Privacy Policy
1. Identity and contact information
This Privacy Notice (“Notice”) is provided by Zoe Warboys trading as Zoe Warboys Photography, part of Warboys Arts Ltd (“WA”, “me”, or “I”).
Warboys Arts Ltd
120 Juniper
Birch Hill
Bracknell
Berks
RG12 7ZF
info@zoewarboysphotography.co.uk
07768 194683
It covers your rights in relation to the Data Protection Act 1998 (“DPA”), the General Data Protection Regulation (“GDPR”) and the Privacy and Electronic Communications Regulations (“PECR”).
This Notice also explains how WA complies with the DPA, GDPR and PECR as well.
WA is both the controller and a processor of all personal data collected.
Date this Notice was created: 21st July 2018
Date this Notice was last modified: 9th September 2018
2. Compliance declaration
Both WA and this website, www.zoewarboysphotography.co.uk, comply with the DPA, GDPR and PECR. The GDPR comes into effect on the 25th of May 2018. This Notice is updated whenever changes are made to relevant data protection legislation.
3. Your rights under the GDPR
Under the GDPR, you have a number of different rights relating to your personal data and how it is processed. They are as follows:
- Right to be informed about the collection and use of your personal data.
- Right to access your personal data, and any supplementary information which constitutes personal data.
- Right to have your personal data rectified; this means you can ask me to correct your personal data if it changes, turns out to be inaccurate, or is incomplete.
- Right to have your personal data deleted; this means that you have the right to request the deletion or removal of your personal data. There are some circumstances when you do not have this right.
- Right to restrict me processing your personal data.
- Right to data portability.
- Right to object to me processing your personal data.
- Rights related to automated decision making including profiling.
Most of these Rights will apply to your personal data and how it is processed by WA, but some (such as the right to data portability and rights related to automated decision making including profiling) are not relevant to this business at the time of writing.
For other information relating to data protection legislation, please visit the ICO website directly.
4. The data I collect, how I use it and why
Client contact information
I use personal data, provided directly and voluntarily to me by clients, for two purposes. The first is to carry out my contractual obligations. This means that it is information I need to do my job. This personal data includes: names, addresses, email addresses, phone numbers and further information which I need to complete your photography requirements.
As a keeper of images I expect to keep contact details of those clients indefinitely. This enables me to contact you with reference to those images, their storage, their use in any form of publicity. My contracts explain that I have copyright of these images and as owner of such it is within my right to use the images, however, I would never use images without first notifying and seeking approval from that client, therefore I hold contact details for this purpose only.
The second purpose is for me to analyse and understand behaviour of my clients to assist me in relation to sales and marketing exercises. For example, to better understand where you heard about me and whether or not you choose to book me. This is a legitimate interest and a reasonable expectation that most people would have about a business.
Email addresses for gallery login
To deliver images to clients, I make use of a gallery and proofing service: Redframe.com. When clients share their galleries with friends and family it is possible for users to create favourite lists, leave comments and also share images, this requires an email address to access the service. This is also necessary for the ordering of prints. For further information about how Redframe collects and processes personal data please visit the www.Redframe.com.
Mailing lists
From time to time, I make use of mailing lists to help market my business. As of March 2018, I have deleted all personal data relating to mailing lists that are no longer relevant and precede GDPR coming into force. New mailing lists created from this point will be populated with personal data collected from you on the basis of explicit consent for this single purpose.
More detailed information
If you want to contact me with questions about your personal data, wish to exercise any of your rights, or ask me further detailed questions; please use the contact me form on this website.
5. Sharing information with third parties
Other than those third parties mentioned in this Notice and listed below, WA shall not pass your personal data to any third party.
Your personal data may, subject to my obligations to comply with data protection legislation, be shared with the following third parties:
- Redframe.com , as further described above;
- ‘Second photographers’ or ‘Associate photographers’ who join me on wedding shoots and need information to be able to do their job;
- Having taken precautions to maintain the security of such personal data, I may in certain circumstances share personal data with the ICO, and other legal, regulatory and law enforcement bodies;
In certain circumstances I may also share your personal data with third party media businesses for the purposes of marketing my offerings, improving my services, and running a profitable business. These third party businesses may include, wedding magazines/publications, wedding websites, social media sites, or other outlets, with the aim of raising public awareness of my business. In such cases I will seek confirmation that the client is happy for me to share the information in advance.
6. Security, storage and data retention
WA stores your personal data in a secure database. Prospective client details who do not convert into actual clients will be deleted 2 years after initial enquiry. For actual clients for whom I hold a gallery of images, details will be held on file indefinitely, if contact details change, I request that you contact me to keep them up to date.
7. Your consent
By using this site and/or engaging me on my Terms and Conditions, you agree to be bound by this Notice.
8. Your right to withdraw consent
You have the right to withdraw your consent to be bound by this Notice at any time. If you wish to do so, please use the contact form on this website. You also have the right, as set out above, to withdraw your consent to my processing your personal data.
9. Your right to lodge a complaint
As well as the right to withdraw consent and exercise any of the above rights mentioned under ‘Your rights under the GDPR’, you also have the right to raise a complaint with a regulatory body. In the United Kingdom, this is the Information Commissioner’s Office (ICO). If you have concerns about the way your data is being processed by an organisation, you can find out more here.
Pri
Loading...