Photom8 Privacy Policy

1. Who We Are

Photom8 is a multi-tenant photography workflow platform operated by Boshoff Technology Service Solutions Pty Ltd. Photom8 provides booking, event gallery, proofing, ordering, payment, invoicing, notification, storage and fulfilment tools for photographers, studios, schools, sport and event photography businesses.

Each tenant is responsible for the lawful collection and use of the personal information they upload or process through their workspace. Photom8 operates the platform and related infrastructure.

2. Personal Information We Process

We may process account details, contact details, phone numbers, email addresses, booking information, event access records, order and payment records, delivery details, proofing notes, uploaded photos, selected images, Google integration metadata, audit records, device information and support correspondence.

Where schools, event organisers or photographers upload participant or parent contact details, this may include minors' names, class/team details, parent email addresses and parent phone numbers for access-controlled event galleries.

3. Why We Process Information

We process information to provide tenant workspaces, authenticate users, manage bookings and event galleries, send notifications, process orders, generate invoices, support payment confirmation, deliver digital photo access where enabled, sync selected Google Calendar or Tasks entries, store originals in linked Google Drive where configured, prevent fraud, keep audit records and provide support.

4. Legal Basis and POPIA

Photom8 is designed for South African businesses and is operated with the Protection of Personal Information Act, 2013 (POPIA) in mind. Depending on context, processing may be based on consent, contract performance, legal obligations, legitimate operational interests, or the lawful instruction of a tenant acting as responsible party.

Tenants must ensure they have the necessary authority, consent or lawful basis before uploading participant, parent, client or event data.

5. Photos, Galleries and Access Control

Event galleries are access controlled. Users should only see events and images they are tagged in, invited to, or explicitly linked to by the tenant. Preview images may be watermarked and reduced quality. Originals are only released when the tenant's workflow allows it, such as after payment confirmation for digital downloads.

Invite links and access codes are intended for the recipient only and should not be shared publicly.

6. Google Integrations

If a user links Google, Photom8 may request permissions for sign-in, Calendar events, Tasks and Drive file storage. These permissions are used only to provide the selected integration, such as creating booking calendar entries, creating order tasks, or storing original image files in the user's linked Drive.

Photom8's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Facebook Reviews

Tenants may configure a Facebook reviews link and selected review excerpts for display on their tenant landing page. Tenants are responsible for ensuring that displayed review content is accurate, lawful and appropriately attributed.

8. Payments, Invoices and Providers

Photom8 may integrate with payment gateways, WhatsApp providers, email providers, SMS providers, courier providers, print labs and Google services. These providers process information according to their own terms and privacy policies. Photom8 does not store full card details.

9. Security and Retention

We use role-based access controls, tenant boundaries, secure password hashing, session controls, audit records and operational safeguards appropriate to the platform. No system is completely risk free, so users and tenants should protect passwords, invite links and access codes.

Information is retained for as long as needed to provide the service, comply with legal obligations, support audit requirements, resolve disputes and enforce agreements, unless a shorter retention period is configured or required by law.

10. Your Rights

Subject to applicable law, data subjects may request access, correction, deletion, restriction or objection to processing of their personal information. Requests relating to a tenant's gallery, event or order data may need to be handled by the relevant tenant as responsible party.

11. Contact

For privacy queries, contact Photom8 at info@boshoff.tech. For gallery, order or event-specific requests, contact the photographer, studio, school or organiser that provided access to the gallery.