Privacy Policy

DATA PRIVACY NOTICE FOR CUSTOMERS

GREAT IMAGE SERVICES CORPORATION is committed to protecting your personal data in compliance with Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and relevant issuances of the National Privacy Commission (NPC).

This Data Privacy Notice outlines how we collect, use, store, disclose, and dispose of your personal data when you visit our studio branches, engage our services, purchase our products, or interact with our digital platforms.

I. PERSONAL DATA WE COLLECT

We collect personal data directly from you during your interactions with our studio branches and online platforms:

• Identification & Contact Data: Full name, residential/billing address, date of birth, email address, mobile/telephone numbers, and online booking details.
• Service & Visual Data: Studio session booking records, package preferences, studio session photographs, retouched digital files, and raw images.
• Financial & Transaction Data: Payment history, e-wallet transaction IDs, official receipts, and refund requests. We do not store full credit/debit card details; payments are processed through secure gateways.
• Security Data: Video recordings, visual footage, and associated platform logs captured by CCTV cameras within our physical store premises for safety and security monitoring.
• Minors’ Data: Photographic images and identifying details of children or minors, collected strictly with the express, verifiable consent of a parent or legal guardian.
• Communication & Online Data: Customer service contact logs, technical device identifiers (IP address, browser type), session cookies, and digital consent records captured through our online platforms.

II. LAWFUL BASIS AND PURPOSES OF PROCESSING

We process your personal data based on the following legal grounds:

• Performance of Contract: To deliver studio photography services, execute photo editing and printing, fulfill package orders, manage session bookings, and process financial transactions.
• Compliance with Legal Obligations: To maintain statutory accounting ledgers, issue official receipts, comply with Bureau of Internal Revenue (BIR) regulations, and fulfill obligations under consumer protection laws.
• Legitimate Interest: To maintain physical store security via CCTV surveillance, optimize studio operations, prevent fraudulent transactions, and manage service continuity.
• Consent: Direct marketing (promotions, updates) and public display of photographs (store display samples, print catalogues, social media) are strictly voluntary. You may withdraw consent at any time without affecting the delivery of our core photographic services.

III. DATA SHARING AND DISCLOSURE

We do not sell, rent, or trade your personal data. We disclose your personal data only to authorized third parties bound by strict confidentiality obligations:

• Authorized Service Providers: Third-party cloud storage vendors, secure payment gateways, IT infrastructure providers, and logistics or courier partners.
• Government Authorities: Law enforcement or regulatory bodies (e.g., BIR, NPC, courts) when required by applicable laws, subpoenas, or legal processes.

IV. DATA RETENTION AND SECURE DISPOSAL

• Transaction & Tax Records: Retained for up to ten (10) years from the transaction date in compliance with BIR regulations and statutory accounting rules.
• Digital Soft Copies & Raw Photo Files: Retained on secure studio servers and storage systems for up to thirty (30) years for archival preservation, service continuity, and re-ordering. Files are permanently erased upon a formal customer deletion request.
• Security CCTV Footage: Retained on a rolling cycle only for as long as necessary to maintain physical store safety, fulfill legal obligations, or defend legal claims, after which data is automatically overwritten or erased.
• Marketing & Consent Records: Retained until you formally withdraw your consent.
• Minors’ Data: Retained only for the duration necessary to deliver the service, unless extended retention is expressly authorized by a parent or guardian.
• Disposal Protocol: Physical records are destroyed via cross-cut shredding. Digital assets and storage media are permanently purged using secure digital wiping, degaussing, or physical destruction.

V. SECURITY MEASURES

• Great Image enforces organizational, physical, and technical security measures to safeguard your personal data, including role-based access controls and encrypted storage for digital assets.
• In the event of a security incident or personal data breach, Great Image will take immediate containment measures and notify affected data subjects and the NPC in accordance with Republic Act No. 10173 and NPC Circular 2016-03.
• Online transactions are processed through secure, encrypted payment gateways implementing SSL/TLS protocols.
• Access to photo files, client records, and store security systems is restricted to authorized personnel on a strict need-to-know basis.
• Third-party service providers, cloud infrastructure vendors, and platform partners are contractually required to implement equivalent safeguards under RA 10173.

VI. YOUR DATA SUBJECT RIGHTS

Under the Data Privacy Act of 2012, you are entitled to the following rights:

• Right to be Informed: To know how your personal data is collected, processed, stored, and secured.
• Right to Access: To request reasonable access to your personal information and processing records.
• Right to Object: To object to data processing based on consent or legitimate interest, including direct marketing.
• Right to Rectification: To request the correction of inaccurate or outdated personal data.
• Right to Erasure or Blocking: To request the suspension, withdrawal, or deletion of your personal data based on valid legal grounds.
• Right to Data Portability: To request an electronic copy of your account data and transaction history in a structured format. *Note: Applies strictly to account/transaction records, not copyrighted studio photo assets.
• Right to Indemnification: To be indemnified for damages sustained due to inaccurate, false, unlawfully obtained, or unauthorized use of personal data.
• Right to File a Complaint: To lodge a formal complaint with the National Privacy Commission (NPC).

VII. CONTACT OUR DATA PROTECTION OFFICER (DPO)

To exercise your rights, submit inquiries, or lodge privacy concerns, please contact our Data Protection Officer:

Email: greatimage.dpo@gmail.com
Contact Number: +63 998 864 2970

Last modified: 18 September 2026