1. Who We Are

Royal Rabbit Photography is a sole-proprietor sports photography business in Houston, Texas, operated by Issac Loya — issac@weareroyalrabbit.com. A portion of our business is in volume youth sports photography for leagues across Greater Houston.

2. What We Collect

We capture individual and team portrait photographs during scheduled sessions. We may collect:

• From parents/guardians: name, email address, and optionally a phone number from the consent form.

• From the league/organization: athlete roster data (name, age group, team) provided by the coordinator.

We do not collect payment card data, Social Security numbers, government IDs, or any sensitive personal information beyond what is listed above.

3. How Photos Are Stored & Delivered

• Editing: Photos are edited using Canva and similar professional creative platforms. Images uploaded to these platforms for editing purposes are subject to those platforms' own data handling terms and are removed from editing workspaces upon project completion.

• Printing & delivery: Royal Rabbit Photography partners with PhotoDay for print fulfillment and digital gallery delivery. Families receive a secure, time-limited gallery link through PhotoDay to view, download, and order prints. PhotoDay's own privacy policy governs data handled within their platform available at photoday.io.

• Primary/archive storage: All raw (unedited) files are stored on an encrypted, offline local drive that is not connected to the internet, accessible only to the photographer.

• No public posting: Photos are never posted to public galleries or stock photo sites without explicit marketing consent.

4. Retention & Deletion Schedule

• Project files & edited exports: Permanently deleted two weeks after the PhotoDay gallery closes for that session.

• Raw (unedited) files: Retained on an encrypted, offline local drive for 12 months from the session date, then permanently deleted.

• Re-downloads: While the PhotoDay gallery is active, families may re-download at any time. After gallery closure, re-download requests within the 12-month raw file window can be accommodated — email issac@weareroyalrabbit.com.

5. Who Has Access

• Photographer only: Full access to raw and edited files for editing, delivery, and archival.

• PhotoDay (delivery partner): Access to final edited images solely for gallery hosting, print fulfillment, and digital delivery to the parent/guardian.

• Editing platforms: Temporary access to images during the editing workflow only. Files are removed from these platforms upon project completion.

• League/organization: May receive a physical team photo file for their records. Individual portraits are delivered directly to the parent/guardian only.

• No other third parties: Photos are never shared, sold, or licensed to any outside company, advertiser, or data broker.

6. Children's Privacy (COPPA)

Some athletes we photograph are minors. We take the following specific steps to protect children's privacy:

• No personal data is collected directly from children — all information comes from a parent or legal guardian.

• We do not create online accounts for minors or share their images on social media without explicit parental opt-in.

• Children's images are not used for targeted advertising without affirmative parental consent.

• Parents may withdraw consent and request deletion at any time (see Section 7).

7. Your Rights

You have the right to request:

• Deletion: Permanent removal of all photos and associated data. Confirmed within 14 business days.

• Correction: Correction of any personal data we hold about you or your child.

• Copy: A copy of the personal data we hold related to you.

To make a request, email issac@weareroyalrabbit.com with the subject line "Privacy Request", including your name, your child's name, the league name, and the season/year.

8. Security Practices

We take reasonable measures to protect your data, including:

• AES-256 encryption on storage drives and cloud backup folders.

• Strong password protection on all storage and delivery accounts.

• Access restricted to the photographer — no shared credentials.

• Secure deletion when the retention period ends.

In the event of a breach affecting your child's photos, you will be notified via email as promptly as possible.

9. Contact

For any questions about this disclosure or our privacy practices:

10: PhotoDay Policies

https://www.photoday.com/privacy

Student photos and family information are used solely for picture day and related ordering purposes. PhotoDay does not sell personal data, and images are only accessible through secure, authorized access. Any optional photo-matching tools are used strictly to help families locate images more easily and are not required to place an order. PhotoDay uses industry-standard security measures to protect all data and complies with applicable student privacy laws.

Royal Rabbit Photography · issac@weareroyalrabbit.com · Houston, TX