Photo Booth Image Release and Privacy Policy
Updated November 2026 · 4 min read
A photo booth image release and privacy policy explains what you capture (photos and videos, contact details guests choose to enter, 360 waiver records, client booking data), how you use it, when event images appear in your marketing and how to opt out, who receives data, how long you keep it, and how anyone can ask for deletion. It works together with the image clause in your rental agreement and the consent line on your sharing screen.
Privacy and texting rules vary by state, and some states give residents extra rights. Have a local attorney review your policy, and build it so you honor access and deletion requests from everyone.
Where does image consent come from at a booth?
Consent is layered, and each layer has a job:
- The rental agreement. The client gets a personal, non-exclusive license to use the images; you keep copyright and may use them in marketing unless the client ticks an opt-out box.
- Booth signage. A visible sign tells guests images may go to the host and, unless the host opted out, into your marketing.
- The sharing-station notice. Guests see exactly how their number or email will be used before they press send.
- The public policy. Linked from your website, gallery page and sharing screen, it holds the detail.
If a guest asks not to appear in marketing, before or after the event, honor it.
What sections should the policy include?
- What you collect, plus a statement that you collect nothing else and use no facial recognition
- How you use it: delivery, gallery hosting, safety records, running the business, marketing
- Limits on marketing: no use if the host opted out or a guest objects, no names or contact details attached to posted images, and no ad built around a minor without a guardian's permission
- The sharing-station consent wording
- Who receives data: the host, named service providers such as your gallery host and texting service, and legal requirements, plus a plain statement that you never sell guest data
- Retention periods
- How to request removal or deletion
- Children, security, state rights and your contact details
How long should you keep images and guest data?
| Record | Example retention |
|---|---|
| Online event gallery | 12 months after the event |
| Full-resolution originals | 12 months, except images already used in marketing |
| Guest phone numbers and emails | 12 months, then deleted |
| 360 waivers and incident reports | 3 years, longer if a claim is pending |
| Booking, contract and payment records | 7 years |
Pick periods you will actually follow, then use the same numbers everywhere. A frequent slip is a gallery delivery email promising 90 days while the contract says 12 months. Send hosts a reminder about 30 days before the gallery closes.
What should the sharing-station consent say?
Keep delivery consent separate from marketing consent. The delivery notice covers a one-time send of the guest's own photos. Any marketing sign-up is a separate, unchecked box with its own wording, and marketing texts go only to people who gave separate express written consent. The host receives guest contact details only if the guest ticked a box agreeing to it.
Sample excerpt: "By entering your number or email, you agree to receive your photos from [Business Name] by text message or email for this event. This is a one-time delivery, not a subscription. Message and data rates may apply. We don't sell your information. Reply STOP to any text to opt out."
How should deletion requests and minors be handled?
Offer one simple path: an email with the subject "Privacy Request," the event name and date, and either a screenshot of the image or the number or email used. Confirm within 5 business days and finish within 30. Be honest that you cannot pull back images the host or other guests already downloaded, but you will delete your copies and stop using them.
Booths work family events, so state that you do not knowingly collect contact details from children under 13 and that a parent should enter them instead. Ask the host in your planning questionnaire whether anyone should not be photographed, and whether posting is fine without faces of minors.
Which privacy mistakes put operators at risk?
- Pre-ticked marketing boxes at the sharing station.
- Mailing wedding guests your promotions without an opt-in, just because their emails sit in your booth app.
- Posting an event that opted out, because the opt-out was never flagged in the event record.
- Keeping guest contact lists forever. Delete them along with the event media.
- Naming no service providers, so guests cannot tell who processes their data.
Questions operators ask
Do guests need to sign a model release to use the booth?
The approach here relies on the client contract, visible signage and the sharing-station notice rather than individual signed releases, with the 360 waiver as the exception. Paid ads featuring an identifiable guest are a different matter, so ask a local attorney whether that use needs a signed release.
Can I post event photos on my social media?
Yes, if your contract reserves marketing use and the client did not opt out. Skip any image a guest asked to remove, never tag guests by name, and avoid ads centered on a minor without a guardian's permission.
Can I give the client a list of guest emails?
Only for guests who ticked a box agreeing to share their details with the host. Otherwise those details were collected to deliver photos and nothing else.
What if someone asks me to delete a photo from the gallery?
Confirm the request, remove the image from the gallery and your marketing, and delete your copies within 30 days. Explain that copies already downloaded by others are outside your control.