Privacy Policy — Financial Payments & Data Handling
Privacy Policy — Financial Payments & Data Handling for BGAvila Photography
Effective Date: 9/1/2025
Last Updated: 9/1/2025
1. Introduction
BGAvila Photography (“we,” “us,” “our”) respects your privacy and is committed to protecting any financial and payment-related information you provide when engaging our photography, drone, videography or related services. This Privacy Policy describes how we collect, use, disclose, safeguard, and store your payment-related and financial-transaction data in the United States.
2. Scope
This policy applies to all clients engaging our services and making payments through our website or other invoicing/payment mechanisms. It governs financial data involved in deposits, full payments, refunds, and related transactions.
3. Data We Collect
We may collect the following types of information in connection with payments and financial transactions:
Payment instrument information (e.g., credit or debit card number, routing/account number if bank transfer)
Billing address, name, email address, contact phone number
Transaction amount, payment date, invoice number
Refund or rescheduling details, as applicable
Any other information required by our payment processor or for our internal accounting (for example, in case of chargebacks or audit)
4. Use of Collected Data
We use your financial/payment information for the following purposes:
To process the payment for services rendered (including deposit, full payment, refund)
To verify your identity and authenticate the transaction if necessary
To maintain accurate records for invoicing, tax, accounting and regulatory purposes
To communicate payment status, receipt or refund confirmation
To detect and prevent fraud or unauthorized transactions
5. Disclosure of Data to Third Parties
We do not sell your payment or financial information. We may share your data in the following limited circumstances:
With our payment processor (e.g., credit-card gateway, bank) for the sole purpose of processing the payment or refund.
With our accountant, auditor, or legal counsel when required for bookkeeping or legal compliance.
When required by law or to respond to lawful government request (e.g., tax authority, subpoena).
In the event of a business sale or transfer, your payment data may be part of the business assets transferred; we will notify you if that occurs.
6. Data Security and Safeguards
We maintain administrative, technical and physical safeguards designed to protect your payment and financial data from unauthorized access, disclosure, alteration or destruction. Our measures include:
Limited access to payment data by authorized personnel only.
Encryption of payment-transmission channels (e.g., HTTPS/TLS) and secure storage of sensitive data with industry-standard practices.
Regular monitoring of our systems for vulnerabilities and intrusion attempts.
Secure disposal or anonymization of payment data when retention is no longer necessary for business or legal purposes.
7. Retention of Data
We retain your payment-related data as long as necessary to fulfil the service (e.g., refunds, audit, accounting) and to comply with any legal retention period (for example for tax or regulatory requirements). After that period we will either anonymize the data or securely delete it.
8. Your Rights
Depending on your state of residence and applicable law, you may have rights regarding your personal or financial information, including to request access, correction or deletion, to restrict certain uses or disclosures, or to withdraw consent where applicable. Because this payment data is closely tied to contract performance (the photography service), we may be limited in our ability to completely delete data that we are legally required to retain (for example for tax, audit or accounting). We will respond to any valid request in accordance with applicable laws.
9. Applicability of Federal and State Laws
While we are not a bank or large financial institution, our handling of payment and financial transaction data is subject to certain federal and state regulations. For example:
The Gramm‑Leach‑Bliley Act (GLBA) requires notice of data-sharing practices and safeguards for “nonpublic personal information” in certain financial contexts. American Bankers Association+2FDIC+2
State laws may impose additional data-security or privacy obligations (for example, data breach notification laws, or online privacy laws such as California Online Privacy Protection Act (CalOPPA)). DLA Piper Data Protection+1
Because no comprehensive federal “privacy law” yet covers all business types in the U.S., we aim to follow best practices in data protection and transparency. DLA Piper Data Protection+1
10. Changes to This Policy
We may update this policy periodically to reflect changes in our practices, service offerings, legal obligations or technology. We will post the revised policy on our website and indicate a “Last Updated” date. When changes are significant, we may provide more prominent notice (e.g., email notification).
11. Contact Us
If you have questions or would like to exercise your rights concerning your payment or financial data, you may contact:
BGAvila Photography
18107 Santolina Ln, Katy, TX 77449
info@BGAvilaPhotgraphy.com
832-671-7638