Privacy Policy

EverGrace Photography respects the privacy of website visitors, prospective clients and clients. Personal information is processed in accordance with applicable South African law, including the Protection of Personal Information Act 4 of 2013, commonly known as POPIA.

This notice describes what information is collected, why it is collected, how it is used and protected, when it may be shared, how long it may be kept, and the rights available to you.

EverGrace Photography is the responsible party for personal information processed through this website and its photography services where applicable.

Business name

EverGrace Photography

Email

hello@evergrace.photography

When you submit a photography enquiry, the website may collect your full name, email address, telephone or WhatsApp number, preferred photography service, preferred date and location, number of participants, message, and an optional inspiration image.

Client records may also include booking details, correspondence, shoot dates, delivery estimates, client codes, gallery links, and service notes. This information is used to respond to enquiries, check availability, prepare quotations, arrange and deliver photography services, communicate before and after a session, provide galleries, maintain business records, and meet legal obligations.

Information may also be provided directly through email, telephone, WhatsApp, Instagram, Facebook, Messenger, or a Meta lead form. Information submitted through those platforms is also processed by the relevant platform under its own privacy terms.

Information is processed only where there is an appropriate reason, such as your consent, taking steps requested before a booking, performing a photography agreement, complying with a legal obligation, or pursuing a legitimate business interest that does not unfairly override your rights.

EverGrace Photography aims to collect only information that is adequate, relevant and reasonably necessary for the stated purpose. Sending an enquiry does not amount to unlimited consent for future marketing.

Photographs may be processed to perform the photography service. Permission to publish identifiable photographs on a portfolio, website, social media or other promotional channel is separate from a normal enquiry and must be obtained appropriately. Accepting this policy does not grant permission to publish client images.

The website is not directed at children and does not intentionally collect personal information directly from children for marketing. Where information or photographs concerning a child are required for a photography service, they should be supplied or authorised by a parent, guardian or other competent person as required by law. Publication of a child’s image is not authorised merely by accepting this policy.

You may choose to contact EverGrace Photography through WhatsApp or Meta services such as Facebook and Instagram. Meta and WhatsApp independently process information under their own terms and privacy practices, and EverGrace Photography does not control that independent processing.

The website uses Base44 for website hosting, data storage and related application services. Personal information may be shared with service providers only where reasonably necessary to operate the website or provide the requested service, and appropriate confidentiality and security safeguards should apply.

Third party links may lead to services with their own privacy practices. This does not remove responsibility for service providers that process information on behalf of EverGrace Photography.

No optional analytics or advertising tracking technology is currently installed on this website. Essential browser storage or similar technology may be used where needed for secure site and administration functions. For this reason, the website does not currently display a non essential cookie consent banner.

Base44, Meta, WhatsApp and other services you choose to use may process or store information outside South Africa. Where EverGrace Photography is responsible for a cross border transfer, reasonable steps will be taken to use a lawful safeguard required by POPIA. The website does not claim that all information remains in South Africa.

Reasonable technical and organisational safeguards are used to protect personal information against loss, misuse, unauthorised access, disclosure, alteration or destruction. No internet based service can guarantee absolute security.

Suspected personal information security compromises will be handled in accordance with applicable legal obligations. Affected people and the Information Regulator will be notified where legally required.

Information is kept only as long as reasonably necessary for the purpose for which it was collected, contractual and legal duties, accounting records, dispute handling, and legitimate business recordkeeping. When it is no longer lawfully required, it should be deleted, destroyed or appropriately de identified.

Subject to POPIA and other applicable law, you may ask whether personal information is held about you, request access, request correction of inaccurate or incomplete information, request deletion where legally appropriate, object to certain processing or direct marketing, withdraw consent where processing relies on consent, and lodge a complaint with the Information Regulator.

Some requests may be limited where processing or retention is required by law. Reasonable information may be requested to verify your identity before personal information is released or changed, but excessive identity documents will not be requested by default.

You may learn more or lodge a complaint through the official Information Regulator South Africa website. Access to records may also be governed by the Promotion of Access to Information Act 2 of 2000.

To make an access, correction or deletion request, object to marketing, or raise a privacy complaint, contact EverGrace Photography at hello@evergrace.photography.

This policy may be updated when services, processing activities, integrations or legal requirements change. Material changes do not create retroactive consent for unrelated processing.