Privacy Policy

1. Introduction

2. Data Controller

3. What Data We Collect

We may collect and process the following types of personal data:

• •Contact information — name, email address, and phone number provided via booking forms, contact forms, or direct correspondence.
• •Session preferences — messages, style preferences, and details shared during the booking process.
• •Photographs— images taken during your photography session.
• •Website usage data — cookies, IP addresses, browser type, and analytics data collected automatically when you visit our website.
• •Payment information — processed securely by third-party payment providers. We do not store your full payment card details.

4. How We Use Your Data

We use your personal data for the following purposes:

• •To provide our photography and videography services as agreed.
• •To communicate with you about bookings, sessions, and deliverables.
• •To deliver images via our secure online gallery.
• •To send booking confirmations and session reminders.
• •To improve our services and website experience.
• •For marketing purposes, only with your explicit consent.

5. Legal Basis (GDPR)

Under the General Data Protection Regulation (GDPR), we rely on the following legal bases for processing your personal data:

• •Contract performance — processing necessary to fulfil our contractual obligations when you book our services.
• •Legitimate interest — for marketing our services, building our portfolio, and improving our business, where this does not override your rights.
• •Consent— for sending marketing communications such as newsletters, and for the use of non-essential cookies. You may withdraw consent at any time.

6. Data Sharing

7. Data Retention

We retain your personal data only for as long as necessary:

• •Booking information — retained for 2 years after the session date.
• •Client galleries— available for 60 days after delivery, then removed.
• •Client cabinet photos — retained for 60 days after the last upload, then removed.
• •Marketing contacts — retained until you unsubscribe.
• •Financial records— retained for 6 years as required by law.

8. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

• •Right of access— request a copy of the personal data we hold about you.
• •Right to rectification — request correction of any inaccurate or incomplete data.
• •Right to erasure— request deletion of your personal data where there is no compelling reason for its continued processing.
• •Right to object— object to the processing of your data for certain purposes, including direct marketing.
• •Right to data portability — receive your data in a structured, commonly used, machine-readable format.
• •Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at photoyi76@gmail.com. We will respond to your request within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.

9. Cookies

Our website uses cookies to enhance your browsing experience:

• •Essential cookies— required for session management, authentication, and basic website functionality. These cannot be disabled.
• •Analytics cookies— used to understand how visitors interact with our website, helping us improve our services. These are only set with your consent.

We do not use third-party advertising cookies. You can manage your cookie preferences through your browser settings.

10. Children's Data

We photograph children as part of our family and event photography services, always with the consent of a parent or legal guardian. Parents and guardians retain full control over how their children's images are used. If you would like your child's images to be excluded from our portfolio or marketing materials, please let us know in writing and we will honour your request.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. The “Last updated” date at the top of this page indicates when the policy was most recently revised. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have a concern about how we handle your personal data, please contact us: