Privacy Notice

• For bookings and enquiries: your name, phone/WhatsApp number, email, and any notes you share. • For school photo days: the school name, contact person, phone/email, estimated number of students, preferred dates, and services requested. • For student photo orders: the student's name, student ID, class/grade, the parent/guardian name and phone/email, delivery preference, payment method, and any receipt image you upload. • Photographs taken by our team during your booked session or a school campaign. • Basic technical data (IP address, browser user-agent) captured only in security audit logs to help detect abuse.

We use this information to: (a) confirm and deliver your booking or order; (b) contact you about your session or order; (c) match a student's photos to their account inside the student portal; (d) fulfil printing, framing, and delivery; (e) keep secure records for our own accounts and to answer follow-up questions from you.

Student photographs are stored in private object storage. Public previews inside the student portal are watermarked, downscaled, and served only to visitors who have entered the correct School Code + Student ID + private Access Code combination. Access codes are stored as bcrypt hashes, are rate-limited against brute-force attempts, and are never shown in the admin audit log. Original high-resolution files are released only when the order is fulfilled.

Only RPL studio staff can access booking, order, and photo records via a password-protected admin dashboard. We do not sell your data. We may share order-related details with a delivery courier or a printing partner strictly for the purpose of fulfilling your order.

Booking and enquiry records are kept for as long as they are useful to the enquiry and for the studio's own accounting. Student photos and orders from a school campaign are kept for the school academic year and up to 12 months after the campaign closes, then archived. You may ask us to delete your data earlier using the contact below.

Our website uses only essential cookies and browser storage needed to: (a) keep you signed in to the admin dashboard, (b) remember your language preference (English or Arabic), and (c) keep your short-lived student portal session while you are ordering photos. We do not run advertising trackers.

You may ask us at any time to: view a copy of the information we hold about you, correct anything that is wrong, or delete your booking/order/photo records. Requests should include enough detail for us to find the record (name, phone, order number or child's school + class).