School Store Giveaway: Photo Releases, Email Collection, and a $47 Cash Shortage

The promotion raises several issues. The testimonial from the shop owner is an endorsement, so students need to understand material-connection disclosure and why fake or undisclosed testimonials are deceptive. Receipt photos can expose purchase details and bystanders, so students need a release and a framing rule. The 16-year-old's photo requires parental consent for a minor's image and a right-of-publicity discussion; a school setting does not automatically make the image fair game. Collecting emails through a Google Form raises data-minimization, retention, and possibly COPPA issues if the promotion reaches children under 13; district approval of the tool matters. Geotagging is prohibited by policy, and principal approval is required before changing the account. The $47 shortage is an internal-control problem: no pre-numbered receipts, no two-person count, no reconciliation, and unclear deposit timing. These are not just compliance chores-they are the curriculum. Promotion ethics, consumer protection, CRM data governance, and cash controls are exactly the standards students need to apply. I would use the promotion as a case study, have students red-team the risks, and require a written risk review before any post goes live.

Workflow: (1) student team submits a one-page proposal with the learning standards, audience, contest rules, data fields, image plan, and budget; (2) advisor reviews for policy and ethics; (3) principal approves in writing before the account is created or changed; (4) team logs the approval and scheduled posts; (5) advisor spot-checks comments and direct messages. Policy: no geotagging; no identifiable photos without a signed release, and no photos of minors without parent consent; receipt photos must crop out names, card numbers, and other customers; testimonials must be genuine and disclose any free product or payment; contest rules must state eligibility, dates, prize, and that the platform is not sponsoring the promotion. Data: collect only email and optional first name, state the purpose and retention period, use a district-approved form, do not share or sell the list, and delete it after the coupon period. Cash: pre-numbered receipts for every sale, two-person count at opening and closing, daily cash log, deposit within 24 hours, and advisor reconciliation. Shortages trigger a written review, not public accusation. I would have students role-play a compliance review and revise the policy before launch.

I would reply to the parent the same day, in plain language: identify the account, explain that no student photo is posted without a signed release or parent consent, describe what data the promotion collects and why, state the retention period, and offer an opt-out and a meeting. I would not share other students' information or speculate about the shortage. For the $47, I would review the cash log, receipts, deposit slips, and schedule without accusing anyone, then follow district protocol if the review suggests theft or repeated loss. Instructionally, I would turn both events into a controlled case study: students audit the store's data map and cash process, propose controls, and present to the principal or a business partner. I would add a short unit on consumer privacy, endorsement disclosure, and internal controls, with a performance assessment in which teams draft a promotion policy and a cash-handling procedure. The parent complaint becomes evidence for the audit, not a distraction from it. I would document the response, the policy changes, and the student work, and I would check that the account now has written approval and no geotags.