Privacy Policy
Last updated: 14 October 2025
Who we are
Heading North Photography (“we”, “us”, “our”).
ABN: 44734855130
Website: https://headingnorth.au
Contact: Click Here
What we collect
- Contact forms: name, email, phone, reason, message. We also store your IP address, page URL, and the date for spam prevention and troubleshooting.
- Email: messages you send to our inbox.
- Orders: name, email, phone, billing and shipping details, items purchased, prices, and transaction IDs. Card data is handled by our payment providers, not by us.
- Technical data: basic logs for security and performance. This may include IP address, browser, and device info.
We do not sell personal data.
Why we collect it
- Reply to enquiries and provide support
- Process and deliver orders
- Prevent spam and abuse
- Keep the site secure and reliable
- Meet legal and tax obligations
Cookies
- Essential cookies keep the site working and remember preferences.
- If you log in or leave a comment, WordPress may set cookies to remember you.
- You can block cookies in your browser. The site may not work as expected.
Comments and media
If you leave a comment, we collect the data shown in the form, your IP, and user agent to help spam detection.
If you upload images, remove embedded location data. Visitors can download and extract location data from images on the site.
Anti-spam and bot protection
We use hCaptcha and a honeypot on forms. hCaptcha may collect device and interaction data to determine if a visitor is human. See hCaptcha’s policies:
- Privacy: https://www.hcaptcha.com/privacy
- Terms: https://www.hcaptcha.com/terms
Payments
Payments are processed by Stripe and/or PayPal. We receive confirmation of payment and the last four digits of a card where relevant. We do not store full card numbers.
Who we share data with
- Email and transactional mail providers to send messages and order emails
- Payment providers to process transactions
- Security, hosting, and CDN providers to run the site
- Couriers to deliver orders
These providers may process data in other countries. We use reputable vendors with appropriate safeguards.
How long we keep data
- Enquiry emails and form entries: up to 12 months
- Order records and invoices: 7 years for tax and accounting
- Server logs: up to 90 days
- Comments: kept indefinitely unless you ask us to remove them
Your rights
You can request access, correction, or deletion of your personal data. Contact us Here. We may need to keep some data for legal reasons.
Security
We use encryption in transit (HTTPS), access controls, and regular updates. No method is perfectly secure, but we take reasonable steps to protect your data.
Third-party links and embeds
Pages may include embedded content (for example videos). Third-party sites may collect data about you. Their policies apply.
Contact
Questions or requests: Click Here
Changes
We may update this policy. The “Last updated” date shows the latest version.