Your Trust Is Our Foundation
When you invite SA Picture Day into your school or studio, you're trusting us with children. We take that responsibility more seriously than any other aspect of our business.
How does SA Picture Day protect student data and privacy?
SA Picture Day is fully COPPA and FERPA compliant. All staff undergo criminal background checks before their first assignment. Student photos are stored on AES-256 encrypted servers, never on personal devices, and deleted per our data retention policy. No student data is ever shared with or sold to third parties.
We designed our privacy protocols in consultation with school district data privacy officers. Every process — from how we handle student rosters to how photos are delivered — was built with child safety and family privacy as the non-negotiable constraint.
Our Security Framework
Four pillars that protect every child, family, and institution we serve.
Background Checks
- All photographers and staff undergo criminal background checks before first assignment
- Sex offender registry check for all team members
- Annual re-verification for all active staff
- Fingerprint-based background checks available for districts that require them
Data Privacy & Encryption
- Student photos stored on AES-256 encrypted servers
- No student photos stored on personal devices
- Data retention policy: photos deleted 18 months after delivery unless retained by family
- Zero third-party data sharing or selling
- Secure order portal with HTTPS throughout
COPPA & FERPA Compliance
- Full compliance with Children's Online Privacy Protection Act (COPPA)
- Full compliance with Family Educational Rights and Privacy Act (FERPA)
- No collection of biometric data without explicit consent
- Parent access to view, download, or request deletion of all photos
- No photos used in any SA Picture Day marketing without written parental consent
School & Vendor Onboarding
- Signed vendor agreement before any access to student lists or campus
- District-specific security requirements accommodated
- Staff ID badges worn at all times on campus
- Visitor log-in at front office on every visit
- Designated supervising staff member from school required during photography
Compliance & Standards
COPPA Compliant
FERPA Compliant
Background Checked Staff
Encrypted Storage
For District IT & Data Privacy Officers
We understand that district data privacy officers and IT departments need more than promises. SA Picture Day is prepared to:
- Sign a Data Processing Agreement (DPA) aligned with your district's requirements
- Complete a vendor security questionnaire
- Provide documentation of background check processes
- Participate in a vendor risk assessment review
- Comply with all district-specific data governance requirements
- Provide a list of all sub-processors and their data handling practices
Questions About Our Security Practices?
Our team is happy to walk you through our security protocols, sign your vendor agreements, or complete your district's onboarding process.
Prefer email? hello@sapicture.day