Privacy Policy

Last updated: 20 September 2026


At Haus of Caro, I respect your privacy and am committed to handling your personal information responsibly. This Privacy Policy explains what personal information I may collect when you visit my website, contact me, enquire about or book my photography services, and how I use, store and protect that information.


Where applicable, this Privacy Policy is intended to address the requirements of the Australian Privacy Act 1988 and the EU General Data Protection Regulation (GDPR).


1. Who I am

Haus of Caro

Carolin Dorra

Melbourne, Victoria

Australia

Email: hello@hausofcaro.co


For the purposes of applicable data protection laws, I am responsible for the processing of your personal information described in this Privacy Policy.


2. Information I collect

Depending on how you interact with me, I may collect personal information such as:

  • your name
  • email address and phone number
  • wedding or session date and location
  • information you choose to share about yourselves, your plans and your photography preferences
  • correspondence between us
  • booking, contract and enquiry information
  • payment and invoicing information
  • photographs and other content created as part of my photography services
  • information relating to your use of my website, such as your IP address, browser type, device information and interactions with the website.

I only collect information that is reasonably necessary for the purposes described in this Privacy Policy.


3. How I collect your information

I generally collect personal information directly from you when you:

  • submit an enquiry through my website
  • contact me by email or social media
  • enquire about or book my services
  • enter into a contract with me
  • communicate with me before, during or after your photography session or wedding
  • provide information in connection with a payment or booking.

Some technical information may also be collected automatically when you visit my website through cookies and similar technologies.


4. How I use your information

I may use your personal information to:

  • respond to enquiries and communicate with you
  • prepare quotes, contracts and invoices
  • manage bookings and provide my photography services
  • plan and deliver photography sessions and weddings
  • deliver photographs and online galleries
  • process payments
  • maintain business, tax and accounting records
  • communicate with you about your booking or enquiry
  • operate, maintain and improve my website
  • understand how visitors use my website
  • measure and improve the effectiveness of my advertising and marketing
  • send marketing communications where permitted by applicable law and, where required, with your consent
  • protect the security and integrity of my website and business
  • comply with legal obligations and resolve disputes.

I do not sell or rent your personal information.


5. Legal basis for processing

Where the GDPR applies, I process personal information on one or more of the following legal bases, depending on the circumstances:

  • Performance of a contract: I may process your information where this is necessary to respond to an enquiry, prepare for or perform a photography contract, deliver photographs or otherwise provide services you have requested.
  • Legal obligations: I may process information where necessary to comply with legal, tax, accounting or other obligations.
  • Legitimate interests: I may process information where this is necessary for the operation, security and improvement of my business, website and services, provided that these interests are not overridden by your rights and interests.
  • Consent: Where I rely on your consent, for example for certain optional cookies, marketing communications or the use of photographs for promotional purposes, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.


6. Photography and client images

Photographs created as part of my photography services are personal information where they identify or can reasonably be associated with an individual.

I use photographs primarily to provide the photography services you have booked, including editing, storing and delivering your images through an online gallery.

I may also wish to use selected photographs for my portfolio, website, social media, advertising, publications or other promotional purposes. Where consent is required, I will obtain that consent separately. Agreeing to photography services does not automatically mean that you consent to your photographs being used for promotional purposes.

If you have provided consent for promotional use, you may withdraw that consent at any time for future use. Withdrawal does not affect promotional use that was lawfully carried out before your consent was withdrawn.


7. Third-party service providers

I use third-party services to operate my website, understand how visitors use my website and promote my photography services. These services may process personal information in accordance with their own privacy policies.


The services I use include:

  • Google Analytics: I use Google Analytics to understand how visitors interact with my website, including information about website traffic, pages visited, interactions and general usage patterns. Google Analytics may use cookies and similar technologies to collect this information.
  • Google Ads: I use Google Ads to advertise Haus of Caro and measure the effectiveness of my advertising campaigns. Depending on the configuration of my advertising services, Google may use cookies and similar technologies to measure interactions with advertisements and website activity.
  • META: I use Meta services, including Instagram and Facebook, to showcase my photography, communicate with potential clients and promote my services. Where applicable, Meta's advertising and measurement technologies may process information about interactions with my website and advertisements.

