Privacy Policy

Lotte Simons Photography is committed to ensuring the secure and lawful handling of all personal data that is collected. I would like to reassure you that no personal data collected by Lotte Simons Photography is sold, traded or leased to any other companies for marketing or advertising purposes. This privacy policy is in place to provide users and clients with more control over the collection, use and storage of their personal data. Please find below all the information you will need on types of personal data I hold, when and why it is collected, how it is used and how it is secured. If you are in any doubt as to how your personal data is handled please contact the Data Controller to request this information and with any queries as to the handling of your data.

I would first like to advise you that Lotte Simons Photography is the Data Controller for this business and website.

1. Personal Data Collected

1.1 Data collected through the contact form includes first name, last name and email address.

1.2 Data collected at the checkout includes first name, last name, email address, phone number and postal address (billing and/or shipping)

1.3 Usage data is automatically collected by this website. This includes IP addresses, the type of device used to access the site, time and date of access, size of data files sent to the server and user agent information (i.e. which web browser was used) These are recorded as system logs for the operation and maintenance purposes.

2. Use of Personal Data

2.1 The purpose of collecting personal data is to carry out the core functions of the business, either to provide you with a photographic service, product or email communication that you have requested to receive.

2.2 Your personal data will never be used to contact you with any form of marketing material unless you have opted in to receive it.

3. Method of Data Processing & Data Retention

3.1 Data is processed in a proper manner and appropriate security measures are undertaken to prevent unauthorized access, disclosure, modification or destruction of data. All data is processed using computers and IT enabled tools.

3.2 All personal data entered via this website is collected and stored in my servers database.

3.3 All data processing is carried out at the Data Controllers operating offices

3.4 You are responsible and confirm you have the correct consent for any third-party personal data published or shared through this website.

3.5 Data is retained for the time necessary to fulfill the requested or contracted services

3.6 I am required by HM Revenue and Customs to retain data provided as billing information for a period of 6 years, after which time it will be destroyed.

4. Security

4.1 All systems retaining personal data are password protected.

5. Third Party Access

5.1 It is sometimes necessary to authorise web designers and IT Technical support access to website servers in order to carry out maintenance.

5.2 Paypal obtains personal data entered at the checkout at the point of payment. This includes first name, last name, email address and shipping address. Please refer to their Privacy Policy for more information on how they collect, handle and secure your data.

5.3 Printing and shipping of event photos are fulfilled by a third party printing lab. Personal data is passed automatically to the print lab once you have placed an order and is used for shipping information.

6. Your Rights

6.1 You have the right to request access to all personal data I may hold for you and how it is held.

6.2 You have the right to rectification of any misinformation

6.3 You have the right to restrict the processing of your data

6.4 You have the right to request the removal of your personal data from my records with the exception of that I am legally required to retain. (Please refer to Method of Data Processing)

6.5 If at any time you feel I have mishandled your personal data it is your right to lodge a complaint with the Information Commissioners Office (ICO) (UK)

7. Legal Action & Consent

7.1 I may be legally required to share personal data I hold with public authorities upon their request.

7.2 By freely providing your personal data you give your consent for it to be collected, used and held as outlined in the information provided on this page.

Cookies

A cookie is a small piece of data sent from a website and stored by your web browser.

This website contains third-party performance cookies that monitor visitor behaviour in order to improve information and provide a more enjoyable user experience

These cookies belong to Google Analytics. This is a web analytics service provided by Google, Inc. to help me see how you navigate my website. In doing so information about your use of my website, including your IP address, may be transmitted to Google and stored on servers in the United States. The data collected by Google Analytics is used to analyse how frequently individuals revisit this website, how the website is found, and which pages are most frequently viewed. This information is combined with data from all other users to create an overall picture of website use, and is never identified individually or personally and is not linked to any other information stored about you.

Cookies will automatically expire:
_ga cookies will be deleted after 2 years
_gid cookies after 24 hours
Session cookies expire immediately once you stop browsing

You can disable and remove cookies in your web browser preferences

This privacy policy has been updated to comply with The General Data Protection Regulation (EU) 2016/679
Data Controller: [email protected]
Last Updated: 24th May 2018