Iris Booth Incorporated

Privacy Policy

Effective date: July 24, 2025

Last revised: July 24, 2025

Introduction

At Iris Booth Inc. we are committed to transparency in how we manage your personal information. Our privacy practices are guided by the Personal Information Protection and Electronic Documents Act (PIPEDA), including its principle of openness. This Privacy Policy is designed to provide clear information about the why and how we, as a data controller, collect, use, disclose, retain and protect your personal data, the purposes for which we use it, and how we safeguard it. This Policy is designed to explain how you can exercise your rights in connection to your personal information. 

When we refer to “Iris Booth”. “we”, “us” or “our”, we mean Iris Booth Incorporated, a company registered in Toronto, Ontario under the Business Number (BN) 822801569. 

Our registered office address is:

31 Douglas Dr.
Toronto, ON, M4W 2B2
Canada

Our mailing address is:

1656-329 Howe St.
Vancouver, BC, V6C 3N2
Canada

This Privacy Notice covers our use of your personal information, which is collected through or in connection to our Website. For the purposes of this Privacy Policy, “this Website” means all the web pages related to the Irisbooth.com site, excluding any links to third party sites.

If you have any questions about our privacy practices, how we process your personal data, or have questions about your data subject rights, please contact our Privacy Representative at  support@irisbooth.com

We are happy to provide more information on our internal policies and procedures upon request, in accordance with our obligations under PIPEDA.

This policy describes:

1. What personal data do we collect?
2. How and when do we process your personal data?
3. What is the legal basis for the personal data collection?
4. Who do we share personal data with?
5. Restricted Transfers (personal data transfers outside of the EEA)
6. How long do we keep your personal data?
7. Your rights
8. The Iris Booth website
9. Policy Updates

What personal data do we collect?

Iris Booth facilitates photography services. To this end we collect only the essential data listed below for the sole purpose of providing access to your photos and registering your account credentials.

Contact information: email address only (we do not need anything else to register your Iris account to deliver your photos)

Interaction with our staff: correspondence and communications with us, information you might provide through email.

Photos: Photos created using Iris Booth’s equipment and/or platform.

We do not collect any personal information on you for marketing purposes, neither when you open an account nor when you visit our website. We may contact you from time to time to request information about your session, the availability of your photos, changes to our service, or updates that may affect your ability to access or use the system.

You can control how we contact you by adjusting your communication preferences or by contacting our Privacy Representative at support@irisbooth.com. 

How and when do we process your personal data?

We collect and process your personal data when:

1. You visit our website
2. You open an account with us
3. When you collect your photos
4. When you contact us through email (either the mail associated with your account or one of your accounts or another email address used at the time)
5. When you visit our office
6. When you attend events hosted by us or industry events that we attend

What is the legal basis for the personal data collection?

In your and our legitimate interest: we use your personal data for one reason only, to provide you with the photo capture, storage and download service, when you open an account and visit a booth. We assume that you understand that at a very minimum we need your email address to provide our service. We rely on your consent for the collection and use of your personal information. By creating an account and using our services, you provide consent for us to collect and use your email address to provide photo capture, storage and download services. You may withdraw your consent at any time by deleting your account. To comply with legal obligation: in certain circumstances we will have to disclose your personal data in response to an inquiry from a regulatory authority, the police or other government bodies.

Who do we share personal data with?

We may share limited personal data with trusted service providers for our platform operations, including:

1. Cloud storage providers (Amazon Web Services);
2. Authentication and security services;
3. Customer support tools;
4. Photo editing tools;
5. Marketing tools;
6. Clients who then provide photography or related services to individual end-users

Iris Booth’s management of personal data is governed by this Privacy Policy. Iris Booth makes no claim and shall not be liable for any data storage, usage or management arising from or relating to clients providing services to individual end users through Iris Booth’s equipment, software or platform. Clients using the Services for these purposes shall be considered as data controllers for all legal purposes relating to the data they have access to, and thus such Clients shall be solely liable for their management of personal data in terms of their own privacy policy.

Restricted Transfers (personal data transfers outside of the EEA)

Your personal data is held in Amazon Web Services in Ashburn, Virginia. AWS is SOC 2 compliant and therefore was able to evidence that sufficient safeguards are in place to ensure your information is protected in accordance with Canadian and international data protection standards when transferred outside Canada.

How long do we keep your personal data?

We keep your personal data for as long as you maintain an active account with us, plus 12 (twelve) months after your last account activity. We will contact you before deletion to confirm you no longer require our services. Upon account deletion, all personal information (photos and email address) is permanently removed from our systems.

Your rights

Under Canadian privacy laws, you have the right to access, correct, delete or restrict the use of your personal data. You can manage most of this through your account, or by contacting our appointed Privacy Representative directly at support@irisbooth.com. 

1. Right to access: You may access your account and the photos associated with it at any time. In certain cases, Iris Booth and authorized administrators from your organization (e.g. employer, school, or event host) may also access this data as part of providing and managing the service. This access is limited to fulfilling the purpose for which the photos were taken, and is governed by agreements between Iris Booth and the data controller (your organization).
2. Right to rectify: you are the only one with control over your account (i.e. if you want to change the email address associated with the account). 
3. Right to be forgotten and Right to object: You can delete photos or the account, which will automatically delete all personal data (email address and photos) associated with the account. Deleting this information will delete all associated data (photos, email and password) and consequently we will stop processing your personal data. 
4. Right to restrict processing: you can delete photos on the account if you do not want us to process your personal data any longer. 
5. Right to data portability: You have full control over the photos associated with your account or accounts.
6. Right to lodge a complaint: If you believe that your personal data has been mishandled or your privacy rights have been violated, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada. You can find more information and submit a complaint at https://www.priv.gc.ca or by calling 1-800-282-1376.

Consent Management

You have the right to withdraw your consent at any time. You can do this by:

1. Deleting your account (removes all personal data)
2. Contacting our Privacy Representative at support@irisbooth.com and expressly communicating the withdrawal of your consent.
3. Adjusting your communication preferences in your account settings.

Please note that withdrawing consent may affect our ability to provide services to you.

Security and Breach Notification

We implement appropriate technical and organizational measures to protect your personal information. In the event of a security breach that creates a real risk of significant harm, we will notify affected individuals and relevant authorities as required by law.

The Iris Booth website

The Iris Booth website uses cookies and similar technologies to improve your experience and deliver relevant advertising. When you visit or log in to our site, our partners and service providers may use cookies to associate your activity with personal information they or others have about you (such as your email address). This allows us or our partners to send you marketing communications based on your interests.

You may opt out of receiving this advertising by visiting https://app.retention.com/optout. You also have the option to opt out of the collection of your personal data in compliance with GDPR. To exercise this option, please visit https://www.rb2b.com/rb2b-gdpr-opt-out.

Policy Updates

We may update this privacy notice from time to time. The most up-to-data version can be found on  www.irisbooth.com. We may expand our services in the future to include offerings for individual users or changes to how our booths and platform operate. This Privacy Policy will be updated to reflect any such changes, and we will notify users where required.