Student Image Protection
Our Commitment to Image Privacy & Protection
At Traditions Portraits, protecting student images and earning the trust of families and schools is a responsibility we take seriously.
We understand that school portraits are personal. They represent real students, real families, and entire school communities. That’s why privacy, transparency, and accountability are woven into everything we do, from the moment a photo is taken to the way it is delivered and stored.
Who We Are
Traditions Portraits is an independently owned, Southeast Texas-based school photography company proudly serving schools throughout the state of Texas.
Our leadership team works directly with schools, families, photographers, and staff every day. Decisions are made internally, thoughtfully and intentionally, with long-term partnerships in mind.
We do not resell data or monetize student information. Our focus is simple: providing high-quality, school-authorized photography services with care, professionalism, and integrity.
Many members of our team live and work in the same communities as the schools we serve. We believe trust is earned locally and maintained through consistency, accountability, and doing the right thing.
Secure Image Storage
Protecting student images means protecting the systems that store and process them.
Access to student images is limited to authorized, trained staff and approved service providers who require access to perform school authorized services such as proofing, ordering, and fulfillment. Access is restricted based on job role.
Our primary gallery and ordering platform is SOC 2 compliant. SOC 2 is an independent third party auditing standard that evaluates controls related to data security, availability, and confidentiality. This means our ordering platform has undergone external review of its security practices.This is a specification created by AICPA and verified annually through a rigorous, formal audit by an independent auditing firm.
We also utilize the industry-leading Stripe platform for ecommerce transactions. Stripe is PCI DSS compliant and certified as a PCI Service Provider Level 1, the highest level of certification available in the payments industry.
Our platform utilizes the minimum amount of data required to perform our services further reducing risk.
Limited & Controlled Access
Access to student images is strictly limited to authorized team members who require it to perform their role.
Student images are used only for school authorized photography services, which may include:
-
Image proofing and secure online gallery access
-
Ordering and fulfillment of purchased products
-
Retakes and reprints
-
Yearbook, ID, or other school approved administrative needs
What We Don't Do
To be clear and transparent:
-
We do not sell student images or student data
-
We do not license or distribute student images to third parties
-
We do not allow public browsing of student images
-
We do not use student images to train artificial intelligence or machine learning systems
We do not provide public galleries of student images. When images are shared with families, they are delivered through secure, individualized access links to help protect privacy.
Responsible Image Use
Traditions Portraits does not sell student images or personal information.
Any use of student images for promotional or marketing purposes is done only with proper permission. We respect the preferences of schools and families and honor opt-out requests.
As the copyright holder, Traditions Portraits may use select images to promote our photography services in accordance with applicable laws and school agreements. However, images are only used once Traditions Portraits is given expressed consent by a legal parent or guardian via our Publications Permissions form.
Professional Print Lab Security
Physical Security
-
The building is secured with keycode access and monitored 24/7 by cameras.
-
Databases and storage are located on-site in a physically locked and secure server room on dedicated, secure servers.
Network and Data Security
-
All user workstations require login with role-based access controls.
-
Multi-Factor Authentication (MFA) is required for network and user administration.
-
External access is prevented by enterprise-grade firewall appliances and isolated DMZ servers.
-
Sophos Intercept X Enterprise is utilized for comprehensive anti-virus and anti-malware protection across all networked machines, storage, electronic mail, and data transfer.
-
Critical Microsoft environment security updates are applied on a continuous schedule.
Vulnerability Testing and Compliance
-
External and internal penetration testing is performed by Breachlock, with results showing zero high or critical vulnerabilities detected for malicious actor and vulnerability testing.
Student Privacy Laws
We support schools in complying with the Family Educational Rights and Privacy Act FERPA.
Schools share limited directory information for identification and matching purposes only, typically student name, grade, and teacher. We do not receive sensitive personal information such as Social Security numbers, medical records, academic grades, IEP information, discipline records, immigration status, financial account data, or parent income or employment data.
When student images or related information are maintained in connection with a student’s educational record, we act as a service provider to the school and use data only for purposes authorized by the school or school district.
For additional information about how student data flows within the school photography industry, families may review the School Photographers of America resources.
Our primary gallery and ordering platform is registered and approved at The TEC Student Data Privacy Alliance, and has streamlined the process of security documentation to protect everyone involved to give a high level of assurance to the school district.
Transparency with Schools
We believe trust is built through clear communication.
Schools and parents can feel confident knowing how images are handled, stored, and delivered. If questions ever arise, our team is readily available to provide clarity and support.
Peace of Mind for Parents
Your child’s school portrait should be something you treasure... not something you worry about.
Our goal is simple: to provide a smooth, secure, and respectful experience from picture day to final delivery. We are proud to partner with schools and families to preserve memories while protecting privacy every step of the way.