Privacy Policy
Last updated: 30 September 2026
Wonderferris is an Auckland-based photography business providing family, commercial, brand, event and other photography services.
We respect your privacy and take care with the personal information we collect and hold. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, the services we use to help operate our business, and the rights you have under New Zealand privacy law.
This policy applies to information collected through the Wonderferris website, enquiry and booking forms, email, social media, photography sessions, client galleries, competitions, promotions, advertising and other interactions with Wonderferris.
1. Who we are
Wonderferris
Auckland, New Zealand
Privacy contact: info@wonderferris.com
Wonderferris is responsible for the personal information we collect and hold as described in this Privacy Policy.
2. What personal information we collect
The information we collect depends on how you interact with us. This may include:
- your name
- email address
- phone number
- business name and job title, where relevant
- billing and invoicing information
- information about the photography service you are interested in or have booked
- preferred dates, locations and session details
- information you provide about your family, team, business or event
- information contained in emails, messages, forms and other communications with us
- photographs and video captured as part of a photography service
- information you provide when entering a competition, giveaway or promotion
- information you provide when subscribing to our mailing list
- information about your interactions with our website, including pages visited, device and browser information, approximate location and how you reached our website
- information relating to advertisements and links through which you reached our website.
We aim to collect information that is reasonably necessary for the relevant purpose and avoid collecting information that we do not need.
3. How we collect your information
We generally collect personal information directly from you, including when you:
- contact us through our website
- submit an enquiry or booking form
- email, call or message us
- book a photography session
- purchase a photography service or product
- subscribe to our mailing list
- enter a competition or promotion
- communicate with us through Facebook or Instagram
- interact with our website or online advertisements.
We may also receive limited information through third-party services that help us operate our website, advertising, booking, payment, gallery, email marketing and analytics systems.
Where we collect personal information indirectly, we will handle that information in accordance with the Privacy Act 2020 and applicable privacy requirements.
4. Why we collect and use your information
We may collect and use personal information to:
- respond to enquiries
- provide photography services
- arrange and manage photography sessions
- communicate with clients
- prepare quotes, invoices and agreements
- process payments
- deliver photographs and products
- provide online client galleries
- manage bookings and rescheduling
- provide customer support
- maintain appropriate business and financial records
- improve our website, services and customer experience
- send marketing communications where permitted and where you have chosen to receive them
- run competitions, promotions and special offers
- understand how people find and use our website
- measure the performance of our advertising
- protect our website, business and clients from fraud, misuse or security issues
- meet our legal, accounting and other regulatory obligations.
We will generally use personal information for the purpose for which it was collected, or for a related purpose that would reasonably be expected in the circumstances.
5. Our approach to photography and children’s privacy
Photographs are the service we provide, and photographs may contain identifiable people and personal information.
When you book a photography session with Wonderferris, we use photographs to provide the photography service you have purchased, including photographing, editing, storing and delivering your images to you through your client gallery.
We take additional care with photographs of children and young people.
Public use of photographs
We do not treat booking a photography session as permission for Wonderferris to publicly use identifiable photographs for our own advertising or promotional purposes.
In particular, we do not publicly publish identifiable, full-face photographs of minors as part of our general Wonderferris advertising or promotional activities.
Where photographs of children are used publicly by Wonderferris, we aim to use images where the child is not reasonably identifiable, such as photographs where their face is not visible or where the image and surrounding context do not reasonably identify them.
We may still photograph, edit, store and provide full-face photographs of children as part of the photography service booked by a client. Those photographs are provided privately to the client through their gallery and are not automatically intended for public use.
Identifiable promotional photographs
If we would like to use an identifiable photograph of a client or child for our own promotional purposes, we will seek appropriate permission before doing so.
Permission to photograph someone for the purpose of providing a photography service is therefore separate from permission to use that photograph for Wonderferris advertising or promotion.
This approach reflects our commitment to giving families greater control over whether their photographs are made publicly available.
The New Zealand Privacy Commissioner recommends particular care when collecting, using and sharing images of children and young people, including considering whether images could identify a child and whether their intended use is consistent with the purpose for which the image was collected.
6. Client galleries and Pixieset
We use Pixieset to provide online photography galleries and deliver photographs to clients.
When we create a client gallery, information such as your name, email address, gallery details and photographs may be processed or stored through Pixieset.
Pixieset may also process technical information when you access its services.
Your photographs may remain available through your client gallery for the period reasonably required to provide the service and for related business purposes.
Pixieset operates its own privacy and security practices.
7. Payments
We may use Stripe and/or PayPal to process payments.
When you make a payment through one of these services, payment information is provided directly to the relevant payment provider. We do not need to receive or store your full payment-card details in order to process your payment.
We may receive information such as:
- your name
- payment amount
- transaction date
- transaction status
- limited payment or transaction information needed for accounting and record-keeping.
Stripe and PayPal process personal information according to their own privacy policies and terms.
8. Email marketing and Klaviyo
We use Klaviyo to manage our email marketing and communications.
If you choose to join our mailing list, we may collect information such as your name, email address and your interactions with our emails.
This may include whether an email was delivered, opened or clicked, where supported by the email platform.
We use this information to:
- send newsletters and updates
- provide photography offers and promotions
- understand which content is useful to our subscribers
- manage our mailing list
- improve our marketing communications.
Klaviyo processes information as part of providing its email marketing services.
You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or contacting us directly.
Unsubscribing from marketing communications does not prevent us from sending necessary transactional or service-related communications, such as information about an existing booking.
9. Website, WordPress and Hostinger
Our website is built using WordPress and is hosted through Hostinger.
We use WordPress and associated plugins to operate and maintain our website, including functionality such as forms, security, website management, analytics and other features.
