Privacy Policy

I completely understand the importance of your privacy, and I totally respect the privacy of everyone that visits my website. It is very important for me that you know exactly how and why I collect, process and store your personal data. I will only collect, process and store your personal data in the ways that have been outlined here in my privacy policy, and in a manner that is consistent with my obligations and your rights under the law.

I have kept my privacy policy as short and straightforward as possible, so if there is anything that you don’t understand, or if you have any questions, please contact me using the contact form at the bottom of this page.

This Notice explains how Stephanie Paterson Photography complies with the Data Protection Act 1998 (DPA), the General Data Protection Regulation (GDPR) and Electronic Communications Regulations (PECR).

Identity and contact information

This Privacy Notice (“Notice”) is provided by Stephanie Paterson Limited trading as Stephanie Paterson Photography (“me”, or “I”), of 38 Lingwood, Bracknell, Berkshire, RG12 7PW. It covers your rights in relation to the DPA, GDPR and PECR.

Stephanie Paterson Photography is both the controller and processor of all personal data collected.

Date this Notice was created: 8th May 2018

Date this Notice was last modified: 8th May 2018

Compliance declaration

Both Stephanie Paterson Photography and this website, www.stephaniepatersonphotography.co.uk, comply with the DPA, GDPR and PECR. The GDPR comes into effect on the 25th May 2018. This Notice is updated whenever changes are made to relevant data protection legislation.

Your rights under the GDPR

Under the GDPR, you have a number of different rights relating to your personal data and how it is processed. They are as follows:

  • Right to be informed about the collection and use of your personal data.
  • Right to access your personal data, and any supplementary information, which constitutes personal data.
  • Right to have your personal data rectified; this means you can ask me to correct your personal data if it changes, turns out to be inaccurate, or is incomplete.
  • Right to have your personal data deleted; this means that you have the right to request the deletion or removal of your personal data. There are some circumstances when you do not have this right.
  • Right to restrict me from processing your personal data.
  • Right to data portability.
  • Right to object to me processing your personal data.
  • Rights related to automated decision-making including profiling.

Most of these Rights will apply to your personal data and how Stephanie Paterson Photography processes it, but some (such as the right to data portability and rights related to automated decision making including profiling) are not relevant to this business at the time of writing.

If you want to know more about your rights, please click here. For other information relating to data protection legislation, please visit the  the ICO website directly.

The data I collect, how I use it and why

Cookies and website visitor tracking

This website uses tracking software to monitor its visitors to better understand how they use it. The software will save a cookie to your computers hard drive in order to track and monitor your engagement and usage of the website, but will not store, save or collect personal information.

Cookies are small files installed on your browser device that allow websites like this, and many others, to find out more about your browsing behaviour. For Stephanie Paterson Photography, the purpose of using cookies is to better understand visitor demographics to this site so that improvements can be made, as well as informing marketing and sales strategies in the future.

This website makes use of cookies, most notably the ones relating to Google Analytics. I also make use of a plugin that enables me to defend against malicious attacks, which uses a cookie to understand whether you are a genuine user or a robot.

When using this website, you have the choice to agree to or decline cookies. The lawful basis for the use of these cookies is your given consent. Since 18th July 2017, this website has made use of a Cookie Notice that actively seeks confirmation of your acceptance or denial to the use of cookies, such as the ones listed above.

Client contact information

I use personal data, provided directly and voluntarily to me by clients, for two purposes. The first is to carry out my contractual obligations. This means that it’s information I need to do my job. This personal data includes (but is not limited to) names, addresses, email addresses, phone numbers and any other pertinent information including (but not limited to) venue, date and time.

The second purpose is for me to analyse and understand behaviour of my clients to assist me in relation to sales and marketing exercises. For example, to better understand where you heard about me and whether or not you choose to book me. This is a legitimate interest and a reasonable expectation that most people would have about a business. All personal data that I collect is stored within a safe and secure, GDPR compliant, contact management system called Studio Ninja. This is a cloud-based system that allows me to keep track of upcoming jobs, emails and invoicing. For further information please view their privacy policy.

Mailing lists

Email marketing messages sent after a visitor has supplied their contact information and consented to being contacted may contain tracking beacons / tracked clickable links or similar server technologies in order to track reader activity within email marketing messages. Where used, such marketing messages may record a range of subscriber data relating to engagement, geographic, demographics and already stored subscriber data.

