As part of running a small business Richard’s Photography® collects necessary data from clients to manage and process bookings, and maintain accounts and records. The company only holds information for advertising, marketing and public relations in connection with its core business; this may include past, existing or present customers or suppliers.
As Richard’s Photography® only processes personal data for core business purposes, it is exempt from registration with the Information Commissioner’s Office (ICO).
We currently collect and process the following information: name and contact details, details of bookings and invoices/payments, hobbies, interests, preferences, and the collection of photographs taken during photoshoots or provided by subjects.
The personal information we process is provided to us directly by you for one of the following reasons:
On some occasions, we also receive personal information indirectly, for example when a third party makes a booking on your behalf.
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
We use the information that you have given us in order to organise and run a photoshoot or an event and to produce invoices and take payment.
We will only share this information (in part or in full) if there is a legal duty to do so, or if we have your clear written or electronic consent.
We use Zoho campaigns for our subscriber list: you can edit your personal data or opt-out at any time.
We also store data on a secure server. Unless you give written or electronic consent, we keep your personal data for a maximum period of 18 months. We will then dispose of your information (or the parts for which you have not given consent) by erasing it from our servers (including the backup server).
Photographs are recorded on to memory cards inside the camera. These photos are then transferred to a computer and stored on the computer hard drive and back up drives. Data is not retained on memory cards when the successful transfer of data to a computer has been confirmed.
Occasionally (for editing purposes) we may transfer data to Adobe Creative Cloud.
We may also transfer photographs taken during a photoshoot to a client by the following means:
Each option has password security (unless explicit confirmation is obtained from a client).
Under data protection law, you have rights including:
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us using the details above if you wish to make a request.
You can also complain to the ICO if you are unhappy with how we have used your data. You can contact the ICO by writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or telephoning 0303 123 1113.
Last updated: 11th April 2023