GDPR and Privacy Policy
This Privacy Policy outlines how James Powell Photography complies with the GDPR (General Data Protection Regulation). This Policy explains how James Powell Photography; collects, processes, manages and stores your personal details and what your rights are under GDPR and
how they are adhered to.
Website use – jamespowellphotography.co.uk (Site)
James Powell Photography is committed to safeguarding the privacy of its website users and its customers.
The Site uses a WordPress hosting platform through Go Daddy. Your data may be stored through WordPress.com’s and godaddy.co.uk’s data storage, databases and their general applications. They store your data on secure servers behind a firewall.
The site utilises systems that are designed to prevent unauthorised access to any personal data you may submit on the Site. The Site maintains data accuracy and guarantees the correct use of the information under this statement. The systems used at The Site comply with the latest security standards and include necessary electronic, physical, and managerial procedures, which help to protect the information collected online and to ensure and guarantee its correct and safe use. Nevertheless, due to the fact that no data can be 100% free on the Internet, we cannot guarantee that any information submitted to us will be totally secure and safe. Users provide the information at their own risk. The Site constantly assesses and evaluates the abilities of new technologies in providing the additional protection of the information where possible.
The use of the jamespowellphotography.co.uk does not require any personal information when you visit our Site. Should you wish to provide your personal details on the course of a product related enquiry or in transacting to receive additional information – any information you provide to us will be protected from unauthorised access and you will be informed of exactly how your information is to be used. The details below state the exact way in which information practices are handled by James Powell Photography below.
Your Personal Information
By Personal Information we are referring to a visitor’s personal name, e-mail address and any other information they deem fit to provide. Personal Information can be gathered via an online contact form, by the posting of a comment in relation to content on the site, or by interacting with one of James Powell Photography’s Social Media platforms (Facebook, Instagram, Pinterest). We may also request Personal Information when hosting a competition whereby applicants must apply to participate.
Under no circumstances will any Personal Information be used for anything other than the reason it has been submitted for. We reserve the right to use any Personal Information for promotion administration purposes, including but not limited to verification and notification of winners as applicable.
All correspondence to James Powell via email, social media, website, contact form, Whatsapp, messenger are password protected and James Powell Photography is solely responsible for the handling and managing of all personal data.
Any Personal Information obtained regarding an enquiry will be stored within the medium in which it was received and, unless a booking is complete, all Personal Information will be anonymised prior to the date of the event or six months after final contact is made (which ever is later). Where a booking is made, relevant Personal Information provided by the client will be stored for a period of ten (10) years after the date of the event.
All electronic devices where your Personal Information is stored, for example, mobile phone, tablet and desktop, all contain passwords. Images are stored on external hard drives which are password protected. Any paper documents where your Personal Information can be accessed are stored in a secure, private location only accessible by James Powell Photography.
James Powell Photography may at times use an assistant or a second shooter, under these circumstances they will have access to your name and telephone number for the duration of the event. All paperwork with this Personal Information on will be destroyed after the event has been carried out.
Personal information shall not be shared with Third Party operators or websites, unless considered necessary when completing your transaction. For example, James Powell Photography uses pic-time.com as a means to distribute final photographs to clients; James Powell Photography will use your name and images to complete this order. This Site holds no responsibility for privacy policies on other sites, but endeavours to only work with GDPR compliant companies.
James Powell Photography may need to disclose Personal Information, when necessary, in the instance of insurance claim, or legal reason that may occur. Wherever possible James Powell Photography will inform those affected prior to the release of Personal Information.
Communication with you
James Powell Photography will contact you regarding your enquiry, booking, to collect fees or monies owed, or as otherwise necessary. For these purposes we may contact you via email, telephone, text message, messenger and / or postal mail.
Images
GDPR legislation states that a photograph may contain some form of personal data where they can be processed to allow “the unique identification or authentication of a natural person”. James Powell Photography will never photograph an individual as a means of unique identification or authentication unless contracted to do so. Guests at events, where James Powell Photography has been contracted to capture images, appear in photos taken by James Powell Photography as a part of the documentation of the event. Guests captured in portraits or in group photos do so as part of the event and their rights are protected by James Powell Photography as detailed in this Privacy Policy.
In terms of explicit GDPR compliance, clients and guests are photographed within the parameters of GDPR legislation on the basis of ‘legitimate interests’. The taking of photographs of guests when viewed as a form of processing personal data is necessary for the legitimate interests of James Powell Photography as a photography business unless there is a good reason to protect a given individual’s personal data which overrides those legitimate interests.
Operating within the parameters of legitimate interests as laid out in GDPR legislation, the disproportionate effort involved in providing Privacy Policy information to all guests at the event and the degree to which it would distract us from performing our job renders it infeasible to do. Booking clients are therefore requested in their contract to direct their guests to read this Privacy Policy in advance of the event and to advise them to contact us in advance with any concerns around the processing of their personal data, namely being photographed.
We may display any photographs to promote James Powell Photography on our website, blog, on social media, on photography related websites, in exhibitions, in advertising, brochures, magazine articles and other such material, providing that the images used are used lawfully and without damage to James Powell Photography’s client(s). The rights of the people captured in these photographs are protected by James Powell Photography as detailed in this Privacy Policy.
James Powell Photography retains the full copyright of any photographs produced. Images captured at events will be retained for a minimum of two (2) years after the date of the event.
Your Right to Access information or Withdraw your Data
Anyone photographed by James Powell Photography, whether a client or guest, and whether past or current may withdraw consent for a photograph in which they appear to be displayed. The process for this is to email specifying the photo in question. After the request has been made, James Powell Photography will take the necessary step to remove the image online.
You have the right to contact James Powell Photography at anytime and ask to view the Personal Information that the business has stored on you. You have the right to ask to have such information deleted or removed. If you would like access to your stored data please contact James Powell at studio@jamespowellphotography.co.uk
External Website Links and Third Parties
This statement covers all areas in which Personal Information has been received according to information collection practices on www.jamepowellphotography.co.uk . Links located at the Site may be to and from other internet sites, including but not limited to the sites affiliated to the Site. The Site does not hold any responsibility for the privacy policies or content of all the other websites that it may link to. We encourage you to review the Privacy Policy and Terms of Use of any Third Party company we may link to – prior to deciding to submit your personal information on other such sites.
Right to amend our Privacy Statement
James Powell Photography reserves the right to amend this Privacy Policy at any time. Changes shall be effective right upon posting up on the Site. Last updated March 2019
Questions – Contact Us
If you have any questions or concerns about this Statement, you are invited to contact us at email: studio@jamespowellphotography.co.uk