Some of these providers may process or store personal information outside Australia and/or outside the European Economic Area (EEA). Further information about international data transfers is provided below.


8. Cookies, analytics and advertising

My website may use cookies and similar technologies to:

  • provide essential website functionality
  • understand how visitors use my website
  • improve website performance and content
  • measure the effectiveness of advertising and marketing.

I may use Google Analytics and Google Ads to analyse website traffic and measure advertising performance. Where applicable, advertising and measurement technologies provided by Meta may also be used.

Where required by applicable law, non-essential cookies and similar tracking technologies will only be activated after you have provided the required consent.

You can control or disable cookies through your browser settings. Depending on the cookie consent tools available on my website, you may also be able to manage or withdraw consent for certain tracking technologies through the website's cookie settings.

Please note that disabling cookies may affect some website functionality.

For more information about how Google processes information, you can refer to Google's privacy documentation. Information collected by Meta is handled in accordance with Meta's applicable privacy policies.


9. International data transfers

Because Haus of Caro is based in Australia and I use international service providers, your personal information may be processed or stored outside Australia and, where applicable, outside the European Economic Area (EEA).

Where the GDPR applies, I take reasonable steps to ensure that international transfers of personal information are carried out in accordance with applicable data protection requirements and, where required, using appropriate safeguards such as an adequacy decision, Standard Contractual Clauses or another legally recognised transfer mechanism.


10. How I protect your information

I take reasonable steps to protect the personal information I hold from misuse, interference, loss and unauthorised access, modification or disclosure.

Your information may be stored electronically using secure third-party services.

However, no method of transmission or electronic storage can be guaranteed to be completely secure. I therefore cannot guarantee absolute security of your information.


11. How long I retain your information

I retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • provide my services
  • maintain business, tax and accounting records
  • manage ongoing or potential disputes
  • establish or defend legal claims
  • comply with legal obligations.

Different categories of information may therefore be retained for different periods.

Where personal information is no longer reasonably required, I will take reasonable steps to securely delete or anonymise it, subject to any legal or business requirements to retain it.


12. Your privacy rights

Depending on where you are located and which privacy laws apply to the processing of your information, you may have rights including the right to:

  • request access to personal information I hold about you
  • request correction of inaccurate or incomplete information
  • request deletion of your personal information in certain circumstances
  • request restriction of processing in certain circumstances
  • object to certain types of processing
  • request a copy of certain personal information in a portable format
  • withdraw consent where processing is based on consent
  • object to direct marketing.

You can exercise these rights by contacting me at: hello@hausofcaro.co

I may need to verify your identity before responding to a request. I will respond within the timeframe required by applicable law.

Some rights are subject to exceptions and may not apply in every circumstance.


13. Marketing communications

If I send you marketing communications, you can unsubscribe at any time by using the unsubscribe option provided or by contacting me directly. I will only use your personal information for direct marketing where permitted by applicable law and, where required, with your consent.


14. Privacy concerns and complaints

If you have a question, concern or complaint about how I have handled your personal information, please contact me first at:

hello@hausofcaro.co

I will review your concern and respond within a reasonable timeframe.

If the Australian Privacy Act applies to the relevant processing and you are not satisfied with my response, you may contact the Office of the Australian Information Commissioner (OAIC).


If the GDPR applies to the processing of your personal information, you may also have the right to lodge a complaint with the data protection authority in the EU/EEA country where you live or work, or where you believe a data protection infringement has occurred.


15. Changes to this Privacy Policy

I may update this Privacy Policy from time to time to reflect changes to my business, website, service providers or privacy practices.

The latest version will always be published on this page, together with the date it was last updated.


16. Contact

If you have any questions about this Privacy Policy or how I handle your personal information, please contact:



Haus of Caro

Carolin Dorra

Melbourne, Victoria

Australia


Email: hello@hausofcaro.co