Privacy Policy

1. Introduction

This Privacy Policy explains how Katy Goddard Photography collects, uses, stores, and protects personal information when providing photography services.

I am committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact Details

Data Controller: Katy Goddard Photography
Email: katy.goddardphotography@gmail.com

2. Information Collected

Depending on the services provided, I may collect the following personal information:

Client Information

  • Name

  • Email address

  • Telephone number

  • Postal address

  • Event details and booking information

Photography-Related Information

  • Photographs and video recordings containing identifiable individuals

  • Names of people featured in photographs

  • Special requests relating to photography sessions

Website Information

If you visit my website, I may collect:

  • IP address

  • Browser type and version

  • Device information

  • Website usage data through cookies and analytics tools

Payment Information

  • Billing address

  • Payment records

  • Transaction details

I do not store full payment card details where payments are processed by third-party payment providers.

3. How I Collect Information

I collect personal data when:

  • You contact me by email, phone, social media, or contact forms

  • You book photography services

  • You sign a contract or agreement

  • You attend a photography session or event

  • You subscribe to marketing communications

  • You visit my website

4. Legal Basis for Processing

Under UK GDPR, I rely on one or more of the following legal bases:

Contract

To provide photography services, manage bookings, deliver images, and process payments.

Legitimate Interests

To operate and improve my business, respond to enquiries, maintain records, and protect my legal rights.

Consent

Where required, including:

  • Email marketing communications

  • Certain uses of photographs

  • Optional cookies

You may withdraw consent at any time.

Legal Obligation

To comply with tax, accounting, and other legal requirements.

5. How I Use Your Information

I use personal information to:

  • Respond to enquiries

  • Provide photography services

  • Deliver photographs and galleries

  • Process payments and invoices

  • Manage client relationships

  • Maintain business records

  • Improve my services

  • Comply with legal obligations

  • Send marketing communications where permitted

6. Use of Photographs

Photographs may contain personal data where individuals can be identified.

Unless otherwise agreed, I may use selected photographs for:

  • Portfolio purposes

  • Website galleries

  • Social media promotion

  • Marketing materials

  • Professional competitions and publications

Where appropriate, permission will be obtained before using images for promotional purposes.

Clients may request that images are not used for marketing by contacting me.

7. Sharing Your Information

I do not sell personal information.

I may share personal data with trusted third parties where necessary, including:

  • Online gallery providers

  • Cloud storage providers

  • Website hosting companies

  • Payment processors

  • Accountants and professional advisers

  • Legal or regulatory authorities where required by law

All third parties are expected to handle personal data securely.

8. International Transfers

Some service providers may store data outside the United Kingdom.

Where personal data is transferred internationally, appropriate safeguards will be implemented in accordance with UK GDPR requirements.

9. Data Retention

I retain personal data only for as long as necessary.

Typical retention periods may include:

  • Client records and contracts: up to 7 years

  • Invoices and financial records: up to 7 years

  • Photographs and digital files: [Insert Retention Period]

  • Marketing records: until consent is withdrawn or no longer required

Data may be retained longer where required by law or to establish, exercise, or defend legal claims.

10. Data Security

I take reasonable technical and organisational measures to protect personal data, including:

  • Password-protected devices

  • Secure cloud storage

  • Encrypted services where appropriate

  • Restricted access to personal information

However, no method of electronic transmission or storage is completely secure.

11. Your Rights

Under UK GDPR, you may have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion of data

  • Restrict processing

  • Object to processing

  • Request data portability

  • Withdraw consent where processing is based on consent

To exercise these rights, please contact me using the details provided above.

12. Cookies

My website may use cookies and similar technologies to improve functionality and analyse website usage.

You can manage cookie preferences through your browser settings.

A separate Cookie Policy may be provided where required.

13. Complaints

If you have concerns about how your personal data is handled, please contact me first.

You also have the right to complain to the:

Information Commissioner's Office (ICO)

Website: Information Commissioner's Office

14. Changes to This Privacy Policy

I may update this Privacy Policy from time to time. Any changes will be published on my website and will take effect immediately upon posting.

Last updated: 2026