Studiolife Photography is committed to safeguarding the privacy of our website visitors and photography service users.
This policy applies where we are acting as a data controller with respect to the personal data of our website visitors and service users; in other words, where we determine the purposes and means of the processing of that personal data. ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Studio Photography is the controller and responsible for your personal data (collectively referred to as “we”, “us” or “our” in this privacy notice).
We may process data about your use of our website and services (“usage data”). The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is Google Analytics. This usage data is primarily processed for the purposes of analysing the use of the website and services. The legal basis for this processing is our legitimate interests, namely monitoring and improving our website and services.
What information is being collected?
We collect a variety of information before, during and after you book with Studiolife Photography and use any of our services. This includes:
• Names, Addresses and Contact Information of the person(s) placing an order with us.
• Names, Addresses and Contact Information of the person(s) using our services.
• Names (and in some cases ages and gender) of all participants of a photo shoot.
• Details and notes taken throughout a photo session or service provided to help us remember conversations during and details of your session.
If you E-Mail us or send us messages via social media, these messages are stored within our email system or social media accounts. These messages are stored for as long as practicable to allow us to provide you with better future services.
Who is collecting the data?
This data is being collected by Studiolife Photography. We use a password protected data management software to hold our data.
How is it being collected?
The majority of our data is collected directly from you. Whether you fill out a form for us online, or tell us face to face, via the telephone, via e-mail or message.
In some cases, data may be given to us by a third party. This includes if somebody purchases a voucher for you – they will usually give us your name and details to allow us to process their order, and provide our service to you.
Why is it being collected?
Most of the data we collect is solely for the purpose of providing you with a service you have ordered, or had ordered for you.
Some of the data we collect is to help provide you with a better customer service experience
We are required by law to collect and store certain information relating to any order you place with us.
How will it be used?
Data we collect will be used by Studiolife Photography to enable us to provide our services and products to you.
Contact data (e-mail addresses) may be used to send you direct offers from Studiolife Photography about upcoming promotions or newsletters. These can be unsubscribed from at any time.
Studiolife Photography may internally analyse data for business and forecast purposes.
Who will it be shared with?
We take your privacy very seriously. We do not sell your data to third party organisations. There are a few scenarios where some of your data may be shared with third parties to allow us to provide our services to you. These include:
• Delivery and Postage Service Providers to allow us to send you documentation and orders you have placed. (Information shared includes Name, Address and in some case e-mail address / mobile number)
• Manufacturers (our printing labs) if we are sending an order directly to you from a lab. (Information shared includes Name, Address and in some case e-mail address / mobile number)
• Law Enforcement and Legal Requirements – we will provide data to law enforcement agencies if issued with a court order to do so.
How will this affect you?
We collect, store and process your data in such a way that should have no negative effect on you as an individual.
How long is the data stored?
Most data we collect is stored indefinitely. This is too allow us to provide a better service to you as a customer in the event that you contact us again in the future.
We are legally obliged to store some data for a minimum amount of time, for example sale order records, payment records etc.
Access to stored data.
If you have any questions about data we hold about you, please feel free to contact us. As well as trying to help you directly.
You may request a copy of any data we store about you – and we will comply with any requests as per the guidance of the Information Commissioner’s Office.
If you would like any clarification on how we collect, store or process your data – please contact us directly.
If you would like further information on the legal guidelines we operate within, or have any concerns about how we use your data, please check the ICO’s website at https://ico.org.uk
We have summarised the rights that you have under data protection law. Some of the rights are complex, and not all of the details have been included in our summaries. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.
Your principal rights under data protection law are:
(a) the right to access;
(b) the right to rectification;
(c) the right to erasure;
(d) the right to restrict processing;
(e) the right to object to processing;
(f) the right to data portability;
(g) the right to complain to a supervisory authority; and
(h) the right to withdraw consent.
You have the right to request access to your personal data, together with certain additional information. That additional information includes details of the purposes of the processing, the categories of personal data concerned and the recipients of the personal data. Providing the rights and freedoms of others are not affected, we will supply to you a copy of your personal data. The first copy will be provided free of charge, but additional copies may be subject to a reasonable fee.
You have the right to have any inaccurate personal data about you rectified and, taking into account the purposes of the processing, to have any incomplete personal data about you completed.
In some circumstances you have the right to the erasure of your personal data without undue delay. Those circumstances include: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; you withdraw consent to consent-based processing; you object to the processing under certain rules of applicable data protection law; the processing is for direct marketing purposes; and the personal data have been unlawfully processed. However, there are exclusions of the right to erasure. The general exclusions include: for exercising the right of freedom of expression and information; for compliance with a legal obligation; or for the establishment, exercise or defence of legal claims.
In some circumstances you have the right to restrict the processing of your personal data. Those circumstances are: you contest the accuracy of the personal data; processing is unlawful but you oppose erasure; we no longer need the personal data for the purposes of our processing, but you require personal data for the establishment, exercise or defence of legal claims; and you have objected to processing, pending the verification of that objection. Where processing has been restricted on this basis, we may continue to store your personal data. However, we will only otherwise process it: with your consent; for the establishment, exercise or defence of legal claims; for the protection of the rights of another natural or legal person; or for reasons of important public interest.
You have the right to object to our processing of your personal data on grounds relating to your particular situation, but only to the extent that the legal basis for the processing is that the processing is necessary for: the performance of a task carried out in the public interest or in the exercise of any official authority vested in us; or the purposes of the legitimate interests pursued by us or by a third party. If you make such an objection, we will cease to process the personal information unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.
You have the right to object to our processing of your personal data for direct marketing purposes (including profiling for direct marketing purposes). If you make such an objection, we will cease to process your personal data for this purpose.
You have the right to object to our processing of your personal data for scientific or historical research purposes or statistical purposes on grounds relating to your particular situation, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
To the extent that the legal basis for our processing of your personal data is:
(a) consent; or
(b) that the processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract, and such processing is carried out by automated means, you have the right to receive your personal data from us in a structured, commonly used and machine-readable format. However, this right does not apply where it would adversely affect the rights and freedoms of others.
If you consider that our processing of your personal information infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. In the UK this will be the Information Commissioner’s Office (ICO).
To the extent that the legal basis for our processing of your personal information is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.
You may exercise any of your rights in relation to your personal data in writing to us at our registered office address.
This business is owned and operated by The Studio Agency Ltd trading as Studiolife Photography.
Our principal contact for business is: firstname.lastname@example.org