After Dark Media
Privacy Policy
Last updated: 24 July 2026
After Dark Media ("we", "us", "our") operates the client portal at
portal.afterdarkmedia.com.au, including photo galleries, an online print and
digital store, booking and quote enquiry forms, and client account
management. This policy explains what personal information we collect, how we
use it, and the choices you have. We are an Australian business and handle
personal information consistently with the Australian Privacy Principles under
the Privacy Act 1988 (Cth).
What we collect
- Account details: name, email address, and (for clients)
a securely hashed password. We never store passwords in readable form.
- Contact and enquiry information: name, email, phone
number, event details, and any message you send through a quote, booking,
or contact form.
- Gallery access: the email address or PIN you use to open
a private gallery, and a record of which galleries you have viewed or
downloaded from.
- Store purchases: items ordered, order totals, and the
name, email, and phone used at checkout. Card and payment details are
handled by our payment processors (PayPal and Stripe) and are never seen or
stored by us.
- Technical data: basic logs such as IP address, browser
type, and timestamps, used to keep the service secure and working.
How we use it
- To deliver galleries, fulfil store orders, and respond to your enquiries
and bookings.
- To send transactional email (gallery invites, order receipts, invoices)
and, where you have agreed, occasional updates. You can opt out of
non-essential email at any time.
- To operate, secure, and improve the portal.
We do not sell your personal information, and we do not trade in personal
information.
Who we share it with
We use trusted third-party services to run the portal. Personal information
is shared with them only as needed to provide the service:
- PayPal and Stripe: payment processing for store orders,
subject to their own privacy policies.
- Google: used in three ways: optional "Sign in with
Google" login; sending portal email through Gmail using authorised access;
and, where a client connects it, calendar sync. Any Google user data we
access is used solely to provide these features, is not used for
advertising, and is never transferred to others except as needed to provide
the service or as required by law. Our use of information received from
Google APIs adheres to the
Google
API Services User Data Policy, including its Limited Use requirements.
- Meta (Facebook / Instagram): only where a client
connects their own social account for publishing; we access it solely to
perform the actions that client requests.
- Cloudflare: secure file storage and content delivery
for your images.
- Resend: a backup email delivery service, used only to
send transactional email if Gmail is unavailable.
- Google Analytics: where a gallery has analytics enabled,
to understand how galleries are used (see Cookies below).
- Sentry: error monitoring that helps us detect and fix
faults; error reports may incidentally include technical data such as an
email or IP address.
Where your data is stored and how it's protected
Images and files are held in access-controlled storage and served only
through short-lived, private links. Accounts are protected with modern
password hashing and optional two-factor authentication and passkeys. Private
galleries require a link plus, where enabled, a PIN or password.
Cookies
We use a small number of essential cookies to keep you logged in and to
protect against cross-site request forgery. Where a gallery has analytics
enabled, Google Analytics sets cookies to measure how the gallery is used. We
do not use third-party advertising cookies.
Your rights
You can ask us to access, correct, or delete the personal information we hold
about you, and you can withdraw consent for non-essential email. Contact us
and we will action reasonable requests promptly.
Retention
We keep personal information only as long as needed to provide the service
and meet our legal and tax obligations, then delete or de-identify it.
Contact
After Dark Media
info@afterdarkmedia.com.au
If you are not satisfied with our response, you can contact the Office of the
Australian Information Commissioner (OAIC) at
oaic.gov.au.
Changes
We may update this policy from time to time. The "last updated" date above
reflects the current version.