GDPR Privacy Notice
Sarah Deane Photographic
Effective Date: May 20218
Last Updated: February 2026
At Sarah Deane Photographic, I am committed to protecting and respecting your privacy in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (or EU GDPR if applicable).
This Privacy Notice explains how I collect, use, store, and protect your personal data.
1. Who I Am
Business Name: Sarah Deane Photographic
Data Controller: Sarah Gemma Bell
Email: sarah@sarahdeanephotography.co.uk
Business Address: Clavering House, Clavering Place, NE1 3NG
For the purposes of data protection law, I am the “Data Controller” of your personal data.
2. What Personal Data I Collect
Depending on how you interact with me, I may collect the following information:
a) Client Information
Full name
Email address
Telephone number
Postal address
Social media handles
Details relevant to your photography session (e.g., preferences, special requirements)
b) Photographic Images
Digital photographs taken during sessions
Video footage for my studio’s BTS (if applicable)
c) Website Data
IP address
Cookies and usage data
Enquiry form submissions
3. How I Collect Your Data
I collect data when you:
Submit an enquiry via my website
Book a photography session
Sign a contract
Subscribe to my mailing list
Communicate with me via email, phone, or social media
Browse my website (via cookies)
4. Lawful Basis for Processing
Under GDPR, I rely on the following lawful bases:
Contractual obligation – To deliver photography services you have booked
Legal obligation – For accounting and tax records
Legitimate interest – For business operations and portfolio promotion
Consent – For marketing emails and use of images for promotional purposes (where required)
You may withdraw consent at any time.
5. How I Use Your Data
I use your personal data to:
Respond to enquiries
Manage bookings and contracts
Deliver photography services
Edit and deliver images
Maintain business records
Comply with legal and tax obligations
Promote my work (where permission has been granted)
Your images will never be sold to third parties.
6. Image Usage & Marketing
Images may be used for:
Website portfolio
Social media
Exhibitions
Printed marketing materials
This will only occur in line with your signed contract and model release agreement. You may opt out of promotional use at any time (subject to prior published materials).
7. How I Store and Protect Your Data
Your data is stored securely using:
Password-protected computers
Encrypted hard drives (where applicable)
Secure cloud storage providers
Reputable gallery delivery systems
I take reasonable steps to protect your data from loss, misuse, or unauthorised access.
8. How Long I Keep Your Data
Client contact details and contracts: up to 6 years (for legal and tax purposes)
Images: Minimum 12 months, or longer if archived.
Marketing data: until you unsubscribe
After this period, your data will be securely deleted.
9. Third-Party Services
I may share necessary data with trusted third parties, such as:
Online gallery providers
Cloud storage services (e.g. Google Drive, Dropbox)
Accounting software providers
Print labs
These providers are GDPR-compliant where required.
I will never sell your data.
10. Your Rights Under GDPR
You have the right to:
Access the personal data I hold about you
Request correction of inaccurate data
Request erasure (“right to be forgotten”)
Restrict or object to processing
Withdraw consent at any time
Lodge a complaint with a supervisory authority
In the UK, this is the Information Commissioner’s Office (ICO).
11. Cookies
My website may use cookies to enhance user experience and track website performance. You can control cookie preferences through your browser settings.
12. Changes to This Policy
I may update this Privacy Notice occasionally. The most recent version will always be available on my website.
If you have any questions about this Privacy Notice or how your data is handled, please contact:
Sarah
sarah@sarahdeanephtography.co.uk
Sarah Deane Photographic
