Privacy
This page covers this website, our events, our emails and the photos we take. Booking on our events site has its own page with the details: the events site's privacy page.
On these pages
These pages set no cookies and have no advertising or visitor tracking. The contact form uses Cloudflare Turnstile to stop spam. It looks at your browser, not at what you type.
When you write to us
The contact form asks what it's about, when, your name, your email, your phone if you give it, and your message. It waits on our server only until our office picks it up, usually within a minute, and then the words are wiped there. From then on it's in our email and our client list, like any email you send us.
What we keep, and why
- Your name, email and phone, and what you've booked or bought with us: to run your session, deliver your prints and orders, and answer you.
- Your yes to news and offers, with the words you said yes to and when. We send news only with that yes, and every email has an unsubscribe link.
- For a business we work with: its contacts and our agreement, to plan and run the event.
- Business contact details a business publishes or gives us, like an office listing or a business card: to offer that business our services.
- The photos from your session.
Your photos
We don't put your photos, or your pet's, on our website or social media without your permission.
On a sponsored day, the business that hosts it receives copies of the photos from the day.
Who helps us
- Google: our email.
- Amazon Web Services, in Canada: the emails our events site sends.
- Square: card payments. We never see your card number.
- Cloudflare: the spam check on our forms.
- Anthropic: the AI behind our help chat, which also helps us sort and draft our email. It handles your words in the United States, and its commercial terms say it doesn't train its models on them.
- DigitalOcean: the server our websites run on, in Toronto.
Where it's kept
Our client list and photos are on our own computers and backup drives in Toronto. Our websites run on a server in Toronto. Some of the services above are in the United States, so your details can be handled under the laws there.
How long we keep it
- Bookings on our events site: deleted 90 days after the event.
- A contact form message: wiped from our server once our office has it.
- Records of what you bought: six years, as Canada's tax rules require.
- Your details and the photos from your session: three years after we last hear from you, so you can order again. Then we delete them.
What you can ask
You can ask what we hold about you, ask us to correct it, withdraw your yes to news at any time, or ask us to delete your details. We keep only what the law requires, like sales records. Write to info@pristinephotos.ca.
Brian Quach, the owner, is responsible for privacy at Pristine Photos.
If you're not happy with our answer, you can contact the Office of the Privacy Commissioner of Canada.
Changes
When this page changes, we update the date below.
Last updated: November 2026.