01206 670164
PRIVACY POLICY
Introduction
LW Photography (“the Company”) is committed to protecting the privacy and personal data of our clients, customers, and individuals captured in our images and videos. We comply with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018 to ensure that personal data is processed lawfully, fairly, and transparently.
This Privacy Policy outlines how we collect, use, store, and protect personal data. It also explains the rights individuals have concerning their personal data and how they can exercise these rights.
Scope
This policy applies to all personal data processed by LW Photography, irrespective of its form, be it electronic or hard copy. It covers data collected during client engagements, through our website, and via other interactions with our business.
Data Protection Principles
Our business upholds the following fundamental data protection principles:
-
Lawful, fair, and transparent processing of personal data.
-
Limiting data processing to the specific purposes for which it was collected.
-
Minimising the amount of personal data collected to what is necessary.
-
Ensuring the accuracy and relevance of personal data.
-
Limiting the retention of personal data in accordance with legal requirements.
-
Ensuring the security, integrity, and confidentiality of personal data.
-
Demonstrating accountability for compliance with data protection laws.
Types of Personal Data Collected
In the course of our operations, we may collect and process the following types of personal data:
-
Names and contact information of clients and their representatives.
-
Photographs and videos of individuals.
-
Metadata associated with photographs and videos, such as location and time data.
-
Payment information (where applicable)
-
Information collected via cookies or tracking tools on our website (if applicable).
Data Collection
We collect personal data through:
-
Direct interactions: When individuals book our services, contact us, or provide details to access images or videos.
-
Event photography: By capturing images and videos at public or private events.
-
Online activity: Through our website and gallery website, including forms submitted or cookies
Data Use
We process personal data solely for the specific purposes for which it was collected. These purposes may include:
-
Providing high-quality photographic services to our clients deliver images and videos, and communicate with clients and customers.
-
Marketing and promoting our services.
-
Carrying out administrative and financial operations.
How Do We Protect Personal Data?
We implement appropriate technical and organisational measures to ensure the security of personal data. These include:
-
Encryption of data where appropriate.
-
Secure storage systems to prevent unauthorized access.
-
Regular reviews of our data protection practices.
-
Training for staff to handle data responsibly.
Data Retention
Personal data is retained for the duration necessary to fulfil the purposes for which it was collected and in accordance with legal obligations and business requirements. For example:
-
Photographs are retained for up to three years after the event unless agreed otherwise. A select number of images may be retained beyond this period for marketing purposes, provided this aligns with our legitimate interests and does not override the rights of individuals. You have the right to object to this processing or request the removal of specific images.
-
Client contact information is retained for business correspondence purposes only.
We periodically review our data retention practices to ensure compliance with applicable laws.
Data Sharing
We do not share personal data with third parties except when required by law or with the explicit consent of the individual concerned. Examples of third parties may include payment processors or hosting providers. In such cases, we ensure appropriate safeguards are in place to protect personal data.
Data Subject Rights
We recognise and respect the rights of individuals concerning their personal data. Data subjects have the following rights:
-
The right to access their personal data held by us.
-
The right to rectify any inaccurate or incomplete personal data.
-
The right to request erasure of their personal data under certain circumstances.
-
The right to restrict the processing of their personal data in specific situations.
-
The right to object to the processing of their personal data.
-
The right to request the transfer of their personal data to another organisation.
-
The right to withdraw consent for photographs; upon request, we will remove images from albums and galleries where feasible.
To exercise any of these rights, please contact us at privacy@lw-photo.co.uk. We will respond to requests in accordance with applicable laws.
Legal Basis for Processing Personal Data
We process personal data based on the following lawful bases:
-
Contractual necessity: To fulfil agreements with clients and customers.
-
Legitimate interests: To operate and promote our business, provided these interests are not overridden by the rights and freedoms of individuals.
-
Legal obligations: To comply with applicable laws and regulations.
Compliance
We are fully committed to complying with all applicable data protection laws in the UK, including the UK GDPR and the Data Protection Act 2018. We have procedures in place to detect, report, and investigate personal data breaches. Any breach of this policy will be treated with utmost seriousness and may result in disciplinary actions, including termination of employment or contracts.
Review
This Privacy Policy will be regularly reviewed and updated as necessary to ensure its continued effectiveness and compliance with evolving data protection laws and regulations in the UK. Reviews will occur at least annually.
Contact
For any questions or concerns regarding this privacy policy, please contact:
LW Photography
privacy@lw-photo.co.uk
01206 670164
Updated: Jan 2025 | Next Review: Jan 2026