Necessary Information for protecting your children's privacy
1. FIRST: Determine Which Photography Company Handles Your School
Across the U.S., 95% of schools use one of the following:
đź“Ś Lifetouch (owned by Shutterfly)
This is the big one.
If you’re not sure, assume it’s them.
Mailing Address for FERPA/Data Deletion Requests:
Lifetouch National Headquarters
11000 Viking Drive
Eden Prairie, MN 55344
USA
Email (works faster):
📌 Shutterfly (Lifetouch’s parent company — also processes images)
Shutterfly, LLC – Privacy Office
2800 Bridge Parkway
Redwood City, CA 94065
USA
Email:
If your school uses a smaller regional vendor (rare), they STILL have to obey FERPA and MUST provide a data controller address if you request it.
✅ 2. SECOND: You Also Send a Copy to the School District’s Data Controller
Schools hate this part, but FERPA requires a district-level contact.
Look on your district’s website for:
“Data Protection Officer”
“Records Custodian”
“FERPA Officer”
or “Student Services – Privacy”
But if the district tries to dodge you?
Send it to:
Superintendent’s Office
[Insert School District Name]
[District Address]
Legally, they must forward it to the proper office.
✅ 3. THIRD: I’ll Give You a Universal Address That Works Even If They Ignore You
FERPA enforcement is handled by:
U.S. Department of Education
Student Privacy Policy Office (SPPO)
400 Maryland Ave, SW
Washington, DC 20202
You ONLY use this one after the company ignores your deletion request for 30 days.
⚠️ What You Should Send (Short Version)
Use this sentence (the legal kill-switch):
“I revoke consent for the capture, retention, storage, and processing of biometric images of my child under FERPA. Please delete all stored images and provide documentation of destruction.”
REQUIRED NOTE: THIS IS NOT LEGAL ADVISE, AS I AM NOT A LAWYER.
Free access to the who, what and where to revoke access to your child's privacy through school photos