Privacy Policy

1. Personal information we collect

We collect personal information you provide to us directly, including when you:

• browse our website or submit an enquiry or contact form;
• enrol in, or ask about, a course;
• subscribe to our email list;
• contact our support team.

Categories of personal information we collect include:

• Identity and contact data — name, email address, phone number, and postal address;
• Enrolment data — course selections, enquiry details, and any information you share to help us support your learning;
• Technical data — IP address, browser type, device identifiers, referring URLs, and pages visited; and, where you have consented to non-essential cookies, on-site interaction data such as clicks, scrolling, and session recordings (see section 3);
• Marketing preferences — subscription status and responses to campaigns.

2. How we use your personal information

We use personal information to:

• respond to your enquiries and provide course information;
• process enrolments and coordinate access to our learning platform;
• send transactional communications (enrolment confirmations, course updates);
• send marketing communications where you have opted in, in accordance with the Unsolicited Electronic Messages Act 2007. Every marketing message identifies us as the sender and provides a functional unsubscribe option;
• improve our courses, website, and student support;
• comply with our legal obligations.

Submitting an enquiry or contact form on our website is treated as your consent for an NZPS team member to contact you about that enquiry by phone, SMS, or email. You can ask us to stop contacting you about a specific enquiry at any time.

3. Cookies, analytics and online tracking

Our website uses cookies and similar technologies. Essential cookies and Google Analytics are always used; advertising cookies and the other tools below are only used if you give us consent via our cookie banner.

We use Google Analytics 4 to understand how visitors use the site, such as which pages are viewed and how visitors arrive. It sets analytics cookies on every visit, with IP addresses anonymised, and shares this usage information with Google. With your consent, we also use the Meta (Facebook) Pixel and Google advertising cookies to measure the effectiveness of our advertising; these share information with Meta and Google respectively.

With your consent, we also use a marketing attribution tool to help us understand which marketing channels lead to enquiries. Vendor details for this tool are being finalised; this clause will be updated with specifics once confirmed.

With your consent, we also use our own website analytics platform, operated by our parent company Learning Online Group, to produce click and scroll heatmaps and to record a sample of visits as session recordings. A session recording captures how the page looked and how you moved, clicked and scrolled through it, so we can find and fix parts of the site that are confusing or broken. Anything you type into a form field is masked in your browser before the recording is sent, so it is never captured. Recordings are not used to identify you, are stored in Google Cloud in Sydney, Australia, and are automatically deleted after six months.

You can change or withdraw your consent to any of the above at any time using the “Cookie preferences” link in our website footer.

4. When we disclose your personal information

We share personal information only with parties who help us run the business, under agreements that require them to protect it. These include:

• LearnUpon — our online learning platform provider, once you enrol in a course;
• Vercel — website hosting;
• Sentry — error monitoring, to help us find and fix technical issues;
• Google Cloud — storage of session recordings, with your consent (see section 3);
• attribution-app — an internal marketing-attribution service used to understand which channels bring visitors to our site;
• Professional advisors — accountants, lawyers, and auditors where needed;
• Government or regulators — when required by law.

We do not sell, rent, or trade your personal information.

5. Overseas disclosure

Some of our service providers operate outside New Zealand, including in Australia, the United States, the United Kingdom, and the European Union. Before sharing personal information overseas we take reasonable steps to ensure the recipient handles it in a way consistent with the Privacy Act 2020, or a comparable safeguard, as required by information privacy principle 12.

6. Data security and retention

We take reasonable steps to protect personal information from misuse, loss, unauthorised access, modification, and disclosure, including encrypted data transmission (HTTPS/TLS) and least-privilege access to our systems.

In the event of a privacy breach that has caused, or is likely to cause, serious harm, we will notify affected individuals and the Office of the Privacy Commissioner as required under Part 6 of the Privacy Act 2020.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, or to meet our legal obligations. Session recordings are deleted automatically six months after they are made.

7. Your rights

Under the Privacy Act 2020 you have the right to:

• Access the personal information we hold about you;
• Correct any information that is inaccurate, incomplete, or out of date;
• Withdraw consent to marketing at any time;
• Ask us to delete information we are not required by law to keep;
• Complain to us about how we have handled your information (see section 9).

8. Children

Our courses are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

9. Complaints and contact

If you have a question, a request to exercise a privacy right, or a complaint, please contact us:

If you are not satisfied with our response, you can lodge a complaint with the Office of the Privacy Commissioner at privacy.org.nz.

10. Changes to this policy

We may update this policy from time to time. The current version will always be available at photographyschool.co.nz/privacy-policy.