Privacy policy
Privacy Policy for Photos By Persephone
Introduction
Photos by Persephone ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data in compliance with the UK General Data Protection Regulation (UK GDPR).
1. Information We Collect
We collect and process the following types of personal data:
Contact Information: This may include your name, email address, phone number, and postal address when you make an enquiry or book our services.
Event Details: Information about your wedding or event, such as the location, date, and schedule.
No sensitive personal data (e.g., race, religion, health information) is collected.
2. How We Use Your Information
We collect and use your personal data for the following purposes:
To communicate with you regarding your booking or enquiry.
To provide the photography services you have requested.
To send you relevant information about your booking, including details about the photoshoot or delivery of images.
For internal record keeping and business administration purposes.
We will only use your data for the purposes outlined above and will not use it for any other purposes without your consent.
3. Legal Basis for Processing
Under the UK GDPR, we rely on the following legal bases for processing your personal data:
Contractual Obligation: We process your personal data to fulfil our contract with you when you book our services.
Legitimate Interest: We may process your data for our legitimate business interests, such as managing our business operations and responding to your enquiries.
4. Data Retention
We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting obligations.
Enquiry details will be kept for up to 1 year after the event.
Photography-related information will be retained for up to 5 years for our business records.
5. Sharing Your Information
We do not share your personal data with third parties except where necessary, such as:
Service Providers: We may share your information with third-party service providers (e.g., photo printing or delivery services) to fulfil your booking.
Legal Obligations: We may share your data if required by law or to protect our legal rights.
We do not sell, rent, or trade your personal data with third parties for marketing purposes.
6. Data Security
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. This includes secure servers and encryption where necessary.
7. Your Rights
Under the UK GDPR, you have the following rights:
Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
Right to Erasure: You can request that we delete your personal data, subject to certain conditions.
Right to Restrict Processing: You can ask us to limit how we process your data.
Right to Data Portability: You can request to receive your personal data in a commonly used format.
Right to Object: You can object to the processing of your data in certain circumstances.
To exercise any of these rights, please contact us at stephaniemulville@icloud.com.
8. Contact Us
If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at:
Email: stephaniemulville@icloud.com
9. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page, and where appropriate, notified to you by email.
Last updated: October 2024