1. Introduction and company information
Northern Lens Studio Ltd. ("we", "us", "our") is committed to protecting the privacy and personal information of our clients, website visitors, and other individuals who interact with our photography studio services. This Privacy Policy explains how Northern Lens Studio Ltd. collects, uses, discloses, stores, and protects personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, provincial privacy legislation.
Northern Lens Studio Ltd. operates as a photography-studio business providing photography sessions, image editing, client communications, booking services, and related creative services.
Company: Northern Lens Studio Ltd.
Address: 214 17th Ave SW, Calgary, AB T2S 0A8, Canada
Email: [email protected]
Phone: +1 (403) 782-9461
By using our website, contacting us, booking services, or otherwise providing personal information to Northern Lens Studio Ltd., you acknowledge that your information will be handled as described in this Privacy Policy.
2. Data collection and processing
We may collect personal information directly from you, automatically through our website, and from third parties where permitted by law. The types of personal information we may collect include:
- Identification and contact details, such as your name, email address, phone number, mailing address, and other contact information.
- Booking and service information, such as appointment details, session preferences, event information, and communications regarding your photography project.
- Payment and billing information, where required for invoicing and payment processing. Payment card details are typically processed by third-party payment providers and are not stored by us unless necessary and lawful.
- Client content, including photographs, images, likenesses, and related media created during photography sessions.
- Website and technical information, such as IP address, browser type, device information, cookies, analytics data, and usage patterns.
- Communication records, including emails, messages, inquiries, feedback, reviews, and customer support correspondence.
- Consent and preference information, including marketing preferences, model release preferences, and communication choices.
We collect personal information only as reasonably necessary for the purposes identified in this Privacy Policy or as otherwise permitted or required by law.
Where photographs or video recordings identify an individual, such content may constitute personal information and will be handled accordingly.
3. Purpose of data processing
We process personal information for the following purposes:
- To provide photography-studio services, including booking, session planning, shooting, editing, delivery, and customer support.
- To communicate with you about inquiries, appointments, quotes, contracts, and service updates.
- To process payments, issue invoices, maintain accounting records, and complete transactions.
- To manage client files, deliver images, maintain archives, and support post-session requests.
- To create, customize, and improve our services, website, workflows, and customer experience.
- To send marketing communications, promotions, newsletters, or studio updates where permitted by law and, where required, with consent.
- To manage model releases, copyright permissions, licensing arrangements, and portfolio usage.
- To maintain security, detect fraud, prevent abuse, and protect our rights, property, staff, clients, and systems.
- To comply with legal, regulatory, tax, accounting, insurance, and record-keeping obligations.
- To respond to lawful requests from public authorities and to enforce our agreements.
We will not use personal information for purposes that are not appropriate to the context in which it was collected, unless we obtain consent or are otherwise permitted by law.
4. Legal basis for processing
Canadian privacy law generally requires that we collect, use, or disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances and, where appropriate, with knowledge and consent. Depending on the context, we rely on one or more of the following bases:
- Consent: Where you have given express or implied consent for the collection, use, or disclosure of your personal information.
- Performance of services: Where processing is necessary to provide photography and related studio services you have requested.
- Legal or regulatory obligation: Where processing is necessary to comply with applicable laws, court orders, tax obligations, or lawful requests.
- Legitimate business purposes: Where processing is reasonable and appropriate for operating our business, preventing fraud, securing systems, or improving our services, subject to applicable law.
Where required by law, we will seek your consent before collecting, using, or disclosing your personal information. In some cases, consent may be withdrawn, subject to legal or contractual limitations.
5. Data sharing and third parties
We may share personal information with third parties only as reasonably necessary and subject to appropriate safeguards. These third parties may include:
- Service providers: Hosting providers, cloud storage providers, email and communication tools, booking platforms, customer relationship management systems, analytics providers, and IT/security vendors.
- Payment processors and financial institutions: For the processing of transactions, refunds, and related financial administration.
- Professional advisers: Lawyers, accountants, insurers, auditors, and other professional advisers engaged by us.
- Delivery and printing partners: Where needed to produce, print, frame, or deliver photographs or related products.
- Authorities and legal recipients: Government agencies, regulators, courts, or other parties where required or permitted by law.
- Business transferees: In connection with a merger, acquisition, reorganization, financing, sale of assets, or similar transaction, subject to legal requirements.
We do not sell personal information in the ordinary sense. If we share client images or testimonials for portfolio, marketing, or social media purposes, we will do so only in accordance with applicable law and any consent, release, or contract governing that use.
