Privacy Policy

Depending on how you interact with us, we may store:

• photographs and other media, which may include your image, event, date, location, caption, team, race number, or other information connected with the photograph;
• your name and email address when you make a purchase, sign a contract, contact us, or ask us to exercise a privacy right;
• order contents, prices, discounts, payment and refund status, receipt references, licences, and download entitlements;
• contract records, correspondence, and enough information to identify and respond to a request; and
• technical and security information such as an IP address, browser or device information, referring page, and records of download attempts.

We do not receive or store your full payment-card number, card security code, or payment account credentials.

We use personal information only where reasonably necessary to:

• photograph, organise, display, license, sell, and deliver event, sport, and other photography;
• process orders, confirm payments and refunds, issue receipts, and provide secure downloads;
• administer photography bookings, permissions, and contracts;
• answer questions and handle access, correction, or removal requests;
• protect the website, prevent fraud or misuse, and investigate technical problems; and
• meet our accounting, contractual, and legal obligations.

We use your email address to send order confirmations, receipts, secure download links, refund or service notices, and messages needed to complete a booking or contract. We may also use it to reply to support, privacy, or image-removal requests and to locate records connected with your request.

We do not sell your email address or use it for unrelated marketing. If we introduce optional marketing communications, we will ask for consent separately and provide a way to unsubscribe.

Our website records and related personal information are stored in a database hosted by Supabase. Photographs and other media are stored and delivered using Cloudinary. These companies act as third-party service providers and process information needed to provide their hosting, database, storage, security, and delivery services.

You can read the providers' own policies in the Supabase Privacy Policy and the Cloudinary Privacy Policy.

We use access controls and other reasonable safeguards designed to protect stored information. However, no online transmission or storage system can be guaranteed to be completely secure.

We do not sell, rent, or trade your photographs, email address, or other personal information. We share information only with service providers that help us operate the website and deliver our services, with an event organiser where reasonably necessary to manage commissioned event coverage or a request, when you direct or authorise us to share it, or when disclosure is required by law.

Using Supabase, Cloudinary, Stripe, and other operational providers to store or process information on our behalf is not a sale of your information.

If you appear in a photograph and want it removed from this website, email legal@wideframe.photography. Include a link to the photograph or event, a description that lets us identify you and the image, and the reason for your request. A parent or legal guardian may make a request for a child. We may ask for reasonable proof of identity or authority before acting so that we do not remove or disclose information in response to an unauthorised request.

We will consider each request fairly and respond within a reasonable time. Removal is not automatic in every case. For an event or sports competition, the organiser may have commissioned or authorised the photography under a signed contract, and the organiser's entry terms, permissions, and legitimate event requirements may also apply. We may need to consult the organiser and consider contractual commitments, copyright, freedom of expression, public-interest or documentary value, completed customer purchases, and legal record-keeping obligations.

Where appropriate, we may remove the photograph from public display, restrict access, or take another reasonable step instead of deleting every copy. Removal from this website cannot retrieve copies already lawfully downloaded or purchased by others, and deletion from provider backups or caches may not be immediate. A contract with an event organiser does not remove any privacy rights you have under applicable law.

All card payments are completed through Stripe. Wide Frame Photography does not receive, process, or store your full credit or debit card number, card security code, or payment account credentials.

Stripe collects and processes payment-method and transaction information under its own privacy practices. We receive limited transaction details needed to confirm payment, issue receipts and refunds, prevent fraud, provide downloads, and maintain order records.

Read the Stripe Privacy Policy for details about how Stripe handles card and payment information.

You may ask what personal information we hold about you, request access to or correction of that information, or raise a concern about how it has been handled. Other rights may apply depending on where you live.

Send privacy questions and requests to legal@wideframe.photography. Please describe your request clearly and include enough information for us to locate the relevant record. Do not send payment-card details or unnecessary identity documents by email.