Hi everyone. I was wondering if anyone knew of specific rules regarding the handling/storing of photos sent to me to personalize products (t-shirts, mugs etc). Do I have to store these in a secure database offiline for specific time period? Or do I have to delete them within a specific time period? I'm sure there are privacy rules, but I'm finding it hard to locate information about how to handle this. Any input would be appreciated. I'm in Canada. Thanks!
I don't know of anything specifically, but you might want to review PIPEDA, since it applies to publishers. Since you're talking about images and not personal information, howver, it might not be relevant. http://www.priv.gc.ca/fs-fi/02_05_d_15_e.cfm (explains the act in broad strokes) http://www.priv.gc.ca/index_e.cfm (links to the office of the Privacy Commissioner).
I think you need to define your own terms of service and privacy policy. Many online galleries like kodak gallery retain customer photos for a long duration.