My EMS (email marketing service) provider is: ConvertKit and you can read their privacy policy here.

Downloads and Media Files

Any downloadable documents, files or media made available on this website are provided to users at their own risk. While all precautions have been undertaken to ensure only genuine downloads are available users are advised to verify their authenticity using third party anti-virus software or similar applications.

We accept no responsibility for third party downloads and downloads provided by external third party websites and advise users to verify their authenticity using third party anti-virus software or similar applications.

Contact & Communication with me

Users contacting this us through this website do so at their own discretion and provide any such personal details requested at their own risk.  Your personal information is kept private and stored securely until a time it is no longer required or has no use.

Where we have clearly stated and made you aware of the fact, and where you have given your express permission, we may use your details to send you products/services information through a mailing list system. This is done in accordance with the regulations named in ‘The policy’ above.

When completing a contact form on this website, your contact information will be recorded and retained in a customer management system (CMS), and kept securely online in accordance to the privacy policy of the CMS.  Your details are not shared with any third parties who are not directly employed by Stephanie Paterson Photography without your consent.

Sharing information with third parties

Other than those third parties mentioned in this Policy and listed below, Stephanie Paterson Photography will not pass your personal data to any other third parties.

Your personal data may, subject to my obligations to comply with data protection legislation, be shared with the following third parties:

  • Studio Ninja software for client management;
  • Second photographers/videographers, hair stylists or make up artists who may join me on photo shoots and need information to be able to do their job;
  • Having taken precautions to maintain the security of such personal data, I may in certain circumstances share personal data with the ICO, and other legal, regulatory and law enforcement bodies;
  • In anonymised form, I may share personal data with:
  • Any third party, in relation to the sale of some or all of my business, or its assets, or as part of any business restructuring or reorganisation. I will take steps with the aim of ensuring that your rights continue to be protected if your personal data is transferred in accordance with this clause; and
  • Data aggregators and platform providers as part of an analysis of user metrics or sales performance (including but not limited to Google and Facebook).
  • I may also share your personal data with third party media businesses for the purposes of marketing my offerings, improving my services, and running a profitable business. These third party businesses may include, wedding magazines/publications, wedding websites, social media sites, or other outlets, with the aim of raising public awareness of my business.

Security, storage and data retention

Stephanie Paterson Photography stores your personal data in the The European Economic Area (EEA) and Stephanie Paterson Photography retains full details of your personal data for as long as it takes to complete your photography requirements. I will delete your personal data ten years after completion of your photography requirements (I am obliged to keep a 6 year record of works carried out for my HMRC tax records), but you retain the right for your personal data to be deleted before this point, which can be exercised by submitting a formal request for deletion via email to Stephanie@stephaniepaterson.co.uk.

Storage of images

All images taken by Stephanie Paterson Photography will be stored securely on encrypted hard drives within my password protected home office computer. Where cloud technology is used for storage backup, the provider will be vetted to ensure they comply with the relevant regulations on data privacy and data security. Below shows an up to date list of any cloud technology that I am currently using.

  • Siteground – Images used throughout my website galleries and blogs.

 

Social Media Policy And Usage

I adopt a safe and responsible Social Media Policy. While I may have official profiles on social media platforms users are advised to verify the authenticity of such profiles before engaging with, or sharing information with such profiles. I will never ask for personal details on social media platforms. Users are advised to conduct themselves appropriately when engaging with me on social media.

Your consent

By using this site and/or engaging me on my Terms and Conditions, you agree to be bound by this Notice.

Your right to withdraw consent

You have the right to withdraw your consent to be bound by this Notice at any time. If you wish to do so, please use the contact form at the bottom of this page. You also have the right, as set out above, to withdraw your consent to me processing your personal data.

Your right to lodge a complaint

As well as the right to withdraw consent and exercise any of the above rights mentioned under ‘Your rights under the GDPR’, you also have the right to raise a complaint with a regulatory body. In the United Kingdom, this is the Information Commissioner’s Office (ICO). If you have concerns about the way your data is being processed by an organisation, you can find out more here.

More detailed information

If you want to contact me with questions about your personal data, wish to exercise any of your rights or ask me further detailed questions, please use the contact form at the bottom of this page.

Get in touch!