Privacy Policy

Introduction 

This Privacy Policy applies to the personal data I collect from you when you make an enquiry and when you book me (and become my client), as well as data collected from visitors to my online client galleries. It also applies to the photographs I take, in terms of them being a form of personal data. I may update this Privacy Policy, so please visit my website from time to time for the most up to date version to check you are happy with any changes. This policy is effective from 15/11/2019. 

1. Who I am and how to contact me

My name is Kristen. I am a photographer based near Dundee, Scotland and I trade as What Kristen Saw. My website address is: www.whatkristensaw.co.uk. If you wish to contact me regarding this Privacy Policy, send me an email at: 

hello[at]whatkristensaw.co.uk       please replace the [at] with @ (I do this to avoid spam)

2. My website contact form, email and social media

When contacting me using the internet, your personal data may be held within the password protected admin area of my WordPress website (which is stored in the UK), my password protected email accounts and/or my password protected social media accounts (please make enquiries privately via social media).

Unfortunately the transmission of data using the internet is not completely secure and although I will do my best to protect your personal data, I cannot guarantee the security of data transmitted using the internet and you do so at your own risk.

3. How I use personal data

3.1 In this section I list what personal data I may collect, how I may use that personal data and my legal bases for processing it. 

3.2 Providing my services as a photographer 

If you make an enquiry, I may collect your name, your email address, your Skype contact details, the wedding/ event/ photoshoot date and venue, and any other information you choose to disclose to me. Please do not provide any personal data that is not relevant to your enquiry/ booking/ order.  

If you then choose to book me, I will collect additional information from you. This may include your full name(s), your home address, your contact telephone number and a list of first names for your chosen group/ specific photographs. I will also need the address(es) of the venue(s) I am required to be at (if this is someone else’s home address, please direct them to this Privacy Policy and ask their permission before disclosing it to me). If I am photographing a wedding, I will ask for a phone number to use if I need to make contact on the day of the wedding (if this is not your telephone number please direct the phone owner to this Privacy Policy and ask their permission before disclosing it to me).

This personal data may be used for the following purposes: 

  • to communicate with you and send you information in relation to your enquiry/ booking/ order
  • to create and send estimates/ invoices
  • to form part of a photography contract for your booking and to send you that contract to sign
  • to create myself an essential information sheet for the day of your wedding/ event/ photoshoot     
  • to carry out my services as a photographer
  • to set up your online client gallery 
  • to create and deliver any prints/ albums/ photography products you have ordered 
  • to send you marketing emails (I will ask for your consent to do this, you can withdraw consent at any time)
  • to run my photography business

My processing of personal data in these cases is necessary for the performance of a contract, necessary for the purposes of legitimate interest and/ or because I have consent to do so (see also Section 7.).

3.3 Photographs  

Photographs can be a form of personal data. When providing my services, I will take photographs which may identify you and anyone attending the wedding/ event/ photoshoot. Please can the Client make all those attending aware there will be a photographer present taking photographs and direct them to this Privacy Policy. If anyone has any concerns about photographs being taken, stored or displayed publicly, please let me know.  

For the purposes of advertising or otherwise promoting my work and business, I display examples of my photographs in the public domain (see list below). The Client(s) will be issued with a consent form with options to “opt-in” to the photographs from their wedding/ event/ photoshoot being displayed in the manners listed below: 

  • on my website and blog
  • on my social media
  • on my printed promotional material for display purposes (e.g. example albums)
  • on my printed materials for distribution (e.g. leaflets)

If the Client “opted-in” to the photographs being publicly displayed, you can still contact me to ask me to remove a photograph from the public domain. Please note, it may not be possible for me to completely remove a photograph shared online (especially if shared on social media) and I will be unable to withdraw already distributed printed promotional material. 

My processing of personal data in this case is necessary for the performance of a contract, necessary for the purposes of legitimate interest and/ or because I have consent to do so (see also Section 7.).

See Section 4. of this Privacy Policy for information about who I share photographs with. 

3.4 Using my online client galleries 

My online client galleries are externally hosted by ShootProof,whoare based in the USA. The Client will receive the photographs via a password protected gallery. If the photography contract permits, the access details to the gallery can be shared with others. When entering and using the gallery, visitors may be prompted to enter their email address, which allows them to use features such as “favourites” and to download the photographs. Email addresses provided by visitors will be stored within ShootProof’s system and I will be able to view them until I delete the gallery from ShootProof. Please note, a gallery may not be deleted until 2 years after the date of issue. I do not use the email addresses stored in ShootProof unless I have been contacted directly first, or I need to send an email related to the use of the gallery and the photographs within. Please also see Section 4. 

My processing of personal data in this case is for the performance of a contract and/ or necessary for the purposes of legitimate interest.  

