Privacy Policy

1. Personal information we collect

We collect personal information you provide to us directly, including when you:

• browse our website or submit an enquiry or contact form;
• enrol in, or ask about, a course;
• subscribe to our email list;
• contact our support team.

Categories of personal information we collect include:

• Identity and contact data — name, email address, phone number, and postal address;
• Enrolment data — course selections, enquiry details, and any information you share to help us support your learning;
• Technical data — IP address, browser type, device identifiers, referring URLs, and pages visited; and, where you have consented to non-essential cookies, on-site interaction data such as clicks, scrolling, and session recordings (see section 3);
• Marketing preferences — subscription status and responses to campaigns.

2. How we use your personal information

We use personal information to:

• respond to your enquiries and provide course information;
• process enrolments and coordinate access to our learning platform;
• send transactional communications (enrolment confirmations, course updates);
• send marketing communications where you have opted in, in accordance with the Unsolicited Electronic Messages Act 2007. Every marketing message identifies us as the sender and provides a functional unsubscribe option;
• improve our courses, website, and student support;
• comply with our legal obligations.

Submitting an enquiry or contact form on our website is treated as your consent for an NZPS team member to contact you about that enquiry by phone, SMS, or email. You can ask us to stop contacting you about a specific enquiry at any time.

3. Cookies, analytics and online tracking

Our website uses cookies and similar technologies. Non-essential cookies — including analytics and advertising cookies — are only set if you give us consent via our cookie banner.

With your consent, we use Google Analytics 4 to understand how visitors interact with the site, and the Meta (Facebook) Pixel to measure the effectiveness of our advertising. These tools may share information with Google and Meta respectively.

With your consent, we also use a marketing attribution tool to help us understand which marketing channels lead to enquiries. Vendor details for this tool are being finalised; this clause will be updated with specifics once confirmed.

We use Statsig, a product analytics and experimentation provider, in two ways. First, we set a random, non-identifying code in a cookie on every visit (regardless of your cookie choice, similar to a load-balancing cookie) so that if we are trialling two versions of a page, you consistently see the same one; this does not involve Statsig receiving your name, email, or other identity information. Second, with your consent, we use Statsig’s browser-based tools for session replay and web analytics — recording how visitors browse the site so we can understand and improve the on-site experience. Form-field content is masked and not captured in a recording.

You can change or withdraw your consent to any of the above at any time using the “Cookie preferences” link in our website footer.

4. When we disclose your personal information

We share personal information only with parties who help us run the business, under agreements that require them to protect it. These include:

• LearnUpon — our online learning platform provider, once you enrol in a course;
• Vercel — website hosting;
• Sentry — error monitoring, to help us find and fix technical issues;
• Statsig — feature experimentation and, with your consent, session replay and web analytics (see section 3);
• attribution-app — an internal marketing-attribution service used to understand which channels bring visitors to our site;
• Professional advisors — accountants, lawyers, and auditors where needed;
• Government or regulators — when required by law.

We do not sell, rent, or trade your personal information.

5. Overseas disclosure

Some of our service providers operate outside New Zealand, including in Australia, the United States, and the European Union. Before sharing personal information overseas we take reasonable steps to ensure the recipient handles it in a way consistent with the Privacy Act 2020, or a comparable safeguard, as required by information privacy principle 12.

6. Data security and retention

We take reasonable steps to protect personal information from misuse, loss, unauthorised access, modification, and disclosure, including encrypted data transmission (HTTPS/TLS) and least-privilege access to our systems.

In the event of a privacy breach that has caused, or is likely to cause, serious harm, we will notify affected individuals and the Office of the Privacy Commissioner as required under Part 6 of the Privacy Act 2020.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, or to meet our legal obligations.

7. Your rights

Under the Privacy Act 2020 you have the right to:

• Access the personal information we hold about you;
• Correct any information that is inaccurate, incomplete, or out of date;
• Withdraw consent to marketing at any time;
• Ask us to delete information we are not required by law to keep;
• Complain to us about how we have handled your information (see section 9).

8. Children

Our courses are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

9. Complaints and contact

If you have a question, a request to exercise a privacy right, or a complaint, please contact us:

If you are not satisfied with our response, you can lodge a complaint with the Office of the Privacy Commissioner at privacy.org.nz.

10. Changes to this policy

We may update this policy from time to time. The current version will always be available at photographyschool.co.nz/privacy-policy.