Privacy Policy

This policy explains how Snapart Photography (“Snapart”, “we”, “us”) collects and uses personal data through this website, where graduates and their families can buy prepaid photo packages and, once the ceremonies have taken place, view and buy event photographs. It covers everyone whose personal data we may hold: account holders, and other people who appear in the photographs (fellow graduates, family, guests, staff) who may never create an account.

For any privacy question or request, contact us at info@snapartfoto.com. You also have the right to complain to the Information and Data Protection Commissioner (IDPC), Malta.

The data we collect

Account information. When you register we collect your name, email address, phone number, and a securely hashed password. We use this to run your account, take orders and contact you about them.

Photographs. Snapart photographs graduation and other events. Those photographs show the graduate and, often, other identifiable people. We hold the photographs to sell them to the people entitled to buy them.

Orders and payments. When you buy prints, digital downloads, frames or packages we record the items, sizes, quantities, amounts and payment status. Card payments are processed by our payment provider; Snapart does not receive or store your full card number.

Photoshoot bookings. If your package includes a photoshoot, we record the date and time you book and, for an on-location shoot, the photographer, so the shoot can take place.

Technical data. We process limited technical data such as your IP address (to protect the site against abuse) and essential cookies needed to keep you logged in.

Assistant conversations. If you use the site’s help assistant, we process the messages you send it in order to answer your questions. We keep a copy of these conversations so we can check the assistant’s answers and improve them. If you are logged in, the conversation is saved with your account, so you can pick it up next time, and each message is deleted automatically 120 days after it was sent. If you are not logged in, the copy is kept without your name, with email addresses and phone numbers removed, and is deleted automatically after 7 days. If you ask to speak to someone, the assistant passes your name, phone number or email and a short note of what you need to our team so we can call you back; we keep that request until we have called you and delete it 30 days afterwards.

Messages on Facebook Messenger and WhatsApp. If you message us on Messenger or WhatsApp, those messages reach us through Meta, which runs those services under its own privacy policy. General questions may be answered by our AI assistant rather than a person; it only answers general questions and cannot see your account, orders or photos. You can ask for a person at any time, and the studio team can take over the conversation. Please don’t send personal details such as order numbers or payment details there — for anything about your own order or photos, log in on this website.

Why we use your data

We use your data to create and run your account, to sell and deliver photographs, prints, downloads and packages, to arrange photoshoots, to take payment, to keep the tax and accounting records the law requires, to protect the site against abuse and fraud, and to answer your enquiries.

How long we keep it

Account and order records are kept while your account is active and thereafter as required for tax, accounting and dispute handling. Purchased full-resolution photo copies exist online only for your download window, after which they are deleted from the site. Photographs are kept only as long as needed for the purposes above; when a retention period ends, or we no longer have a lawful basis, we delete or anonymise the data. Our copies of Messenger and WhatsApp messages are deleted automatically 30 days after the last message in the conversation (Meta keeps its own copy under its own policy). Conversations with our assistant on this website are deleted automatically 120 days after each message if you were logged in, or after 7 days if you were not.

Who we share it with

We do not sell your personal data. We share it only with service providers who help us run the site, and only as needed: our payment provider (to take payment), our email provider (to send order and account emails), our hosting provider (our servers are located in the EU), and — only if you choose to sign in with Google — Google, which confirms your identity to us and tells us your name and email address. Messages you send our assistant, on this website or on Messenger or WhatsApp, are processed by the AI provider that powers it (Anthropic) to produce a reply, which may involve processing outside the EU under appropriate safeguards; messages sent on Messenger or WhatsApp also pass through Meta. We never share your data with advertisers.

Your rights

Subject to the conditions in data-protection law, you have the right to access your data, correct it, erase it, restrict or object to processing, and data portability; and where we rely on consent, to withdraw that consent at any time.

People who appear in photos but do not have an account have these rights too. If you were photographed at an event and want to see, or ask us to remove, images relating to you, contact us at info@snapartfoto.com with enough detail to identify the photographs (event, date, and a way to recognise you). We respond to requests within the time limits set by law, normally one month.

Security

We protect your data with measures including encrypted connections (HTTPS), hashed passwords, access controls, and keeping full-resolution original photographs in private storage that is not publicly reachable. No system is perfectly secure, but we take steps appropriate to the sensitivity of the data we hold.

Cookies

We use essential cookies only — the ones needed to keep you signed in and keep the site secure. We use no tracking or advertising cookies. You can control cookies through your browser; disabling essential cookies may stop parts of the site working.

Children

Event photographs may include children among family and guests. We treat such images with particular care, and a parent or guardian may exercise the rights above on a child’s behalf by contacting us.

Changes to this policy

We may update this policy — the current version, with its date, always lives on this page. Where changes are significant, we will tell account holders.