meet our legal, tax and insurance obligations.

We do not sell personal information, and we do not send marketing email unless you have opted in.

Where your data lives

Booking records and gallery metadata are stored with Supabase, our database provider, with row-level security so each client can only ever access their own data. Original photographs and video are stored in Cloudflare R2, and delivered through private, signed, expiring links — galleries are never public and are excluded from search engine indexing. E-signature documents are stored with SignWell. Payments are processed and stored by Stripe. When you submit an enquiry through this website, a copy of it — your name, email address, phone number and your message — is delivered to our studio inbox by Resend, our transactional email provider. These providers may store data on servers outside Australia (typically the United States); we choose providers with strong security certifications and contractual privacy protections.

How long we keep it

Client galleries remain available for 12 months from delivery, after which the gallery and its associated images are automatically deleted from our delivery systems. We recommend downloading your full gallery promptly. Booking, contract and invoice records are retained for as long as Australian tax and business law requires (generally five years). If you would like your images deleted earlier, email us and we will action it promptly.

Security

• All traffic to our website and galleries is encrypted (TLS);
• Galleries are private by default and served via signed, expiring URLs;
• Administrator accounts are protected with two-factor authentication;
• Database access is governed by row-level security policies;
• Card data is handled exclusively by Stripe (PCI-DSS Level 1).

Access, correction and complaints

You may request access to, or correction of, the personal information we hold about you at any time by emailing benverstudios@gmail.com. If you believe we have mishandled your information, contact us first and we will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Changes to this policy

We may update this policy from time to time. The date at the top reflects the most recent revision; material changes will be highlighted on this page.