UskLight Photography privacy notice

This privacy notice tells you what to expect me to do with your personal information.

Contents

  • Contact details
  • What information I collect, use, and why
  • Lawful bases and data protection rights
  • Where I get personal information from
  • How long I keep information
  • Who I share information with
  • Sharing information outside the UK
  • Cookies
  • How to complain

Contact details

Email: info@usklight.co.uk

What information I collect, use, and why

I collect or use the following information to provide and improve products and services for clients:

  • Names and contact details
  • Addresses
  • Date of birth
  • Third party information (such as family members or other relevant parties)
  • Payment details (including card or bank information for transfers and direct debits)
  • Usage data (including information about how you interact with and use my website, products and services)
  • Video recordings
  • Photographs and images of clients and event attendees

I collect or use the following personal information for information updates or marketing purposes:

  • Names and contact details
  • Addresses
  • Profile information
  • Marketing preferences
  • Website and app user journey information
  • IP addresses

I collect or use the following personal information to comply with legal requirements:

  • Name
  • Contact information
  • Any other personal information required to comply with legal obligations

I collect or use the following personal information for dealing with queries, complaints or claims:

  • Names and contact details
  • Addresses
  • Payment details
  • Photographs
  • Correspondence

Lawful bases and data protection rights

Under UK data protection law, I must have a "lawful basis" for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO's website.

Which lawful basis I rely on may affect your data protection rights, which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO's website:

  • Your right of access: You have the right to ask me for copies of your personal information. You can request other information such as details about where I get personal information from and who I share personal information with. There are some exemptions, which means you may not receive all the information you ask for.
  • Your right to rectification: You have the right to ask me to correct or delete personal information you think is inaccurate or incomplete.
  • Your right to erasure: You have the right to ask me to delete your personal information.
  • Your right to restriction of processing: You have the right to ask me to limit how I can use your personal information.
  • Your right to object to processing: You have the right to object to the processing of your personal data.
  • Your right to data portability: You have the right to ask that I transfer the personal information you gave me to another organisation, or to you.
  • Your right to withdraw consent: When I use consent as my lawful basis, you have the right to withdraw your consent at any time.

If you make a request, I must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact me using the contact details at the top of this privacy notice.

My lawful bases for the collection and use of your data

My lawful bases for collecting or using personal information to provide and improve products and services for clients are:

  • Consent: I have permission from you after I gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Contract: I have to collect or use the information so I can enter into or carry out a contract with you. All of your data protection rights may apply, except the right to object.

My lawful bases for collecting or using personal information for information updates or marketing purposes are:

  • Consent: I have permission from you after I gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Legitimate interests: I'm collecting or using your information because it benefits you, my business or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. My legitimate interest is:
    • I use photographs of my work, along with limited contact details, to promote my photography business through my website and social media. Displaying examples of my work is essential to a photographer, as it is how potential clients judge my style and decide whether to book me. This benefits my business by attracting new clients, and benefits those featured by showcasing them in a positive, professional way. The impact on individuals is low, as I only publish images with the appropriate permission, I never sell personal data, and anyone can ask me to remove their image or opt out of marketing at any time. I take care not to place my interests above the rights of the people involved.

For more information on my use of legitimate interests as a lawful basis, you can contact me using the contact details set out above.

My lawful basis for collecting or using personal information to comply with legal requirements is:

  • Legal obligation: I have to collect or use your information so I can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

My lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

  • Contract: I have to collect or use the information so I can enter into or carry out a contract with you. All of your data protection rights may apply, except the right to object.
  • Legitimate interests: I'm collecting or using your information because it benefits you, my business or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. My legitimate interest is:
    • When someone contacts me through my website, by email or by phone, I collect their name, contact details and the content of their message so that I can respond to their enquiry, answer questions and resolve any issues. This is necessary to run my business and to provide a good service, and it is what a person expects to happen when they choose to get in touch. The impact on individuals is minimal, as the information is only used to deal with their enquiry, is not shared for any unrelated purpose, and is kept only for as long as needed. I do not place my interests above the rights of the people contacting me.

For more information on my use of legitimate interests as a lawful basis, you can contact me using the contact details set out above.

Where I get personal information from

  • Directly from you
  • Suppliers and service providers
  • Third parties: Event organisers and businesses who engage me and may pass on the contact details of people involved in a shoot or event, and clients who provide the details of other people they are booking on behalf of, such as family members or others who will be photographed. I may also work with suppliers and service providers, for example printing and album companies, who help me deliver products and services.

How long I keep information

  • Photographs and images: kept for 2 years after delivery, then deleted, including backups, unless a longer period is agreed with the client or the images are used in my portfolio under consent.
  • Enquiries that do not lead to a booking: kept for up to 12 months, then deleted.
  • Client contact and booking details: kept for the duration of the work and afterwards for my records, so I can provide continued service to returning clients.
  • Financial and tax records, including invoices and payments: kept for 6 years, as required by HMRC.
  • Model releases and consents: kept for as long as I use the related images, so I can demonstrate that I had permission.

For more information on how long I store your personal information, or the criteria I use to determine this, please contact me using the details provided above.

Who I share information with

Data processors

Squarespace, website hosting provider. This data processor does the following activities for me: Squarespace hosts my website and processes personal information submitted through my website contact form, so that I can receive and respond to enquiries.

Google Workspace, email provider. This data processor does the following activities for me: stores and processes the emails and contact details of people who contact me by email, so I can manage and respond to enquiries.

Others I share personal information with

  • Publicly on my website, social media or other marketing and information media

Sharing information outside the UK

Where necessary, my data processors will share personal information outside of the UK. When doing so, they comply with the UK GDPR, making sure appropriate safeguards are in place.

For further information, or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact me using the contact information provided above.

  • Organisation name: Squarespace
    • Category of recipient: Website hosting and online services provider
    • Country the personal information is sent to: United States
    • How the transfer complies with UK data protection law: The International Data Transfer Agreement (IDTA)
  • Organisation name: Google Workspace
    • Category of recipient: Email and online services provider
    • Country the personal information is sent to: United States
    • How the transfer complies with UK data protection law: The International Data Transfer Agreement (IDTA)

Cookies

This website uses cookies to help it function and to understand how visitors use it. You can control or disable cookies through your browser settings. Where required, my cookie banner lets you manage your preferences.

How to complain

If you have any concerns about my use of your personal information, you can make a data protection complaint to me:

Email: info@usklight.co.uk

If you remain unhappy with how I've used your data after raising a complaint with me, you can also complain to the ICO.

The ICO's address:

Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint