Privacy Policy

Privacy Policy

Last Updated: 23 August 2026

1. Contact Information

Amanda Joy Photography
Amanda Hilfer
Spiegelbergstrasse 37
4059 Basel
Switzerland
Email: admin@amandajoy-photography.com

Amanda Joy Photography is responsible for the processing of personal data described in this Privacy Policy, except where another party, such as a school, is expressly identified as the data controller.

This Privacy Policy explains how Amanda Joy Photography collects, uses, stores, shares and protects personal data when you visit our website, enquire about or purchase our photography services, participate in school photography, access an online gallery, purchase photographic products or otherwise communicate with us.

2. Information We Collect

Depending on how you interact with Amanda Joy Photography, we may collect and process personal data including your name, postal or billing address, email address, telephone number, names of family members or other participants in a photography session, and information voluntarily provided when making an enquiry, booking or registration.

When providing photography services, we create and process photographs and associated information necessary to organise, identify, edit, deliver and archive those photographs. This may include photographs, names of people photographed, session or booking information, school, class or year-group information, sibling or family relationships where relevant, gallery information and image identification or organisational metadata.

When you purchase photography services or products, we may process billing and delivery information, products or services ordered, transaction history, payment status and invoice information. Payment information is generally processed by the relevant payment provider. Amanda Joy Photography does not ordinarily receive or store complete credit or debit card information.

When you use our website or online services, certain technical information may be collected automatically, including your IP address, browser and device information, date and time of access, pages visited, referring pages, and cookie and analytics information.

We may also retain information you provide when you communicate with us by email, contact form or other communication method where reasonably necessary to respond to your enquiry, provide services or maintain appropriate business records.

3. How and Why We Use Personal Data

We process personal data only where reasonably necessary for our photography business and related services.

This may include responding to enquiries; preparing and administering bookings; entering into and fulfilling photography contracts; organising and conducting photography sessions; communicating with clients, parents, schools and other relevant participants; identifying and organising photographs; editing and delivering photographs; creating and administering private online galleries; processing payments, invoices, refunds and orders; producing and delivering photographic products; providing customer service; maintaining appropriate business and accounting records; managing school photography programmes; preventing fraud or misuse of our services; maintaining the security of our systems and galleries; resolving complaints or disputes; establishing, exercising or defending legal claims; complying with legal and regulatory obligations; improving our website, services and customer experience; and sending marketing communications where permitted.

Depending on the circumstances, processing may be necessary to perform a contract, take steps requested before entering into a contract, comply with a legal obligation, pursue legitimate business interests, or be based on consent where consent is required.

Providing certain personal data is voluntary. However, where information is necessary to provide a requested service, failure to provide it may mean that we cannot provide that service.

4. School Photography and Children

Amanda Joy Photography provides photography services to schools and families and therefore processes personal data relating to children as part of these services.

Depending on the particular school photography project, Amanda Joy Photography may act as the data controller for information provided directly by parents or guardians, or as a data processor acting on behalf of a school.

Information processed for school photography may include the child's name, school, class or year group, photographs, sibling or group relationships where relevant, parent or guardian name and contact information, registration information, gallery information, and order and transaction information.

Where parents or guardians register directly for school photography, information is used to organise photography sessions, identify students, correctly associate photographs with the appropriate child or family, create private online galleries, communicate with families, administer orders and provide photographic products and services.

Children should not independently register for school photography, create customer accounts or submit personal information through our customer systems. Registration and ordering relating to a minor should be completed by a parent, legal guardian or other adult authorised to act on behalf of the child.

By registering a child for optional school photography services, the registering adult confirms that they are authorised to provide the information submitted and, where consent is required, to provide that consent on the child's behalf.

In some circumstances a school may require a photograph for its own administrative purposes, such as student records or identification systems. Where the school determines the purpose for which such a photograph is required, the school is responsible for establishing the appropriate legal basis for its use and for fulfilling its own data-protection obligations.

Registration for school photography does not constitute permission for Amanda Joy Photography to use a child's photograph for advertising, social media, portfolio use or other public promotional purposes. Where permission is required for such use, it will be requested separately.

5. GotPhoto and School Photography Galleries

Amanda Joy Photography uses GotPhoto, operated by Fotografen Online Service GmbH, Hausvogteiplatz 12, 10117 Berlin, Germany, to provide and administer school photography services.

Depending on the school photography service being provided, information processed through GotPhoto may include photographs, student names, school, class or group information, parent or customer contact information, gallery registration information, order information, transaction and payment-related information, and technical and online-shop usage information.

