Perfect — thank you! Here’s a professional, GDPR-compliant Privacy Policy tailored to KP-Photo with all your details included. You can copy and paste this directly onto your website (typically under a footer link titled Privacy Policy).
Privacy Policy
Last updated: October 2025
This Privacy Policy describes how KP-Photo (“we”, “our”, or “us”) collects, uses, and protects your personal information when you use our services or visit our website at www.kp-photo.co.uk.
1. Who We Are
KP-Photo
14 Avonvale Road, Trowbridge, BA14 8QS
Email: admin@kp-photo.co.uk
Telephone: 01225 571720
We provide professional photography services including newborn, family, wedding, and event photography. We are committed to protecting your privacy and ensuring that your personal data is handled in accordance with the UK General Data Protection Regulation (UK GDPR).
2. What Personal Data We Collect
We may collect and process the following information:
Personal details: Name, address, email address, phone number, and any other information you provide when contacting us or booking a session.
Session information: Details related to your booking, session preferences, and images captured.
Payment details: Limited information necessary for processing your payment (we do not store full payment card details).
Website data: Information automatically collected via cookies, analytics, and tracking pixels (e.g. IP address, browser type, and browsing activity).
3. How We Collect Data
We collect information in the following ways:
When you contact us via our website contact form, email, phone, or social media.
When you book a session or complete a contract or questionnaire through our systems (Pixieset or Sprout Studio).
Through cookies and analytics tools used on our website (e.g. Google Analytics, Meta Pixel).
From your participation in photoshoots and related activities.
4. How We Use Your Data
We use your information to:
Manage bookings and deliver photography services.
Communicate with you before, during, and after your session.
Process payments and maintain business records.
Deliver online galleries, proofs, and digital downloads via Pixieset.
Improve our website, services, and client experience.
With your consent, use images for marketing, portfolio display, or social media purposes.
5. Data Storage and Security
Your data is securely stored using:
Pixieset and Sprout Studio (for client galleries, forms, contracts, and invoices).
External hard drives and password-protected devices for image storage.
Cloud-based storage with encryption and secure login access.
Access to your data is limited to KP-Photo and our Virtual Assistant (VA), who is bound by confidentiality and GDPR compliance requirements.
6. Sharing Your Data
We only share your data when necessary to deliver our services, such as:
Image delivery and proofing platforms (Pixieset).
Business management software (Sprout Studio).
Subcontractors or assistants (including a Virtual Assistant) working under GDPR compliance agreements.
Payment processors, email service providers, or website hosting providers.
We do not sell or rent your personal data to third parties.
7. Marketing and Image Use
We will only use your images for marketing purposes (such as on our website, social media, or printed materials) with your explicit written consent, which is requested via your booking form or contract.
You may withdraw consent for image use at any time by emailing admin@kp-photo.co.uk.
8. Cookies and Website Tracking
Our website uses cookies and tracking technologies to:
Improve site performance and functionality.
Analyse website traffic via Google Analytics.
Support advertising and remarketing through Meta (Facebook/Instagram) pixels.
You can control or delete cookies through your browser settings. For more information, visit www.aboutcookies.org.
9. Data Retention
Client data is kept for as long as necessary to fulfil the purpose for which it was collected, or as required by law.
Session details and contracts: Retained for 7 years (for business and tax purposes).
Images: Typically stored for up to 2 years unless otherwise requested or deleted sooner.
Marketing consent: Retained until withdrawn.
10. Your Rights
Under UK GDPR, you have the right to:
Access the personal data we hold about you.
Request correction or deletion of your data.
Withdraw consent for marketing or image use.
Request restriction or transfer of your data.
To exercise your rights, please contact us at admin@kp-photo.co.uk. We aim to respond within 30 days.
11. Complaints
If you have any concerns about how we handle your data, please contact us first.
If you are not satisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
www.ico.org.uk
Tel: 0303 123 1113
12. Updates to This Policy
We may update this Privacy Policy occasionally to reflect changes in our practices or legal requirements. Updates will be published on this page, and the “Last updated” date will be revised accordingly.
Would you like me to also create a short Cookie Policy or a Terms & Conditions page to go with this (both are commonly linked alongside a Privacy Policy on photography websites)?