1. WHAT INFORMATION IS BEING COLLECTED?
1.1 – We collect a variety of information before, during and after you book with Jenny South Photography and use any of our services.
• Names, Addresses and Contact Information of the person(s) placing an order with us.
• Names, Addresses and Contact Information of the person(s) using our services.
• Names (and in some cases ages and gender) of all participants of a photo shoot.
- Details and notes taken throughout a photo session or service provided to help us remember conversations during and details of your session.
1.2 – If you E-Mail us or send us messages via social media, these messages are stored within our email system or social media accounts. These messages are stored for as long as practicable to allow us to provide you with better future services.
1.3 If you enquire with us but do not book we will hold this data for one year at which time we will audit the data we hold for you.
2. WHO IS COLLECTING THE DATA?
2.1 – This data is being collected by Jenny South Photography. We use a password protected data management software to hold our data and records.
3. HOW IS IT BEING COLLECTED?
3.1 – The majority of our data is collected directly from you. Whether you fill out a form for us online, or tell us face to face, via the telephone, via e-mail or message.
3.2 – In some cases, data may be given to us by a third party. This includes if somebody purchases a voucher for you – they will usually give us your name and details to allow us to process their order, and provide our service to you.
4. WHY IS IT BEING COLLECTED?
4.1 – Most of the data we collect is solely for the purpose of providing you with a service you have ordered, or had ordered for you.
4.2 – Some of the data we collect is to help provide you with a better customer service experience
4.3 – We are required by law to collect and store certain information relating to any order you place with us.
5. HOW WILL IT BE USED?
5.1 – Data we collect will be used by Jenny South Photography to enable us to provide our services and products to you.
5.2 – Contact data (e-mail addresses) may be used to send you direct offers from Jenny South Photography about upcoming promotions or newsletters. These can be unsubscribed from at any time.
5.3 – Jenny South Photography may internally analyse data for business and forecast purposes.
6. WHO WILL IT BE SHARED WITH?
6.1 – We take your privacy very seriously. We do not sell your data to third party organisations. There are a few scenarios where some of your data may be shared with third parties to allow us to provide our services to you.
• Delivery and Postage Service Providers to allow us to send you documentation and orders you have placed. (Information shared includes Name, Address and in some case e-mail address / mobile number)
• Manufacturers (our printing labs) if we are sending an order directly to you from a lab. (Information shared includes Name, Address and in some case e-mail address / mobile number)
• Law Enforcement and Legal Requirements – we will provide data to law enforcement agencies if issued with a court order to do so
7. HOW WILL THIS AFFECT YOU?
7.1 – We collect, store and process your data in such a way that should have no negative effect on you as an individual.
7.2 – To know more about your rights as an individual please scroll down.
8. HOW LONG IS THE DATA STORED?
8.1 – Most data we collect is stored indefinitely. This is too allow us to provide a better service to you as a customer in the event that you contact us again in the future.
8.2 – We are legally obliged to store some data for a minimum amount of time, for example sale order records, payment records etc.
8.3 — As Images/digital files are now classed as data we want to be clear with how your images will be stored and for how long. From the date of your session your digital images will be stored on secure encrypted hard drives, for 12 months. This includes RAW and edited files. We will contact you a month before deleting these files to make you aware that this is going to happen.
8.4 — If you have opted for an online password protected gallery this will be live for 6 months from the date of your photo premier appointment. It will then be archived at the 6 month point, and after 12 months will be deleted along with original images held by Jenny South Photography.
8.5 Jenny South Photography has a policy to cleanse all data held annually. We will review and audit the data we hold. We will evaluate whether and to what extent such data can be safely and securely deleted.
9. ACCESS TO STORED DATA.
9.1 – If you have any questions about data we hold about you, please feel free to contact us. As well as trying to help you directly.
9.2 – You may request a copy of any data we store about you – and we will comply with any requests as per the guidance of the Information Commissioner’s Office.
10. MORE INFORMATION.
10.1 – If you would like any clarification on how we collect, store or process your data – please contact us directly.
10.2 – If you would like further information on the legal guidelines we operate within, or have any concerns about how we use your data, please check the ICO’s website at https://ico.org.uk
11. OUR DETAILS
11.1 – This business is owned and operated by Jenny South trading as Jenny South Photography.
11.2 – Our principal contact for business is : firstname.lastname@example.org
11.3 Our business address is Studio F.27 Ocean Studio’s Plymouth, Devon PL1 4GN England.
WHAT ARE YOUR RIGHTS OVER YOUR PERSONAL DATA?
The GDPR provides the following rights individuals:
Right to be informed – Individuals have the right to be informed about the collection and use of their personal data.
Right of access – individuals have the right to access their personal data and supplementary information (known as a subject access request)*
Right to rectification – GDRP includes rights for individuals to have inaccurate personal data rectified or completed if it is incomplete.
Right to erasure/forgotten – GDRP introduces a right for individuals to have personal data erased in certain circumstances.
Restrict processing – Individuals have the right to request the restriction or suppression of their personal data.
Data portability – right to transfer data between controllers – The right to data portability allows individuals to obtain and reuse their personal data for their own purposes across different services.
Right to object – Individuals have the right to object to processing based on legitimate interests of the performance of a task in the public interest, direct marketing and processing for purposes of scientific/historical research and statistics.
Right not to be subject to automated decision making – GDRP has provisions on automated individual decision making and profiling. *To ask for your information, please contact the Studio email@example.com
Your right to withdraw consent – whenever you have given us your consent to use your personal data, you have the right to change your mind at any time and withdraw that consent.
If you feel that your data has not been handled correctly, or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office.
We would appreciate the chance to deal with your concerns before your approach the ICO so please contact us in the first instance.
You can contact them by calling 0303 123 1113 or go online to www.ico.org.uk/concerns
Last Edited on 24-05-2018