Privacy Policy

1. Information We Collect

We collect the following types of personal information:

• Contact Information: Name, email address, phone number, postal address
• Booking Information: Session preferences, package selections, payment details
• Emergency Contact: Name and phone number of your emergency contact
• Date of Birth: For age verification purposes
• Social Media: Social media handles (for tagging purposes, if you consent)
• Photographs: Images taken during your session
• Signatures: Digital signatures on release forms and waivers

2. How We Use Your Information

We use your personal information for the following purposes:

• To process and manage your bookings
• To communicate with you about your sessions
• To deliver your photographs and any purchased products
• To process payments securely
• To contact your emergency contact if necessary during a session
• To improve our services and customer experience
• To comply with legal obligations
• For marketing purposes (only with your explicit consent)

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract: Processing necessary to fulfil our booking agreement with you
• Consent: Where you have given explicit consent (e.g., marketing, image usage)
• Legitimate Interest: For business operations and service improvement
• Legal Obligation: To comply with applicable laws and regulations

4. Data Storage & Security

Your personal data is stored securely on encrypted servers. We implement appropriate technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction.

Payment information is processed through Stripe, a PCI-DSS compliant payment processor. We do not store your full card details on our servers.

5. Data Retention

We retain your personal data for the following periods:

• Booking Records: 7 years (for tax and legal purposes)
• Photographs: As agreed in your package, typically 12 months after delivery
• Marketing Data: Until you withdraw consent
• Release Forms: Indefinitely, or until you request deletion

6. Sharing Your Information

We may share your information with:

• Payment Processors: Stripe, for secure payment processing
• Cloud Services: For secure data storage and image delivery
• Professional Advisers: Accountants, lawyers, if required
• Law Enforcement: If required by law or court order

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

7. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (subject to legal requirements)
• Restriction: Request limitation of processing
• Portability: Receive your data in a portable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us using the details below.

8. Cookies

Our website uses essential cookies to ensure proper functionality, including authentication and session management. We may also use analytics cookies to understand how visitors use our website.

9. Children's Privacy

Our services are not directed at children under 18. If we photograph minors, we require consent from a parent or legal guardian. Parents/guardians are responsible for ensuring their child's privacy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us.

12. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

https://ico.org.uk/make-a-complaint/