Depending on the plugins and website functionality in use, technical information such as IP address, browser type, device information and website activity may be processed.
Hostinger may process and store information as part of providing website hosting and related services.
We aim to use only website plugins and services that are reasonably necessary for operating and improving the Wonderferris website.
10. Google Cloud
We may use Google Cloud services for cloud storage, computing, website or business systems and related technical services.
Depending on the particular service being used, information may be stored or processed through Google Cloud infrastructure.
We configure our services and access controls with the aim of protecting information from unauthorised access or use.
11. Google Analytics
We use Google Analytics to understand how visitors use the Wonderferris website and how our marketing performs.
Google Analytics may collect information such as:
- approximate geographic location
- browser and device information
- pages visited
- interactions with the website
- session information
- information about how you arrived at our website
- technical identifiers such as cookies or similar identifiers.
We use analytics information to understand website traffic, improve our website and measure marketing effectiveness.
We do not intentionally send directly identifying personal information such as your name or email address to Google Analytics.
Google Analytics is operated by Google and is subject to Google’s own privacy practices.
12. Meta advertising and Meta Pixel
We may advertise Wonderferris through Facebook and Instagram, which are operated by Meta.
We may use the Meta Pixel and related Meta Business Tools on our website to help us:
- measure the effectiveness of our advertising
- understand how people interact with our website after seeing an advertisement
- measure conversions and enquiries
- create or improve advertising audiences
- show Wonderferris advertising to people who have interacted with our website or services, where permitted.
Meta may collect information about interactions with our website and advertisements through cookies, pixels and similar technologies.
If you interact with a Wonderferris advertisement, complete a Meta lead form, send us a message through Facebook or Instagram, or otherwise provide information to us through Meta, we may receive information that you choose to provide, such as your name, contact details and information about the photography service you are interested in.
Meta independently processes information through its platforms and services under its own privacy terms.
13. Cookies and similar technologies
Our website may use cookies and similar technologies.
Cookies may be used to:
- keep parts of the website functioning
- remember preferences
- understand website traffic
- measure advertising performance
- understand how visitors interact with our website
- improve website functionality and user experience.
Third-party services we use, including Google Analytics and Meta, may also use cookies, pixels or similar technologies.
You can manage or disable cookies through your browser settings. Disabling certain cookies may affect how parts of the website function.
Where required by applicable law, we will provide appropriate information and choices regarding cookies and tracking technologies.
14. Who we share personal information with
We may provide personal information to trusted third-party service providers where this is reasonably necessary to operate our business or provide our services.
Depending on how you interact with us, these providers may include:
| Service provider | Purpose |
|---|---|
| Pixieset | Client galleries and delivery of photographs |
| Stripe | Payment processing |
| PayPal | Payment processing |
| Klaviyo | Email marketing and mailing-list management |
| Google Analytics | Website analytics and measurement |
| Google Cloud | Cloud infrastructure and related services |
| Hostinger | Website hosting and related services |
| WordPress and relevant plugins | Website functionality, forms, security and management |
| Meta | Advertising, measurement and related Meta Business Tools |
These providers may process or store information outside New Zealand.
We do not sell your personal information.
We will not disclose personal information to unrelated third parties unless:
- you have asked us to do so;
- it is reasonably necessary to provide a service you have requested;
- we have another lawful reason to do so; or
- we are required or permitted to do so by law.
15. Overseas storage and processing
Some of the service providers we use operate internationally. As a result, personal information may be stored or processed outside New Zealand.
We select service providers that we consider appropriate for the services they provide and take reasonable steps to ensure personal information is handled appropriately.
Because these providers operate their own systems and infrastructure, the location where particular information is stored may change over time.
16. Keeping your information secure
We take reasonable steps to protect personal information from:
- loss
- misuse
- unauthorised access
- unauthorised disclosure
- alteration
- destruction.
These measures may include appropriate passwords, access controls, secure online services, device security, backups and limiting access to personal information to people who need it for legitimate business purposes.
No online system or electronic storage method can be guaranteed to be completely secure.
17. How long we keep information
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing our services, maintaining appropriate business and financial records, resolving disputes, protecting our business, or meeting legal obligations.
Different types of information may therefore be retained for different periods.
Photographs may be retained for a reasonable period after a photography service has been completed to allow us to provide ongoing access to galleries, respond to requests and maintain appropriate business records.
When personal information is no longer required, we will take reasonable steps to securely delete or dispose of it.
18. Your privacy rights
Under the New Zealand Privacy Act 2020, you have rights relating to personal information we hold about you.
You can ask us to:
- confirm whether we hold personal information about you
- provide access to the personal information we hold about you
- correct information that is inaccurate, incomplete or misleading
- explain how we are using your personal information.
To make a privacy request, contact:
We may need to take reasonable steps to confirm your identity before providing access to personal information.
We will respond to privacy requests within the timeframes required by applicable law.
19. If you choose not to provide information
Where practical, you may choose not to provide personal information.
However, some information is necessary for us to:
- respond to an enquiry
- arrange a booking
- provide photography services
- process a payment
- deliver photographs
- communicate with you about a service.
If you do not provide information that is necessary for one of these purposes, we may not be able to provide the relevant service.
20. Privacy concerns or complaints
If you have a question or concern about how Wonderferris has collected, used, stored or disclosed your personal information, please contact us first:
We will do our best to understand and resolve your concern.
You can also contact the Office of the Privacy Commissioner of New Zealand if you have concerns about how your personal information has been handled.
21. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to:
- our business
- the services we use
- our website
- technology
- advertising and analytics practices
- privacy laws and requirements.
The latest version will be published on our website with the updated date shown at the top.
Last updated: 30 September 2026