1. Introduction
This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our photography website and services. We are committed to protecting your privacy in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa.
POPIA Compliance Commitment
We process personal information in a lawful, reasonable, and non-intrusive manner, respecting your right to privacy as guaranteed by Section 14 of the Constitution of the Republic of South Africa.
2. Information We Collect
We may collect the following types of personal information:
- Contact Information: Name, email address, phone number, and physical address (provided via our enquiry form)
- Event Details: Date, venue, and nature of your photography requirements
- Images & Media: Photographs and video footage captured during sessions, which may include your likeness
- Technical Data: IP address, browser type, and device information when visiting our website
- Communication Records: Emails, messages, and notes from our interactions
3. How We Collect Information
- Directly from you through our enquiry form
- Via email, phone, or in-person consultations
- During photography sessions and events
- Automatically through cookies and website analytics
4. Purpose of Collection (Section 11 of POPIA)
We collect your personal information for the following lawful purposes:
- To respond to your enquiries and provide quotes
- To deliver photography services as requested
- To communicate regarding bookings, scheduling, and deliverables
- To process payments and maintain financial records
- To display portfolio work (only with your explicit consent)
- To comply with legal and tax obligations
5. Legal Basis for Processing
Under POPIA, we process your personal information based on:
- Consent: Where you have given explicit permission (e.g., for marketing or portfolio use)
- Contractual Necessity: To fulfil our agreement to provide photography services
- Legal Obligation: To comply with tax, accounting, and other statutory requirements
- Legitimate Interest: For website security, fraud prevention, and business operations
6. Consent
By submitting our enquiry form or engaging our services, you consent to the collection and processing of your personal information as described in this policy. You have the right to:
- Withdraw consent at any time
- Object to the processing of your personal information
- Request that we cease using your images for marketing or portfolio purposes
7. Data Sharing & Disclosure
We do not sell your personal information. We may share your data only with:
- Trusted service providers (e.g., printing labs, cloud storage providers) under strict confidentiality agreements
- Legal authorities when required by law or court order
- Professional advisors (e.g., accountants) for business compliance purposes
8. Data Security
We implement appropriate technical and organisational measures to protect your personal information against:
- Loss, theft, or unauthorised access
- Alteration, disclosure, or destruction
These measures include encrypted storage, secure servers, password protection, and restricted access to authorised personnel only.
9. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:
- Client files and images: Retained for the duration of our contractual relationship and up to 5 years thereafter for backup purposes
- Financial records: Retained for 5 years in accordance with tax legislation
- Enquiry form submissions: Retained for 12 months if no booking is confirmed, after which they are securely deleted
10. Your Rights Under POPIA
As a data subject, you have the following rights:
- Right to Access: Request a copy of the personal information we hold about you
- Right to Correction: Request that we correct inaccurate or outdated information
- Right to Deletion: Request deletion of your personal information where lawful
- Right to Object: Object to processing for direct marketing or legitimate interest purposes
- Right to Complain: Lodge a complaint with the Information Regulator if you believe your rights have been violated
11. Cookies & Website Tracking
Our website uses cookies to enhance your browsing experience. You can control cookie preferences through your browser settings. We use analytics tools to understand website traffic and improve our services.
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.
13. Cross-Border Transfers
If we transfer your personal information outside South Africa (e.g., to cloud storage providers), we ensure that the recipient country has adequate data protection laws or that appropriate safeguards are in place.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.
15. Information Officer
In terms of POPIA, we have appointed an Information Officer responsible for ensuring compliance with data protection laws.
Contact Us / Information Officer
For any privacy-related questions, data subject access requests, or POPIA concerns, please contact our Information Officer:
Email: feedback@miraistack.co.za
We will respond to all enquiries within 30 days in accordance with POPIA requirements.