Privacy Policy
1. Who we are
Danny Loo Photography is a UK sole trader business.
We are the data controller for the personal data described in this policy.
If you have any questions about how your data is handled, you can contact us using the details at the end of this document.
2. What this policy covers
This policy explains:
• what personal data we collect
• how we use it
• the legal basis for using it
• how long we keep it
• who we share it with
• your rights under UK data protection law
This policy applies to:
• website visitors
• enquiries and clients
• individuals appearing in photographs we create
3. Personal data we collect and use
Website usage data
We collect data about how visitors use our website.
This may include:
• IP address
• browser type and version
• operating system
• pages visited
• time and date of visits
Source
Google Analytics.
Purpose
To understand website usage and improve performance.
Legal basis
Legitimate interests.
Enquiry data
When you contact us, we collect the information you provide.
This may include:
• name
• email address
• telephone number
• details of your enquiry
Purpose
To respond and provide information about our services.
Legal basis
Taking steps at your request before entering into a contract.
Client and service data
When you book our services, we collect information needed to deliver them.
This may include:
• name
• contact details
• booking details
• contracts
• invoices
• planning notes
Purpose
To manage bookings, deliver services, communicate with you, and keep business records.
Legal basis
Performance of a contract.
Image and photography data
Photographs and videos that identify individuals are personal data.
This may include:
• images of clients
• images of guests at events
• images taken in private or public settings
Purpose
To deliver the agreed photography services and supply final images to the client.
Legal basis
Performance of a contract.
Publication and marketing data
We may use selected images and related information for:
• our website
• social media
• portfolios
• promotional material
Purpose
To promote our photography services.
Legal basis
Consent or contractual agreement.
Where usage rights form part of a signed contract, images may continue to be used in line with that agreement.
Customer communication data
We keep records of communication with clients.
This may include:
• emails
• messages
• call notes
Purpose
To manage client relationships and maintain accurate records.
Legal basis
Legitimate interests.
Transaction data
We collect data relating to payments and purchases.
This may include:
• contact details
• invoice information
• payment records
Purpose
To supply services and meet legal and accounting obligations.
Legal basis
Performance of a contract and legal obligation.
4. Sharing your personal data
We may share personal data with trusted third parties where needed to deliver our services.
This may include:
• image hosting and gallery platforms
• print and album suppliers
• professional advisers
• insurers
We only share what is necessary.
We do not sell your personal data.
5. Image galleries and delivery
Online image galleries and digital image delivery are provided using Pixieset, a third-party platform based in the United States.
Pixieset acts as a data processor and stores personal data and image files on our behalf in order to provide secure online galleries and image delivery services.
Pixieset operates under its own privacy and security policies.
6. International data transfers
Some services we use store data outside the UK.
Image galleries are hosted using Pixieset, which is based in the United States.
Where personal data is transferred outside the UK, appropriate safeguards are used, including the UK Addendum to Standard Contractual Clauses.
7. Data retention
We keep personal data only for as long as necessary.
Retention periods are as follows:
• contracts, invoices, and client contact details
– up to 6 years after final delivery
• planning information and client notes
– between 1 and 2 years
• image files
– retained in line with contractual terms and business needs
We may retain data longer where required by law or to deal with legal claims.
8. Your rights
You have rights under UK data protection law.
These include the right to:
• access your personal data
• correct inaccurate data
• request deletion in certain cases
• restrict processing
• object to processing
• receive your data in a portable format
• withdraw consent
• complain to the regulator
The UK supervisory authority is the Information Commissioner’s Office (ICO).
9. Exercising your rights
You can exercise your rights by contacting us in writing.
We may ask for proof of identity before responding.
10. Cookies
Our website only uses cookies that are necessary for it to function. We do not use analytics or tracking cookies.
11. Changes to this policy
We may update this policy from time to time.
The latest version will always be published on our website.
12. Contact details
Danny Loo Photography
28 Chepstow Close, Stevenage, Hertfordshire, SG1 5TT, United Kingdom.
You can contact us:
• via the website contact form
• by email using the address shown on our website