Privacy & Student Data Protection Policy

Last Updated: February 2, 2026

Our Privacy Commitment

Luxzuri Studios, LLC and its affiliated brands, including LUXPORTRAITS and MyLuxPortraits (“Luxzuri,” “we,” “us,” or “our”), is committed to respecting the privacy rights and concerns of all users of our services. As a premier provider of school photography in Texas, we have established this comprehensive Privacy Policy to inform school districts, parents, and guardians how we collect, use, and protect the information entrusted to us through the MyLuxPortraits Process (including our website, secure galleries, and on-site photography services).

By utilizing our services, you consent to the collection, storage, and use of information as set forth in this policy, which is designed to meet the highest standards of data stewardship.

Student Data Privacy & Compliance Statement

At Luxzuri Studios, we are committed to safeguarding the privacy and security of all student data. As a trusted partner to K–12 schools, we uphold rigorous data protection standards aligned with federal and state laws, including:

Children’s Online Privacy Protection Act (COPPA)

Family Educational Rights and Privacy Act (FERPA)

Texas Education Code Chapter 32 and Section 11.175

Texas Identity Theft Enforcement and Protection Act

We do not sell, share, or rent student data to third parties for marketing purposes. All personally identifiable information (PII) collected is used solely to fulfill our contractual obligations to educational institutions and parents or guardians. Access to this information is strictly limited to authorized personnel and protected using modern administrative, technical, and physical safeguards.

This Policy Answers the Following Questions:

What information do we collect and how do we use it?

Will we share your personal information with third parties?

What security measures do we take to safeguard your information?

How do we comply with Texas-specific student data requirements?

What are our data retention and deletion practices?

1. What information do we collect and how do we use it?

Types of Information Collected

To provide high-quality photography and fulfillment services, we collect "Personal Information" which can be used to identify and contact you.

Roster Data: We receive limited student information from the school district, typically including student name, grade, school, teacher, and parent/guardian email address.

Transaction Data: When purchasing products, you will be required to provide a billing address and payment information. Note: We utilize PCI-compliant payment gateways; Luxzuri Studios does not store full credit card numbers on our local servers.

Communication Data: We may collect your name, email, and telephone number when you contact our customer service team or register for gallery access.

How We Use Your Information

The information provided allows us to:

Fulfill your product or service orders accurately.

Provide secure, password-protected access to student galleries.

Notify parents/guardians of picture day updates, gallery openings, and special offers.

Handle customer service inquiries and technical support.

Comply with school district reporting and accountability requirements.

2. Will we share your personal information with third parties?

Strict Limitations on Sharing

We use your information to complete transactions and deliver the products you request. We do not share student PII with third-party marketers. We only share information under the following circumstances:

Service Providers: We share data with trusted subprocessors, specifically Captura, our secure hosting and fulfillment platform. These entities are contractually obligated to maintain the same high standards of security and confidentiality as Luxzuri Studios.

Protection of Rights: We will share information if required by law, such as a court order, subpoena, or request by governmental authorities, or to protect the safety and rights of our students and employees.

School Districts: We share relevant service data back with the partner school district to ensure contract compliance and student record accuracy.

3. What security measures do we take to safeguard your information?

Luxzuri Studios employs a multi-layered security architecture to protect your data:

Encryption: All data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256 bit encryption via our secure cloud infrastructure.

Identity Management: We utilize Google Workspace for all internal operations. Access to any system containing student data requires Enforced Multi-Factor Authentication (MFA).

Managed Access: We follow the "Principle of Least Privilege." Photographers are granted restricted, time-bound access to specific rosters only during active school events.

Infrastructure Security: Our systems are protected by enterprise-grade firewalls and intrusion prevention systems. We rely on the SOC 2-compliant infrastructure of our hosting partners to ensure 24/7 monitoring and threat detection.

4. Texas-Specific Compliance & Audit Rights

As a Texas-based company, we are uniquely positioned to meet the requirements of the Texas Education Code:

48-Hour Breach Notification: In accordance with our commitment to Texas districts, we will notify the affected educational institution within 48 hours of confirming any unauthorized access to student data.

Audit Cooperation: We grant our partner districts the right to audit our data privacy practices and security logs to ensure ongoing compliance with district policies.

Governing Law: All data privacy agreements are governed by the laws of the State of Texas, with venue lying in the appropriate courts of the contracting district’s jurisdiction.

5. Data Retention & Deletion

We believe in Data Minimization. We do not keep student data longer than necessary to fulfill our service obligations.

Retention Period: Student roster data is typically retained for six (6) months following a photography event to facilitate late orders and customer support.

Secure Deletion: Following the retention period, roster data is securely deleted or archived in a non-identifiable format.

Parental Requests: Parents or guardians may request the deletion of their personal contact information at any time by contacting our privacy team.

6. Copyright & Model Release

Copyright: All portraits are the exclusive property of Luxzuri Studios and are protected by Federal Copyright Law.

Model Release: By participating in a school-sanctioned photography event, images may be used for school yearbooks and administrative records. Use of images for Luxzuri marketing purposes is subject to the specific permissions granted by the district and/or parent.

Questions? Contact Our Privacy Team

If you have any questions about our privacy practices or this policy, please contact:

Crystal Tamez
Luxzuri Studios / MyLuxPortraits
[email protected]
[Your Phone Number]

Why this works for your bid:

Length & Detail: It matches the "heft" of a major competitor like CADY, making you look like a peer, not a smaller shop.

Texas Focus: It explicitly calls out the 48-hour notification and Texas Education Code, which CADY's generic policy doesn't do as well.

Security Specifics: It mentions MFA and Captura, which directly supports the "Proof" you are submitting in your Garland ISD bid.