GotPhoto may provide services including online gallery hosting, photograph organisation and allocation, gallery access, customer communication, order administration, payment processing, production and fulfilment, and technical operation and support.

GotPhoto acts as a data processor or sub-processor, as applicable. GotPhoto may use authorised sub-processors to provide parts of its services. Where personal data is transferred internationally, appropriate safeguards are used where required by applicable data-protection law.

GotPhoto may also anonymise information and use properly anonymised information for purposes including statistics, benchmarking, product development, business intelligence and improvement of its services. Properly anonymised information can no longer be attributed to an identifiable individual.

Amanda Joy Photography does not authorise GotPhoto to use identifiable photographs of children independently for GotPhoto's advertising or promotional purposes.

6. Other Service Providers and Disclosures

We use trusted third-party service providers where reasonably necessary to operate our photography business.

Depending on the service you use, these may include providers of client and booking management systems, online photography galleries, cloud and website hosting, payment processing, email and communications, professional photographic printing, order production and fulfilment, postal and delivery services, accounting and administrative services, website analytics, and IT and security services.

Services currently used by Amanda Joy Photography may include Studio Ninja, MailerLite, Pic-Time, GotPhoto, Stripe, PayPal and UBS Switzerland.

These providers process only the information necessary for the services they provide, subject to their respective roles and contractual arrangements. Our service providers may change from time to time as our business and technology requirements change.

We may also disclose personal data where reasonably necessary to accountants, lawyers, insurers, financial advisers or other professional advisers for purposes including accounting, insurance, risk management, obtaining professional advice, or establishing, exercising or defending legal claims.

Personal data may also be disclosed where required or permitted by law, regulation, court order or other lawful legal process; where reasonably necessary to cooperate with competent authorities; to prevent, investigate or address fraud, misuse or unlawful activity; or where reasonably necessary to protect the rights, property, security or safety of Amanda Joy Photography, our clients, photographed individuals or others.

7. International Data Transfers

Some service providers or their sub-processors may process personal data outside Switzerland.

Where personal data is transferred to a country recognised as providing an adequate level of data protection, the transfer may be made on that basis.

Where an adequate level of protection is not recognised, appropriate safeguards will be used where required under applicable Swiss data-protection law. These may include recognised standard contractual data-protection clauses or another legally permitted mechanism.

Information about relevant countries and safeguards may be requested by contacting Amanda Joy Photography.

8. Photographs and Online Galleries

Photographs may be delivered through password-protected, access-code-protected or otherwise controlled online galleries.

Customers are responsible for keeping private gallery passwords, access codes and links confidential and should not share them with unauthorised persons.

Although reasonable technical and organisational measures are used to protect online galleries, no internet-based service can guarantee absolute security.

Photographs will not be made publicly available by Amanda Joy Photography merely because they have been uploaded to a private client or school photography gallery.

9. Marketing and Communications

We may contact existing or prospective customers regarding our services where permitted by law.

Where you have subscribed to a newsletter or other optional marketing communication, you may unsubscribe at any time using the unsubscribe facility provided or by contacting us.

We may still send non-marketing communications where necessary to administer a booking, school photography registration, gallery, order, transaction or existing customer relationship.

Marketing permission is separate from permission to use identifiable photographs publicly.

10. Use of Photographs for Marketing

Amanda Joy Photography may use photographs for portfolio, website, social media, advertising or other promotional purposes only where we are legally permitted to do so.

Where consent is required, appropriate permission will be obtained.

For school photography involving children, registration for photography or ordering photographs does not by itself constitute consent to public promotional use.

Where separate permission has been provided, that permission may be withdrawn for future use by contacting Amanda Joy Photography, subject to any applicable contractual or legal considerations and without affecting lawful use that occurred before withdrawal.

11. Cookies and Website Analytics

Our website may use cookies and similar technologies necessary for website functionality, security, analytics and, where applicable, marketing.

Cookies are small files stored on or accessed through your device that enable websites and service providers to recognise certain information about a browsing session. Cookies may help us operate and secure the website, remember preferences, understand website usage, measure website performance, understand how visitors find and interact with our website, and improve our services and marketing.

Where required, non-essential cookies will be used in accordance with the choices made through our website's cookie settings or consent mechanism.

You may also manage cookies through your browser settings. Disabling certain cookies may affect website functionality.

Our website may use third-party analytics services, including Google Analytics, subject to the configuration and consent choices applicable to our website.

