Privacy and Cookies Policy
Introduction
1.1 We are committed to safeguarding the privacy of Yorkshire Portraits Photography website visitors and service users.
1.2 This policy applies where we act as a data controller with respect to the personal data of Yorkshire Portraits Photography website visitors and service users; in other words, where we determine the purposes and means of processing that personal data.
1.3 We use cookies on our website. Insofar as those cookies are not strictly necessary for the provision of Yorkshire Portraits Photography’s website and services, we will ask for your consent to use cookies when you first visit our website.
1.4 In this policy, “we”, “us” and “our” refer to Yorkshire Portraits Photography.
How we use your personal data
2.1 In this section, we outline:
(a) The general categories of personal data that we may process; (b) The purposes for which we may process personal data; and (c) The legal basis for the processing.
2.2 We may process data about your use of our website and services (“usage data”). This may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views, and website navigation paths, as well as information about the timing, frequency, and pattern of your service use. This data is gathered through Google Analytics and is processed to analyse website usage and improve our services. The legal basis for this processing is our legitimate interest in monitoring and enhancing our website and services.
2.3 We may process personal data provided by you during your use of our services (“service data”), including your name, contact telephone number, and email address. This data is processed for the purpose of delivering our services, maintaining backups, and communicating with you. The legal basis for this processing is the performance of a contract or taking steps towards entering into one.
2.4 We may process information you submit for publication on our website or social media (“publication data”). This data is processed to enable publication and manage our website and services. The legal basis for this processing is your consent.
2.5 We may process information contained in enquiries you submit to us about our services (“enquiry data”), such as your name, telephone number, and email address. This data is processed for offering, marketing, and selling relevant services. The legal basis for this processing is consent.
2.6 We may process customer relationship information, including contact details and communication records (“customer relationship data”), to manage customer interactions, maintain records, and promote our services. The legal basis for this processing is consent.
2.7 We may process transaction-related information, including purchases made via our website (“transaction data”), which may include your contact details and transaction records. This data is processed for providing services and keeping business records. The legal basis for this processing is contract performance and legitimate interest in business administration.
2.8 We may process information you provide for email notifications and newsletters (“notification data”). This data is processed to send you relevant updates. The legal basis for this processing is your consent.
2.9 We may process information contained in communications you send to us (“correspondence data”), which includes metadata generated through our website contact forms. This data is processed for communication and record-keeping. The legal basis for this processing is our legitimate interest in business administration and communication management.
2.10 We may process your personal data if necessary for legal claims, obtaining professional advice, or managing risks. The legal basis for this processing is our legitimate interest in protecting legal rights.
2.11 We may process your personal data for insurance purposes or business risk management. The legal basis for this processing is our legitimate interest in business protection.
2.12 We may process any of your personal data where necessary for legal compliance or to protect vital interests.
2.13 Please do not provide another person’s personal data unless requested.
Providing your personal data to others
3.1 We may disclose your data to insurers, professional advisers, and subcontractors where necessary for insurance coverage, risk management, or professional services. The legal basis is consent.
3.2 Financial transactions for services are handled by our payment provider, ShootProof. Transaction data is shared only as needed to process payments and handle queries. Their privacy policy is available at https://www.shootproof.com/legal/privacy-policy.
3.3 We may disclose personal data where required for legal compliance or legal claims.
International transfers
4.1 Our website hosting and image hosting services are based in the USA.
4.2 Personal data published through our website may be accessible worldwide.
Data retention
5.1 We retain personal data only as necessary for legal and business purposes.
5.2 Data retention periods: (a) Invoices, contact, and contract details: at least 6 years. (b) Wedding planning details: 1–2 years.
5.3 We may retain data as required by law or for legal protection.
Amendments
6.1 We may update this policy from time to time.
6.2 Please check this page periodically for updates.
6.3 We will notify you of significant changes by email.
Your rights
7.1 You have the following rights under data protection law: (a) Access to your personal data (b) Rectification of inaccuracies (c) Erasure of your data (subject to exceptions) (d) Restriction of processing (e) Objection to processing (f) Data portability (g) Right to complain to a supervisory authority (h) Right to withdraw consent
7.2 To exercise any of these rights, contact us in writing.
Third-party websites
8.1 Our website includes links to third-party sites, and we are not responsible for their privacy policies.
Cookies
9.1 Cookies are small data files stored on your device.
9.2 Cookies may be session-based (expire when you close your browser) or persistent (stored for a set period).
9.3 Cookies do not usually contain personally identifiable data.
Cookies we use
10.1 We use cookies for: (a) Analytics – to monitor website performance and usage.
Cookies from service providers
11.1 We use Google Analytics to analyse website usage. Google’s privacy policy is available at: https://www.google.com/policies/privacy/
Managing cookies
13.1 Most browsers allow you to block or delete cookies. However, this may affect website usability.
Our details
14.1 This website is owned and operated by Yorkshire Portraits Photography.
14.2 Yorkshire Portraits Photography is a sole trader business registered in England and Wales.
14.3 Contact us: (a) By post: [4 Crow Lane, Newark, Notts, NG229DL] (b) Via our website contact form (c) By email: [phil@yorkshireportraits.co.uk]
Data Protection Officer
15.1 Our Data Protection Officer is Phil Shillitoe T/A Yorkshire Portraits. He can be contacted via the details above.