Privacy Notice

Who is responsible for your information?

Andy B Photography, based in Essex, United Kingdom, is the data controller for personal information collected through this website and in connection with photography enquiries and bookings.

For privacy questions or to exercise a data protection right, please use our contact form and state that your message concerns privacy. This gives us the information needed to locate and respond to your request securely.

Information we collect

• Enquiry details: your name, email address, optional phone number, the service you are interested in, your preferred date and anything else you choose to tell us.
• Booking and client details: correspondence, shoot requirements, venue or event details, contractual records and information needed to deliver the agreed service.
• Photographs and gallery information: photographs created for clients, gallery identifiers and access records needed to operate private client galleries.
• Technical information: basic server and security information such as IP address, browser type, request time and pages requested. This is used to keep the site reliable and secure.

Please do not include sensitive information in the enquiry form unless it is genuinely necessary for your photography request.

Why we use it and our lawful bases

• To respond to enquiries and prepare a booking: taking steps at your request before entering into a contract.
• To provide photography services and client galleries: performing our contract with you.
• To administer the business, prevent misuse and keep the website secure: our legitimate interests in operating a safe, effective photography business.
• To keep records required for tax, accounting or legal purposes: compliance with legal obligations and, where applicable, our legitimate interests in establishing or defending legal claims.
• To use identifiable client images publicly: only where this has been agreed with the client or relevant person, using the appropriate permission or lawful basis for the circumstances.

We do not use enquiry-form details to add you to a marketing list. If we introduce optional marketing in future, it will have its own clear opt-in and unsubscribe method.

Who receives your information?

We share personal information only where needed. Recipients may include:

• Wix: the website, form and content-management platform that hosts this site and stores form submissions and gallery content on our behalf.
• Professional service providers: such as accountants, legal advisers or technology support where their work requires it.
• Authorities or insurers: where disclosure is required by law or reasonably necessary to protect legal rights.

We do not sell personal information. Service providers may use their own vetted sub-processors, but they are permitted to process information only for providing their services and under appropriate contractual safeguards.

International data transfers

Wix is a global service. Information may be processed in the United Kingdom, European Economic Area, Israel, the United States and other locations used by Wix and its approved providers. Wix states that it uses recognised safeguards for restricted transfers, including adequacy arrangements and standard contractual clauses where appropriate. You can read more in Wix’s Data Processing Agreement information.

How long we keep information

• Enquiries that do not become bookings: normally deleted within 12 months after the last meaningful contact.
• Booking, contractual and financial records: normally retained for up to six years after the service is completed where needed for tax, accounting or legal purposes.
• Private galleries and client photographs: retained for the delivery period agreed with the client, then removed from active galleries or archived in line with the client agreement and legitimate business needs.
• Security records: retained only for as long as reasonably needed to investigate misuse, maintain security and meet legal obligations.

We may keep specific information for longer where a legal dispute, safeguarding concern or statutory requirement makes that necessary.

Private galleries and photographs

Client galleries use individual links and access passwords. Gallery access is recorded in a secure, short-lived cookie so the site can remember that the correct password was entered. The cookie does not contain the gallery password. Clients should share gallery links and passwords only with intended recipients and contact us promptly if access needs to be changed.

Private-gallery photographs are not intended to be indexed publicly. No online system can guarantee absolute security, so we use reasonable technical and organisational measures and limit access to people with the gallery credentials.

Children’s information

Photography may include children. Booking and administrative details for a child should be supplied by a parent, guardian or another person with appropriate authority. Children should not submit the enquiry form without the involvement of a responsible adult.

Your data protection rights

Depending on the circumstances, you may ask us to:

• provide a copy of personal information we hold about you;
• correct inaccurate or incomplete information;
• delete information where there is no continuing lawful reason to keep it;
• restrict how information is used;
• provide certain information in a portable format; or
• stop processing based on legitimate interests.

Your right to object: you can object at any time to processing based on our legitimate interests. We will stop unless we have compelling legitimate reasons to continue or need the information for legal claims.

We may need to verify your identity before acting on a request. There is normally no charge, and we aim to respond within one month.

Complaints

Please contact us first so we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner’s Office. Visit the ICO complaints page or call 0303 123 1113.

Cookies and changes to this notice

Our Cookie Notice explains the limited cookies used by this site. We may update this Privacy Notice if our services, providers or legal obligations change. The current version and update date will always appear on this page.