I think in normal email, BCC means people can't see who else the email is sent to.... I would check that online before doing it though or by trying to send it to a couple of your own email accounts and see whether each can see it was sent to someone else.
Header wise, I would think if you just use html and pull the image from your
website hosting would be better than sending it as an attachment everytime.