PRIVACY NOTICE
Effective Date: May 1, 2026
Last Updated: September 8, 2026
Cornerstone Photography Group Inc ("we," "us," or "our") provides professional school photography services. This Privacy Notice explains how we collect, use, disclose, and safeguard the personal information of students, parents, guardians, and school staff ("you") when providing services to schools and operating our online viewing and ordering platform, powered by our partner, GotPhoto.
1. Our Role under US Privacy Laws
Depending on our agreement with your school or school district, we generally act as a Service Provider or Data Processor. The school acts as the primary Business or Data Controller. We collect and process student and parent data solely to fulfill our contract with the school.
2. Information We Collect
We collect information directly from schools to organize photo days, and directly from parents/guardians during the online ordering process.
From the School: Student first and last name, grade, teacher name, student identification number (ID), and parent/guardian contact information (email address and/or phone number).
From Visual Capture: Photographic images of students and staff.
From Parents/Guardians (During Ordering): Name, billing address, shipping address, email address, phone number, and payment information (processed securely through our third-party payment processors; we do not store full credit card details).
Automatically via Our Website/Platform: IP address, browser type, device identifiers, and usage data via cookies to ensure secure gallery access and platform functionality.
3. How We Use Your Information
We use the collected information strictly for business purposes defined by our contract with the school:
Matching student names and IDs to their respective photographs (tagging).
Creating secure, password-protected online viewing galleries.
Notifying parents/guardians when photos are ready for viewing and purchase.
Fulfilling, printing, and shipping photo orders.
Responding to customer service inquiries.
4. Information Disclosure and Sub-processors
We do not sell, rent, or lease your or your child’s personal information. We do not use student personal data or photos for targeted advertising. We share information only with trusted partners necessary to fulfill our services:
Platform Provider: We use GotPhoto Inc. to host our secure online galleries, manage access codes, and process shop orders. GotPhoto acts as a secure sub-processor.
Photo Labs & Shipping: We share names, photos, and shipping addresses with professional photo printing labs and shipping carriers (e.g., USPS, FedEx) to manufacture and deliver your orders.
Payment Processors: Payment transactions are handled entirely by secure, PCI-compliant third-party gateways (e.g., Stripe, PayPal).
Legal Compliance: We may disclose information if required by law, subpoena, or to protect the safety of students and the school environment.
5. Student Data Privacy (FERPA & State Student Privacy Acts)
We strictly adhere to student data privacy standards, including the Family Educational Rights and Privacy Act (FERPA) where applicable.
We use student data only for the authorized educational/school purpose for which it was provided.
We do not build commercial profiles of students.
We maintain strict administrative, technical, and physical safeguards to protect student data.
6. Data Retention and Security
We retain student images and data only for as long as necessary to fulfill ordering windows, archival requests from the school, or as mandated by our school contracts.
We and our platform provider, GotPhoto, implement industry-standard security measures—including data encryption in transit and at rest, secure access controls, and firewalls—to protect against unauthorized access or disclosure.
7. Your Rights and Choices
Depending on your state of residence (e.g., California, Virginia, Colorado, Texas, or others), you or the school acting on your behalf may have certain rights regarding personal data, including the right to access, correct, or delete personal information.
Because we process student data as a Service Provider to the school, requests to access, change, or delete student data should generally be directed to your school administration first. We will cooperate fully with the school to fulfill valid privacy requests. For data collected directly during a commercial purchase, you may contact us at [Insert Studio Email Address].
8. Contact Information
If you have any questions or concerns about this Privacy Notice or our data practices, please contact us at:
Cornerstone Photography Group Inc.
1781-A Dawes Rd. Mobile Al. 36695
customerservice@cornerstonephoto.net
251-634-1272
