Privacy Notice

Privacy Notice
MEVISTA Studios | How Mevista handles personal information
Mevista Studios is operated by Leticia Kerryn Paris Logan (known as Teash), sole trader, ABN 74 573 633 069. Booking enquiries: enquire@mevistastudios.com.au. General privacy contact: hello@mevistastudios.com.au. Version 1.0. Effective 1 November 2026. This notice applies to information collected through enquiries, bookings, photography, content work, payments and delivery.
1. Information Mevista collects
Depending on the job, Mevista may collect names, contact and business details, enquiry messages (including social media direct messages), booking preferences, dates and locations, project briefs, quote acceptance records and consent choices (including any withdrawal of a choice), payment status and transaction references, photographs, video, audio, delivery choices, and complaint or service records. A parent or guardian may provide details for a child. Do not send full payment-card numbers or identity document numbers by email or direct message. Please share health, access or safety details only where needed to plan the service.
2. How information is collected and used
Information may come from clients through the website enquiry form, email, phone, social media direct messages (such as Instagram), planning conversations, quotes, acceptance records and file uploads. Mevista may ask to move an enquiry from a direct message to email to prepare a quote. Mevista uses information to assess enquiries, check availability, prepare quotes and invoices, plan and deliver agreed work, communicate about the job, record payment and manage accounting, safety, complaints and legal obligations.
Marketing: Identifiable photographs or recordings of people are used for Mevista marketing only with separate, optional permission, which can be withdrawn at any time (see section 7). Work for business and UGC clients may be shown in Mevista’s portfolio as an example of its work unless the client opts out, as set out in the Client Terms and Conditions. Mevista does not send marketing emails or newsletters and does not keep a subscriber list. Emails from Mevista are about your enquiry, booking or job, such as quotes, invoices, reminders and delivery. If that changes, Mevista will update this notice and ask for your consent first.
3. Where information is stored and who may process it
Business computer and records: Client job folders and relevant business records are kept in Mevista’s client files and on Leticia’s password-protected business Mac. The Mevista dashboard runs locally on that Mac and does not automatically sync online. Relevant business email remains in iCloud Mail unless Mevista saves a message to a client record. Access to client records is limited to Leticia. Mevista keeps backup copies to support recovery if records are lost.
Photo and video editing: Photos and videos are edited using Adobe software. Depending on the selected application and settings, files may be stored locally or processed through Adobe cloud or AI-assisted features. If those features are used for client files, Adobe may process them under its own terms and privacy practices.
iCloud Mail: Mevista uses iCloud Mail for business email. Messages remain in Mail unless Mevista saves relevant messages to a client record.
Social media: Enquiries and messages sent through social media, such as Instagram direct messages, are processed by that platform under its own terms and privacy practices. Mevista may save relevant details to the client record.
Website: The website enquiry form, website host and any form-delivery provider may process information entered on the site before it reaches Mevista. Depending on the site’s current configuration, it may also use cookies or similar technologies for site operation, security, analytics or advertising. The relevant providers’ privacy and cookie notices describe their practices. Information entered on the website may be processed by those providers before Mevista saves it to a client record.
Calendar: Google Calendar may be used for Mevista availability checks and events in a separate Mevista bookings calendar if connected; this does not require Gmail access.
Pixieset: Mevista uses Pixieset as an independent third-party provider for client album delivery and may enable purchases of additional digital images, prints and related services through it. Galleries are intended to be available for four weeks from delivery and are then removed by Mevista. Pixieset is not owned or operated by Mevista and is not Mevista’s partner or agent. If a client opens a gallery or makes a purchase, Pixieset and any relevant payment or print-fulfilment providers may process gallery, image, account, payment, billing, shipping and order information under their own terms and privacy practices. Pixieset sends its own emails, such as gallery notifications, from its own systems; Mevista does not control Pixieset’s emails or mailing settings, and you can manage them through Pixieset. Mevista does not operate or control those provider-run services. Clients should direct questions about Pixieset accounts, transactions, printing, fulfilment or shipping to the relevant provider. Mevista remains responsible for its own services and obligations; this notice does not exclude any rights that cannot legally be excluded.
See the Pixieset Privacy Notice and Pixieset Terms of Service.
4. Sharing and overseas processing
Mevista shares information only as needed to deliver the service, run its website and email, respond to social media enquiries, manage the calendar when connected, provide a gallery or print order through Pixieset, process a payment when a payment provider is active, or meet a legal obligation. Providers such as Apple (iCloud), Google, Meta (Instagram), Adobe, website and form providers, and Pixieset may store or access information outside Australia. Their privacy notices describe their current handling and locations, which may change. Mevista takes reasonable care when choosing and using services and shares information only as needed for the purposes described in this notice.
5. Security and access
Mevista limits access to client records to Leticia and uses password-protected devices and accounts, available account-security features and backup practices to help protect information. Some client records may be copied to backup storage to support recovery if a device or file is lost. iCloud Mail, Google Calendar when connected, Pixieset, social media, Adobe and other providers apply their own security controls to information processed through their services. No method of storage or transmission is completely secure. If Mevista becomes aware of an eligible data breach, it will assess and contain the breach and notify affected people and the Office of the Australian Information Commissioner (OAIC) where required by law.
6. Retention
Unbooked enquiries are kept for up to 12 months after the last contact, then reviewed for deletion unless needed for an unresolved matter or legal obligation. Mevista keeps relevant business and tax records for at least the applicable ATO period, generally five years, and longer where a record category requires it. Accepted quotes, booking records and permission records, including any withdrawal of permission, are kept for six years after job completion as Mevista’s record-keeping policy; this is a policy period, not a statement that every record has a six-year legal minimum.
Client galleries are intended to last four weeks from delivery and are then removed from Pixieset. Original and edited image files are kept on Mevista’s computer and backup drive for up to six months after the gallery is removed, then reviewed for deletion unless required for an unresolved matter or law. Where a business or UGC licence runs beyond that date, Mevista keeps the licensed files until six months after the contract closes, including the end of the licence term. Images Mevista has permission to use in its portfolio or marketing may be kept for as long as that permission applies and are removed after withdrawal (see section 7). Deletion includes available backup copies.
7. Access, correction, choices and privacy concerns
To ask what information Mevista holds or to request a correction, contact hello@mevistastudios.com.au. Mevista will verify the request and respond within a reasonable time, subject to other people’s privacy and legal limits. Send a privacy concern to the same address; Mevista will review and respond.
Withdrawing permission or opting out: To withdraw an optional permission, such as a photo-feature permission, or to opt out of portfolio use, email hello@mevistastudios.com.au. Mevista records the withdrawal on your client record, stops using the material in new posts and promotion, and removes it from its website and its own social media accounts within 14 days. Mevista cannot recall printed copies or material reposted by others but will take reasonable steps to limit further use. Withdrawal does not affect your booking or service.
Complaints: If you are not satisfied with Mevista’s response, you can make a complaint to the Office of the Australian Information Commissioner (OAIC). Where the Privacy Act does not apply to Mevista, the OAIC may be unable to investigate, but Mevista will still review and respond to your concern. Where the Privacy Act applies, statutory access, correction and complaint rights remain available.
8. Privacy law and updates
Mevista aims to handle personal information consistently with the Australian Privacy Principles. Whether the Privacy Act legally applies depends on business turnover and the activities or exceptions set out in law. This notice does not reduce any rights that apply. Mevista will update this notice when its information practices or service providers materially change and make the current version available when collecting information. Each version has a version number and an effective date.