What data do I collect?
1.1 – I collect a variety of information before, during and after you book with Phil Gibbons Photography. This includes:
• Names, Addresses and Contact Information of the person(s) using my services.
• Names (and in some cases ages and gender) of all participants of a photo shoot.
• Details and notes taken throughout a photo session to help me remember conversations during and details of your session.
1.2 – If you email me or send me messages via social media, these messages are stored within my email system or social media accounts. These messages are stored for as long as practicable to allow me to provide you with better future services.
Who is collecting the data?
2.1 – This data is being collected by Phil Gibbons Photography, 48 Waterloo Road, Bramhall, Stockport. SK7 2NX.
How do I collect your data?
3.1 – The majority of my data is collected directly from you. Whether you fill out a form for me online, or discuss with me face to face, via the telephone, via e-mail or message.
3.2 – In some cases, data may be given to me by a third party.
Why is it being collected?
4.1 – Most of the data I collect is solely for the purpose of providing you with a photo shoot you have ordered.
4.2 – Some of the data I collect is to help provide you with a better customer service experience.
4.3 – I am required by law to collect and store certain information relating to any order you place with me.
How will it be used?
5.1 – Data I collect will be used by Phil Gibbons Photography to enable me to provide my services to you.
5.2 – Contact data (e-mail addresses) may be used to send you direct offers from Phil Gibbons Photography about upcoming promotions or newsletters. These can be unsubscribed from at any time.
5.3 – Phil Gibbons Photography may internally analyse data for business and forecast purposes.
5.4 – Phil Gibbons Photography has a legitimate interest in using images taken in relation to your booking and may use these images (upon client’s expressed consent) in the following ways:
• On social media for promotion & advertising purposes.
• On our website for promotion & advertising purposes.
• For marketing materials (business stationary, flyers, business cards etc).
• For publications/print.
Who will it be shared with?
6.1 – I take your privacy very seriously. I do not sell your data to third party organisations. There are a few scenarios where some of your data may be shared with third parties to allow us to provide our services to you. These include:
• Delivery and Postage Service Providers to allow us to send you documentation and orders you have placed. (Information shared includes Name, Address and in some case e-mail address / mobile number)
• Manufacturers (my printing labs) if we are sending an order directly to you from a lab. (Information shared includes Name, Address and in some case e-mail address / mobile number)
• Law Enforcement and Legal Requirements – I will provide data to law enforcement agencies if issued with a court order to do so.
• All of my backups are internal and are NOT Cloud based.
How will this affect you?
7.1 – I collect, store and process your data in such a way that should have no negative effect on you as an individual.
How long is the data stored?
8.1 – Most data I collect is stored indefinitely. This is to allow us to provide a better service to you as a customer in the event that you contact me again in the future.
8.2 – I am legally obliged to store some data for a minimum amount of time, for example sale order records, payment records etc.
Access to stored data.
9.1 – If you have any questions about data I hold about you, please feel free to contact me.
9.2 – You may request a copy of any data I store about you – and I will comply with any requests as per the guidance of the Information Commissioner’s Office.
10.1 – If you would like any clarification on how I collect, store or process your data – please contact me directly.
10.2 – If you would like further information on the legal guidelines I operate within, or have any concerns about how I use your data, please check the ICO’s website at https://ico.org.uk
Your data protection rights.
Certain applicable data protection laws give you specific rights in relation to your personal data. In particular, you have the following rights in relation to your personal data:
11.1 – Right of access: If you ask me, I will confirm whether we are processing your personal data and, if so, provide you with a copy of that personal data along with certain other details.
11.2 – Right to rectification: If your personal data is inaccurate or incomplete, you are entitled to ask that I correct or complete it. If I shared your personal data with others, I will tell them about the correction where possible.
11.4 – Right to restrict processing: You may ask me to restrict or ‘block’ the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to me processing it. I will tell you before I lift any restriction on processing.
11.5 – Right to data portability: You have the right to obtain your personal data from me that you consented to give me or that was provided to me as necessary in connection with my contract with you. I will give you your personal data in a structured, commonly used and machine-readable format. You may reuse it elsewhere.
11.6 – Right to object: You may ask me at any time to stop processing your personal data on grounds relating to your particular situation, and we will do so:
– If I am relying on a legitimate interest to process your personal data — unless I demonstrate compelling legitimate grounds for the processing or
– If I am processing your personal data for direct marketing.
11.7 – Right to withdraw consent: If I rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing of your data before I received notice that you wished to withdraw your consent.
11.8 – Right to lodge a complaint with the data protection authority: If you have a concern about my privacy practices, including the way I handled your personal data, you can report it to the UK data protection authority (the Information Commissioner’s Office or ICO), or, as the case may be, any other competent data protection authority of an EU member state that is authorised to hear those concerns (you may find EU Data Protection Authorities’ contact information here).
If you wish to exercise any of these rights please contact me as described in the “Contact” section below. I may also need to ask you for further information to verify your identity before I can respond to any request.
12.1 – This business is owned and operated by Philip Gibbons trading as Phil Gibbons Photography.
12.2 – My principal place of business is at: 48 Waterloo Road, Bramhall, Stockport. SK7 2NX.
12.3 – You can contact me in writing to the above address, or by email to email@example.com