Where a third-party service provider processes personal information on our behalf, we require them to use the information only for the purposes for which it was provided and to implement appropriate safeguards.
6. Data transfer to third countries
Some of our service providers may store or process personal information outside Canada, including in the United States or other jurisdictions. As a result, personal information may be subject to the laws of those jurisdictions and may be accessible to courts, law enforcement, or national security authorities in those countries.
Where we transfer personal information outside Canada, we take reasonable steps to ensure it is protected by appropriate contractual, technical, and organizational safeguards. By using our services or providing personal information to us, you acknowledge that cross-border transfers may occur where necessary for service delivery and business operations.
7. Storage duration
We retain personal information only for as long as reasonably necessary to fulfil the purposes identified in this Privacy Policy, including legal, accounting, tax, insurance, dispute-resolution, and record-keeping requirements.
Retention periods may vary depending on the type of information and the context in which it was collected. Examples include:
- Client and booking records: retained for the duration of the service relationship and thereafter for a reasonable period.
- Financial and accounting records: retained for the period required by applicable tax and accounting laws.
- Photographs and project files: retained as needed to complete the service, support reorders or re-delivery, and maintain archives, unless deletion is requested and lawful.
- Marketing contact information: retained until you unsubscribe, withdraw consent, or request deletion, subject to legal retention requirements.
When personal information is no longer required, we will securely delete, destroy, anonymize, or de-identify it as appropriate.
8. User rights
Subject to applicable law and certain exceptions, you may have the following rights regarding your personal information:
- Access: You may request confirmation of whether we hold personal information about you and request access to that information.
- Rectification: You may request correction of inaccurate, incomplete, or outdated personal information.
- Erasure: You may request deletion of personal information, subject to legal or contractual limitations and our legitimate retention obligations.
- Restriction: You may request that we limit the use or disclosure of your personal information in certain circumstances.
- Data portability: Where applicable, you may request a copy of certain personal information in a structured and commonly used format.
- Objection: You may object to certain uses of your personal information, including some forms of marketing or processing based on legitimate interests, where applicable.
To exercise your rights, please contact us using the details provided below. We may need to verify your identity before responding. We will respond within a reasonable time and in accordance with applicable legal requirements.
In some cases, we may be unable to comply fully with your request if doing so would conflict with legal obligations, contractual requirements, or legitimate business needs, or if the information is subject to legal privilege.
9. Withdrawal of consent
Where we rely on your consent to collect, use, or disclose personal information, you may withdraw that consent at any time, subject to legal or contractual restrictions and reasonable notice.
If you withdraw consent, we will explain the consequences where appropriate. For example, withdrawal of consent may affect our ability to provide certain services, deliver photographs, maintain your account, or continue marketing communications.
You may unsubscribe from marketing emails at any time using the unsubscribe mechanism in the message or by contacting us directly.
10. Right to complain
If you have concerns about how Northern Lens Studio Ltd. handles your personal information, we encourage you to contact us first so we can address your concerns promptly.
You also have the right to file a complaint with the appropriate privacy regulator in Canada, including the Office of the Privacy Commissioner of Canada, or with a provincial privacy commissioner where applicable.
Before or after contacting a regulator, you may also request that we review our handling practices, correct any issues, or provide further information regarding our privacy practices.
11. Data security
We use reasonable physical, organizational, administrative, and technical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, misuse, or modification.
These safeguards may include:
- Access controls and authentication measures
- Encryption where appropriate
- Secure storage and backup procedures
- Role-based access restrictions
- Staff confidentiality obligations and privacy training
- Vendor due diligence and contractual protections
- Monitoring and incident response procedures
No method of transmission or storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. If we become aware of a privacy or security incident that creates a real risk of significant harm, we will take steps consistent with applicable law, including notification where required.
12. Contact information
If you have questions, concerns, requests, or complaints regarding this Privacy Policy or our personal information practices, please contact us:
Northern Lens Studio Ltd.
214 17th Ave SW, Calgary, AB T2S 0A8, Canada
Email: [email protected]
Phone: +1 (403) 782-9461
Please include sufficient detail in your request so that we can identify the personal information concerned and respond appropriately.
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, technology, or business operations. When we do, we will revise the effective date below and take reasonable steps to notify you of material changes, where appropriate.
Your continued use of our services after an updated Privacy Policy is posted indicates your acknowledgement of the revised policy, to the extent permitted by law.
Effective date: September 8, 2026