12. Social Media and External Websites

Amanda Joy Photography may maintain profiles on social media platforms such as Instagram and Facebook.

When you interact with us through a social media platform, the platform provider may independently process information according to its own privacy terms.

Our website may also contain links to third-party websites that are not operated or controlled by Amanda Joy Photography. We do not control their content, availability, security or privacy practices and accept no responsibility for how independent third-party websites collect, use or protect personal data. Access to and use of third-party websites is at the user's own risk. We recommend reviewing the privacy information and terms of any third-party website before providing personal data or making a purchase.

13. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, to provide our services, maintain appropriate business records and comply with legal obligations. Different categories of information may therefore be retained for different periods.

Accounting, invoice and transaction information may be retained for periods required under Swiss law. Customer and booking information may be retained for as long as reasonably necessary to administer our relationship and maintain appropriate business records. Online galleries and associated information may be retained for a reasonable period to allow access, ordering and customer service. Marketing information may be retained until consent is withdrawn, the recipient unsubscribes or the information is no longer reasonably required.

Photographs and associated files may be retained as part of Amanda Joy Photography's professional photographic archive, subject to applicable law, contractual arrangements and legitimate business requirements.

Information that is no longer reasonably required will be deleted, securely disposed of or anonymised, subject to legal retention requirements and normal technical backup cycles.

14. Security

Amanda Joy Photography takes reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, misuse or disclosure.

We use established service providers and secure payment and gallery systems appropriate to the nature of our business.

No method of electronic storage or internet transmission can guarantee complete security. However, reasonable measures are taken to minimise the risk of unauthorised access or misuse.

Where a data security breach occurs, Amanda Joy Photography will take appropriate action in accordance with applicable data-protection law, including notification to the relevant authorities or affected individuals where legally required.

15. Your Data-Protection Rights

Subject to applicable Swiss data-protection law and any relevant exceptions, you may have the right to ask whether we process personal data relating to you; request information about personal data we process; request correction of inaccurate personal data; request deletion or destruction of personal data where appropriate; object to or request restriction of certain processing; withdraw consent for future processing where processing is based on consent; request the release or transfer of certain personal data in a commonly used electronic format where applicable; and request information concerning recipients of personal data and relevant international transfers.

Withdrawal of consent does not affect the lawfulness of processing that occurred before consent was withdrawn.

Certain information cannot necessarily be deleted immediately. For example, we may be required to retain invoices, transaction records or other information to comply with legal obligations or establish, exercise or defend legal claims.

We may request reasonable evidence of identity or authority before providing access to information, particularly where a request concerns photographs or personal data relating to a child.

Requests should be sent to:

Amanda Joy Photography
Amanda Hilfer
Spiegelbergstrasse 37
4059 Basel
Switzerland
[admin@amandajoy-photography.com](mailto:admin@amandajoy-photography.com)

You also have the right to contact the competent Swiss data-protection authority if you believe your personal data has been processed unlawfully.

16. Website Information and Disclaimer

Amanda Joy Photography takes reasonable care when preparing information published on its website. However, we do not guarantee that all website information will at all times be complete, accurate, current or free from errors.

To the extent permitted by applicable law, Amanda Joy Photography accepts no liability for loss or damage arising solely from access to, use of, inability to use or reliance upon information published on the website, or from technical interruptions or faults outside our reasonable control.

Nothing in this provision excludes or limits liability where such exclusion or limitation is prohibited by applicable law.

Information, services, availability and offers published on the website may be changed, supplemented, corrected, withdrawn or discontinued from time to time without prior notice, subject to any existing contractual obligations.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, service providers or applicable legal requirements.

The current version will be published on our website together with the date on which it was last updated.

Material changes affecting an existing service or processing activity may be communicated separately where appropriate or legally required.

18. Copyright

Unless otherwise stated, copyright and other intellectual property rights in photographs, website content and other materials created by Amanda Joy Photography remain with Amanda Joy Photography or the relevant rights holder.

Permission to access, purchase or download a photograph does not transfer copyright unless expressly agreed otherwise.

19. Severability

If any provision of this Privacy Policy is found to be invalid, unlawful or unenforceable, that provision will be interpreted or limited to the extent necessary and the remaining provisions will continue to apply to the fullest extent permitted by law.

20. Law and Jurisdiction

This Privacy Policy is governed by Swiss law.

Subject to any mandatory legal rights or jurisdictions that apply, disputes arising in connection with Amanda Joy Photography and this Privacy Policy are subject to the competent courts in Basel-Stadt, Switzerland.