Effective Date: 01/10/2025 Review Date: 01/01/2026
Business Name: SMJH Photography
Photographer: Amy Harding
Privacy & GDPR Policy
SMJH Photography is committed to protecting your privacy and ensuring that your personal data is handled in a lawful, transparent, and secure manner. This policy outlines how your data is collected, used, stored, and protected in accordance with the UK General Data Protection Regulation (UK GDPR).
1. Data Controller
The data controller for SMJH Photography is:
Amy Harding
Email: photographysmjh@gmail.com
2. What Data Is Collected
SMJH Photography may collect and process the following personal data:
2.1 Full name(s)
2.2 Contact details (email address, phone number, postal address)
2.3 Session details and preferences (e.g. location, type of session, accessibility needs)
2.4 Information shared via booking forms, questionnaires, emails, or direct messages
2.5 Consent preferences (e.g. model release, marketing opt-in)
2.6 Images captured during photography sessions
2.7 Payment records (excluding card details, which are processed securely via third-party providers)
3. Purpose of Data Collection
Your personal data is collected and processed for the following purposes:
3.1 To manage and confirm bookings
3.2 To communicate with you before, during, and after your session
3.3 To deliver photography services, including editing and gallery delivery
3.4 To fulfil legal and contractual obligations
3.5 To share selected images for marketing purposes, with your explicit consent
3.6 To maintain accurate business records for accounting and tax compliance
4. Legal Basis for Processing
SMJH Photography processes your data under the following lawful bases:
4.1 Contractual necessity – to provide agreed photography services
4.2 Legal obligation – to comply with tax, accounting, and business regulations
4.3 Consent – for marketing and model release purposes
4.4 Legitimate interest – to maintain client relationships and improve services
5. Image Use and Model Release
5.1 Images may be used for marketing purposes (e.g. website, social media, promotional materials) only with your explicit consent, obtained via a model release form.
5.2 You have the right to withdraw your consent at any time by contacting photographysmjh@gmail.com.
5.3 No personal details (e.g. names, locations) will be disclosed alongside images without additional consent6. Data Sharing
6.1 Your personal data will never be sold or shared with third parties for marketing purposes.
6.2 Data may be shared with trusted service providers (e.g. gallery hosting platforms, payment processors) solely for the purpose of delivering services.
6.3 All third-party providers are GDPR-compliant and contractually obligated to protect your data.
7. Data Storage and Security
7.1 All personal data is stored securely using password-protected systems and encrypted platforms where applicable.
7.2 Physical documents (e.g. signed forms) are stored in a locked, secure location.
7.3 Access to data is restricted to the data controller and used only for the purposes outlined in this policy.
8. Data Retention
8.1 Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected.
8.2 Booking and financial records are retained for up to 7 years in accordance with HMRC requirements.
8.3 Edited images are archived for up to 12 months unless otherwise agreed.
8.4 You may request early deletion of your data or images at any time.
.9. Your Rights
Under the UK GDPR, you have the right to:
9.1 Access the personal data held about you
9.2 Request correction of inaccurate or incomplete data
9.3 Request deletion of your data (subject to legal obligations)
9.4 Withdraw consent for marketing or image use at any time
9.5 Lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been misused
10. Contact
If you have any questions about this policy or wish to exercise your rights, please contact:
Amy Harding
Email: photographysmjh@gmail.com