3.5  Other  

If necessary, I may also use any of the personal data I have collected for the following purposes:

  • to enforce or defend legal rights  
  • to set up or maintain insurance cover 
  • to seek professional advice 
  • to enforce my T&Cs of business, contract terms or any agreement between me and you 
  • to comply with a legal or regulatory obligation 
  • to protect my property and business
  • to protect my vital interests, your vital interests or the vital interests of another person(s)

My processing of personal data in these cases is necessary for the purposes of legitimate interest and/ or compliance with a legal obligation. 

4. Who I share personal data with 

4.1 I am not responsible for the privacy policies and practices of third parties.

4.2 Suppliers of goods and services 

To enable me to run my photography business and to provide my services as a photographer, I may share personal data, including photographs, with some or all of the following third parties (please note, I reserve the right to change the suppliers of goods and services at any point in time).

ShootProof: a USA based company I use for online client galleries. See also Section 3.4 of this Privacy Policy. At the time of writing this Privacy Policy, ShootProof state they are GDPR complaint. Please read their privacy policy here: https://www.shootproof.com/legal/privacy-policy 

Folio Albums: a UK based company I use for albums, prints and other photography products. Please read their privacy policy here: https://www.folioalbums.com/privacy-and-cookie-policy/ 

Blurb: a USA based company I use for albums and prints. At the time of writing this Privacy Policy, Blurb state they are GDPR compliant. Please read their privacy policy here: http://www.blurb.co.uk/privacy 

Loxley Colour: a UK based company I use for albums, prints and other photography products. Please read their privacy policy here: https://www.loxleycolour.com/help/Privacy 

Second shooter: if a second shooter has been booked, I will need to share with them Client names, wedding/ event/ photoshoot date, and any other relevant personal data including addresses and phone numbers, to allow them to provide their services as a photographer.

Wedding suppliers: only if the Client has consented for me to do so, I may share the photographs, their names and wedding date with their wedding suppliers (florist and wedding venue for example). 

4.3 Third party websites 

Social media: onlyif the Client has consented for me to do so, I may share the photographs on my social media (Facebook, Twitter and Instagram).

Third party websites/ blogs: only if the Client has consented for me to do so, I may share the photographs and their names and wedding date with a third party website. 

4.4 Other

In limited circumstances, I may share your personal data with my insurers when discussing/ processing an insurance claim, with professional advisors in relation to the enforcement or defence of legal rights, HMRC if required to do so and with law enforcement officials if I feel disclosure may be necessary to comply with the law.

If necessary, I may also share personal data for the following reasons:

  • to enforce or defend legal rights  
  • to enforce my T&Cs of business, contract terms or any agreement between me and you 
  • to comply with a legal or regulatory obligation
  • to protect my property and business
  • to protect my vital interests, your vital interests or the vital interests of another person(s)

5. Data retention 

I will store your personal data for as long as is necessary for the purposes listed in this Privacy Policy, or for the period of time required by accounting/ tax, legal or regulatory requirements, whichever is longer. 

I generally keep photographs until I need to free up storage space on my devices or a Client asks me to delete them. This may allow prints and albums to be ordered at a later date. I may keep some photographs indefinitely as part of my photograph portfolio. These will be photographs I am particularly proud of and, with Client consent, may use them to promote my business (see also Section 3.3). I may also retain a copy of any relevant consent forms/ contracts, which will contain some personal data, for as long as I have copies of the photographs. Please note, you are responsible for safely storing and backing up the photographs.

6. Third party organisations/ websites

Sometimes I will provide links to websites belonging to third parties or direct you to third party organisations/ suppliers (printers for example). I am not responsible for the websites or the privacy policies and practices of third parties. This Privacy Policy does not cover how third parties process personal data. Please read their privacy policies and terms. 

7. Your data protection rights 

Under data protection law, you have rights I need to make you aware of. The rights available to you depend on my reason for using your personal data. Please see the Information Commissioner’s Office website for more information about your rights. 

Please use the email address in Section 1. if you wish to contact me about any of the rights listed below. 

The right to be informed: This Privacy Policy tells you about my collection and use of your personal data, but if there is anything else you need to know, please get in touch. 

The right of access: If you would like a copy of the personal data I hold about you, please get in touch.

The right to rectification: Let me know if any of the personal data I hold about you is inaccurate or incomplete and I will amend it where possible.

The right to erasure: In certain circumstances I can erase personal data I hold about you.

The right to restrict processing: In certain circumstances I can restrict the processing of your personal data.

The right to object: In certain circumstances you have the right to object to the processing of your personal data.

The right to withdraw consent: If I asked for your consent to use your personal data, you have the right to withdraw that consent by informing me.   

The right to lodge a complaint with the Information Commissioner’s Office in the UK.