Privacy Policy

TL Portraitz Booking — a Lam Group LTD internal application. Last updated: April 23, 2026.

Overview

TL Portraitz Booking (the App) is an internal booking and invoicing tool used exclusively by Lam Group LTD (operating as TL Portraitz, Edmonton, Alberta, Canada) and its authorized staff. The App is not offered to the general public and is not available in any app marketplace. This Privacy Policy describes what data the App handles and how.

Who this policy applies to

This policy applies to authorized Lam Group LTD staff who sign in to the App, and to the photography clients whose booking and billing records are stored within it.

Data the App handles

The App stores the following categories of data, used solely to run the photography studio's day-to-day operations: staff account data (name, email, role, sign-in timestamps); client records (name, email, phone, session date and time, party size, booking status, notes, and booking history); invoicing data (line items, prices, deposit status, invoice numbers, payment state, synchronized with the studio's QuickBooks Online company file); calendar data (event details pulled from the studio's Calengoo scheduling tool); and media files (photography session deliverables uploaded by staff and delivered to clients through secure, time-limited download links).

How the App uses QuickBooks Online data

When the App is connected to the studio's QuickBooks Online company, it accesses customer records and invoices solely to create and send invoices for portrait sessions booked in the App. The App uses OAuth 2.0 to authenticate with Intuit. Access tokens are stored locally and are used only for calls to the Intuit API initiated from within the App by an authorized staff member. The App does not read or write QuickBooks data outside of the invoice creation and sending workflow. It does not access bank feeds, reconciliation, payroll, or any other QuickBooks module.

Data sharing

The App does not sell, rent, or share any data with third parties for marketing purposes. Data is only transmitted to the following services, and only to the extent required to deliver the App's functionality: Google Firebase (Firestore and Authentication) for primary data storage; Cloudflare R2 for object storage of session media files; Intuit / QuickBooks Online for invoice and customer data exchanged only when staff initiate an invoice action; and Calengoo, the studio's own scheduling tool, as the source of booking calendar events.

Data retention and security

Booking and client records are retained for as long as the studio maintains a business relationship with the client, plus the period required by applicable Canadian tax and business record-keeping law. All data is transmitted over HTTPS. Authentication uses Google Firebase Authentication. Access to client records is restricted by role (Core Admin, Admin, Staff). OAuth tokens for Intuit are stored only in the local application database and are never transmitted except to Intuit's own API endpoints.

Your rights

Photography clients may request a copy of the records the studio holds about them, or request correction or deletion of those records, by contacting the studio at info@tlportraitz.com. Requests are handled under Alberta's Personal Information Protection Act (PIPA) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). The App is not directed at children; portrait sessions for minors are booked by their parent or legal guardian.

Contact

TL Portraitz / Lam Group LTD, Edmonton, Alberta, Canada. Email: info@tlportraitz.com. The studio may update this Privacy Policy from time to time; the current version is always posted at this URL.