Privacy policy

One Two Shoot Media Pty Ltd Last Updated: 23/12/2024

 

TABLE OF CONTENTS

  1. What is "personal information"?

  2. What information do we collect?

  3. Digital Assets and Content

  4. How we collect your personal information

  5. Third-Party Service Providers

  6. Drone Services and Privacy

  7. Purpose of collection

  8. Data Security

  9. Access and correction

  10. Complaint procedure

  11. Overseas transfer

  12. Changes to this Policy

  13. Contact Information

 

 

1. WHAT IS "PERSONAL INFORMATION"?

1.1 Definition

The Privacy Act 1988 (Cth) currently defines "personal information" as meaning information or an opinion about an identified individual or an individual who is reasonably identifiable: (a) whether the information or opinion is true or not; and (b) whether the information or opinion is recorded in a material form or not.

1.2 Non-Identifiable Information

If the information does not disclose your identity or enable your identity to be ascertained, it will in most cases not be classified as "personal information" and will not be subject to this privacy policy.

2. WHAT INFORMATION DO WE COLLECT?

2.1 Types of Personal Information

The personal information which we collect and hold about you may include:

  • Login credentials

  • Payment details

  • Email address

  • Name

  • Phone number

  • Physical address

  • Digital assets (photographs and videos) in which you appear

  • Business information provided for commercial services

  • Location data when relevant to our services

  • Booking preferences and service history

  • Communications with us through our client management system

3. DIGITAL ASSETS AND CONTENT

3.1 Digital Assets Management

We store and manage photographs, videos, and drone footage ("digital assets") created during our service delivery:

  • These assets are stored securely using industry-standard encryption and access controls

  • We maintain backup copies of digital assets to prevent accidental loss

3.2 Content Featuring Minors

We take additional precautions with content featuring minors:

  • Such content is flagged and stored with restricted access

  • We require explicit parental/guardian consent for capturing and storing content featuring minors

  • Parents/guardians can request review, modification, or deletion of content featuring minors

3.3 Retention Periods

  • We retain digital assets for a period of 12 months after service delivery

  • Extended storage periods can be arranged by written agreement

  • After the retention period, assets will be securely deleted unless otherwise agreed

4. HOW WE COLLECT YOUR PERSONAL INFORMATION

4.1 Collection Methods

We collect personal information:

  • Directly through our website

  • Through our client management system

  • During service delivery

  • Through communication with our team

  • Via our drone operations

4.2 Website and Technology

  • We use cookies and similar technologies to enhance website functionality

  • Our analytics tools collect usage data to improve our services

  • We employ third-party services for website functionality and security

5. THIRD-PARTY SERVICE PROVIDERS

5.1 Types of Service Providers

We use the following types of third-party service providers:

5.1.1 Client Management System

  • Purpose: Managing client relationships, quotes, and invoices

  • Data shared: Contact details, service requirements, payment information

  • Security: Data is encrypted and protected per industry standards

5.1.2 Payment Processors

  • Purpose: Processing client payments

  • Data shared: Payment details, transaction information

  • Security: All payment data is encrypted and processed according to PCI DSS standards

5.1.3 Media Storage/Delivery Services

  • Purpose: Secure storage and delivery of digital assets

  • Data shared: Digital assets, delivery information

  • Security: Enterprise-grade encryption and access controls

5.1.4 Analytics Tools

  • Purpose: Website performance and user experience optimisation

  • Data collected: Usage patterns, device information

  • Privacy: Data is anonymised where possible

6. DRONE SERVICES AND PRIVACY

6.1 Compliance

  • We operate under CASA regulations and hold appropriate licences

  • We follow aviation privacy guidelines as outlined in the Civil Aviation Safety Regulations 1998

6.2 Privacy Considerations

  • We minimise incidental capture of non-subject people and properties

  • We maintain flight logs recording operation areas and times

  • We obtain necessary permissions for flying in restricted areas

  • We provide notice to affected parties when conducting drone operations in populated areas

7. PURPOSE OF COLLECTION

7.1 Primary Purposes

We collect and use personal information to:

  • Provide our photography, videography, and drone services

  • Manage client relationships

  • Process payments

  • Deliver digital assets

  • Improve our services

  • Comply with legal obligations

7.2 Direct Marketing

  • We may use your personal information for direct marketing

  • You can opt-out of direct marketing at any time

  • We do not use sensitive information for marketing

  • All marketing communications include opt-out options

8. DATA SECURITY

8.1 Security Measures

We protect your personal information using:

  • Industry-standard encryption

  • Secure access controls

  • Regular security updates

  • Staff training on data protection

  • Secure backup systems

8.2 Breach Notification

  • We will notify affected individuals and the OAIC of eligible data breaches

  • Our breach response includes immediate containment and investigation

  • We maintain a data breach response plan

9. ACCESS AND CORRECTION

9.1 Your Rights

  • Under Australian Privacy Principle 12, you can access your personal information

  • Under Australian Privacy Principle 13, you can correct inaccurate information

  • Contact us via [email protected] for access or correction requests

10. COMPLAINT PROCEDURE

10.1 Making a Complaint

  • Contact us at [email protected] with privacy complaints

  • We will investigate and respond within 30 days

  • Unresolved complaints can be directed to the Office of the Australian Information Commissioner

11. OVERSEAS TRANSFER

11.1 International Data Transfer

  • Your personal information will not be disclosed overseas without explicit consent

  • If requested, overseas recipients may not be bound by Australian Privacy Principles

  • We are not liable for overseas handling of your information when transferred at your request

12. CHANGES TO THIS POLICY

12.1 Policy Updates

  • We may update this policy to reflect changes in our practices

  • Changes will be notified via our website

  • Continued use of our services constitutes acceptance of updates

13. CONTACT INFORMATION

13.1 Contact Details

For privacy matters, contact us through: