OrderPhotos

Privacy policy

Last updated: July 2026

Have a question about photographs, an order, a delivery or a payment? Contact the photography company shown on your ordering site — they operate that site and hold all order and photograph information. Timestone Software does not receive or view this information and cannot answer these enquiries.

Who we are and what we do

This website and the ordering sites hosted on subdomains of orderphotos.online and orderphotos.store run on a hosting platform operated by Terra Australis Group Pty Ltd (ABN 19 104 212 302), trading as Timestone Software ("we", "us"). We provide the software and hosting infrastructure only.

Each ordering site is operated solely by the photography company named on that site (the "photography provider"). The photography provider populates its site with all photographs and information, offers and fulfils the orders placed there, and is responsible for the personal information handled through its site.

Information we do not collect, receive or view

Photographs, student and family information, order details and payment information belong to and are handled by the photography provider operating each ordering site. Timestone Software does not own this information and does not receive, view or use it:

Because we do not hold this information, we are unable to look up orders, identify students or photographs, or answer questions about them. All such enquiries must go to the photography provider using the contact details on its ordering site, or to your school or organisation.

The photography provider's privacy policy prevails

The photography provider is the party responsible for the personal information and photographs handled through its ordering site: it decides what is collected and how it is used, and the platform hosts that information on the provider's behalf. Each provider may publish its own privacy policy on its ordering site or through your school, club or organisation. That policy governs the provider's handling of your information and photographs and, to the extent of any inconsistency with this policy, the provider's privacy policy prevails in respect of that information. This policy is a baseline covering the hosting platform itself.

Photography providers operate in their own locations, and a provider's handling of your information is subject to the privacy laws that apply to that provider in its jurisdiction — which may be different from the Australian law that applies to us as the platform operator. For how a provider handles your personal information, refer to the provider's own privacy policy or contact the provider directly.

Information we collect on this website

You can browse this website without providing any personal information, and this website does not ask you for any. Like most websites, the platform's servers keep standard technical logs (including IP addresses) for security and operational purposes; we use these only to operate, secure and troubleshoot the platform.

If you contact us about the platform, we will hold the contact details and correspondence you choose to send us, and use them only to respond. We handle any personal information we do hold in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and we do not sell personal information or use it for third-party marketing. This commitment applies to the platform layer we operate — the photography provider's handling of information through its ordering site is governed by the provider's own policy and applicable law, as described above.

Platform security

All sites on the platform are served over HTTPS, and the platform runs on secure cloud infrastructure with regions in Australia, the United States and Europe. Access codes issued by the school or photography provider gate each gallery, so photographs are visible only to people the provider has authorised.

Access, correction and complaints

For access to or correction of personal information handled through an ordering site, contact the photography provider operating that site — we do not hold that information and cannot action those requests.

For personal information we hold directly (such as correspondence you have sent us), or if you believe we have breached the Australian Privacy Principles, contact info@timestonesoftware.com. We will investigate and aim to respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Changes to this policy

We may update this policy from time to time as the law or our services change. The current version will always be published on this page.