GDPR – Data Protection

As a sole trader, I am committed to protecting your personal data in compliance with GDPR and other data protection laws. This policy explains what information I collect, how I use and store it, and your rights regarding your data.

What Information is Collected?

If you make an enquiry via the Website Contact Form, Email, Social Media, or Phone, I collect and retain the following details:

• Name
• Email address
• Telephone number
• Any other relevant details necessary to address your enquiry

How is Your Data Used?

• Website visitors: I use a third-party service (WordPress) to collect standard internet log information and visitor behavior patterns. This data helps me improve my website but does not identify individual visitors.
• Enquiries: If you contact me, I will use your details to respond. If you proceed with booking my services, I will store your data for communication, session planning, and order fulfillment.
• Marketing: If you opt-in to receive newsletters or promotional emails, I will use your details accordingly. You can opt out at any time.

Data Retention & Security

• If you do not proceed with a booking, your enquiry details will be deleted within six months unless you opt into marketing communications.
• If you do book a session, your contact details will be retained for up to six years, in line with legal and tax obligations.
• Signed contracts are securely stored in a locked cabinet (for hard copies) and a secured digital system (for electronic copies).
• Digital client images are stored securely on an encrypted drive and/or cloud storage with password protection.
• You can request deletion of your personal data at any time.

Who Collects Your Data?

I personally collect and manage your data via:

• Website Contact Form submissions
• Email and phone communications
• Social Media messages

Who Will Your Data Be Shared With?

• Personal data (e.g., contact details) is never shared with third parties.
• Client images may be used for marketing, portfolio display, and advertising, including my website, blog, and social media, only with your consent.
• If images are shared with third-party vendors (e.g., printing labs), this will be stated in the contract.

Client Image Use & Consent

• As part of the contract, you may be asked for consent to use images for portfolios, advertising, and promotional materials.
• You have the right to withdraw consent for image use at any time, even after publication.
• If you withdraw consent, I will remove images from my platforms where possible.
• Images will be stored securely for a minimum of six years unless you request deletion sooner.

Cookies & Website Tracking

• My website uses cookies to improve user experience and track analytics (e.g., Google Analytics, Facebook Pixel).
• You can disable cookies in your browser settings, but this may affect website functionality.
• Third-party services (e.g., social media platforms) may also track your activity, but they do not share this data with me.

Social Media

• If you message me via social media, I will retain the conversation for six months from our last communication.
• Social media platforms may track your activity, but this is outside my control.

Your Rights

Under GDPR, you have the right to:

• Request access to your personal data
• Request corrections to inaccurate data
• Request deletion of your data
• Withdraw consent for image use
• Opt out of marketing communications

Complaints & Disputes

• If you have concerns regarding data use, please contact me in writing.
• If you have concerns about your images, you can request changes or removal at any time.
• If necessary, you may escalate concerns to the UK Information Commissioner’s Office (ICO).

Contact:
Kate Anderson Photography
Email: kate@kateandersonphotography.com
Phone: 07766225698

Last Updated: 13th March 2025