GDPR & PRIVACY POLICY

Thank you for visiting my data protection policy. You can use this website without the need to provide any personal data. If you want to purchase any photographic services, then the processing of some personal data will be necessary.

Any personal data, such as the name, address, e-mail address or telephone number shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with any UK specific data protection regulations.

 

Privacy Policy

This Policy explains when and why I collect personal information about people who visit my website, how I use it and keep it secure. The Policy may change from time to time, and by using my website, you’re agreeing to be bound by this Policy.

 

Who is Collecting and can Access the Information?

Catherine Regan Photography is the controller of any data that passes through the website, and I am the only person who will have access to this information, and of this information:

  1. I will never sell or rent your information to any third parties
  2. I will never share your information with third parties for any marketing purposes.

 

What type of information is collected?

I obtain information through my website in three ways: anonymously, directly and by a third-party.

1. Anonymously: The anonymous information I collect may include your IP address, whether you are using a computer, a tablet or a phone, which country you are located, which website pages are accessed and how long you may spend looking at my lovely website pages.

2. Directly: The direct information I collect is when you make an enquiry, purchase products or purchase a photographic service. This will be your name(s), address(es), phone number(s), email address(es) and details about your event.

3. Third Party: If you purchase a product or service from me using an online payment method, your card information is not held by me but it is collected by a third party payment processor (stripe.com or paypal.com) who specialise in the secure online capture and processing of credit/debit card transactions. The only information I receive from the third party are notifications that a transaction has taken place, with the name of the payee, the date and the amount of the transaction. 

 

How is your information used?

I will use any information that you provide to:

  1. Carry out any obligations arising from any contracts entered into by you and me
  2. Seek your views or comments on the services I provide.
  3. Notify you of any changes to my services.

I will hold your personal information on my systems for as long as is set out in any relevant contract you hold with me, or for a maximum of 5 years.

 

Who has access to your information?

The only person who has any access to any information which is collected through my website or any other communications is Catherine Regan Photography, and of this information:

  1. I will never sell or rent your information to any third parties
  2. I will never share your information with third parties for any marketing purposes. 

 

Direct Marketing

Catherine Regan Photography does not generate a newsletter, offer any subscriptions and does not generate bulk or direct mail shots for marketing. If I contact you, it will be about an enquiry you have made or any photographic services we have agreed upon. All communications will be sent directly from me to you.

 

Profiling

This is where personal information is analysed to create a profile of your interests and preferences so you can be contacted with information relevant to you. I do not profile any of the information I collect.

Security Precautions 

When you provide any personal information, I take steps to ensure that it’s treated securely to protect the loss, misuse or alteration of any information. My website is protected with SSL and a secure page a lock icon will appear on your web browser to show that the page is secure.

Any information provided over the internet can never be guaranteed 100% secure. As a result, while I strive to protect your personal information, I cannot guarantee the security of any information you transmit to me, and you do so at your own risk. 

Once I receive your information, I make my best effort to ensure its security, and where I have given you a password which enables you to access my website galleries, you are responsible for sharing this password.

Any sensitive information such as credit or debit card details is encrypted and protected with 128 Bit encryption on SSL by the third party responsible to taking payments.

 

Use of ‘Cookies’

Like many other websites, Catherine Regan Photography uses website cookies. These are small text files that are stored in a computer system via an Internet browser.

The cookies collect anonymous statistical data about your browsing actions and do not identify you as an individual. For example, I use cookies to see how many visitors I have had, how long they spend on the website, whether they are using a computer, tablet or a mobile, and which part of the country you are located. This data helps me to improve my website and deliver a better service.

Any visitor information processed by the cookies is stored on my website and on the user’s computer browser. It is possible to switch off cookies by setting your browser preferences, and in some cases, turning cookies off may result in a loss of functionality when using my website.

 

Links to other websites

My website may contain links to other websites run by other vendors. This privacy policy applies only to the Catherine Regan Photography website‚ so I cannot be responsible for the privacy policies and practices of other sites if you access them using links from my website.

 

Client Galleries

Catherine Regan Photography creates a client gallery for each client to whom photos are delivered as part of the services contracted. Catherine Regan Photography’s client galleries are externally hosted by Pixieset. Their privacy policy can be found here: https://pixieset.com/privacy/

To visit a Catherine Regan Photography client gallery you will be required to enter personal data (namely your email address) and a password. Your personal data (email address) will be stored within Pixieset’s system, on their servers and will be used to email you up to a maximum of four times and only with information relevant to the client gallery you have accessed e.g. to inform you of a discount offer on gallery purchases. Any such emails sent to you will only be during the 12 month period for which the gallery is live. After 12 months has passed since a gallery was created it is automatically deleted and your personal data (email address) is completely removed from Pixieset’s system.

Only Catherine Regan will have access to your personal data (email address) stored on Pixieset’s system on behalf of Catherine Regan Photography. It will only be used as detailed above, will not be used for any other marketing purposes and will not be passed onto any third parties. Pixieset’s technical support team will have the means to access to your personal data (email address) but will never access or share this data other than by request from Catherine Regan.

By logging into a Catherine Regan Photography client gallery you are agreeing to opt in to receive relevant, gallery-specific emails as described above. Emails are automated so if you do not wish to receive such emails it is advised that you do not log into any Catherine Regan Photography client galleries.

If you wish to request for your personal data (email address) to be deleted from Pixieset’s servers, please email cathregan@live.co.uk.

 

Clients and Wedding Guests Captured in Photographs

Under GDPR legislation, a photograph may in some instances constitute a form of personal data where they can be processed to allow “the unique identification or authentication of a natural person”. Catherine Regan Photography will never photograph an individual as a means of unique identification or authentication unless consensually contracted to do so. Guests at weddings appear in photos taken by Catherine Regan Photography as a part of the visual recording of the event in photos. Guests captured in portraits or in group photos do so as part of the event and their rights are protected by Catherine Regan Photography as detailed in this privacy policy.

In terms of explicit GDPR compliance, wedding clients and guests are photographed within the parameters of GDPR legislation on the basis of ‘legitimate interests’. The taking of photographs of wedding guests when viewed as a form of processing personal data is necessary for the legitimate interests of Catherine Regan Photography as a photography business unless there is a good reason to protect a given individual’s personal data which overrides those legitimate interests.

Operating within the parameters of legitimate interests as laid out in GDPR legislation, the disproportionate effort involved in providing privacy policy information to all wedding guests at the event and the degree to which it would distract me from performing my job,makes it unfeasible to do. Wedding clients are therefore requested in their contract to direct their guests to read this privacy policy in advance of the event and to advise them to contact us in advance with any concerns around the processing of their personal data, namely being photographed.

 

Withdrawal of Consent

Anyone photographed by Catherine Regan Photography, whether a client or wedding guest, and whether past or current may withdraw consent for a photograph in which they appear to be displayed. The process for this is to email Catherine Regan Photography at cathregan@live.co.uk specifying the photo in question. Following this request, Catherine Regan Photography will then remove the photo from online and printed display wherever it appears.

 

Social Media Policy and Usage

I adopt a safe and responsible Social Media Policy. While we may have official profiles on social media platforms users are advised to verify the authenticity of such profiles before engaging with, or sharing information with such profiles. We will never ask for personal details on social media platforms. Users are advised to conduct themselves appropriately when engaging with us on social media.

 

Display of Images

I may display any photographs to promote Catherine Regan Photography on the Catherine Regan Photography website and blog, on social media, on wedding blogs, on wedding photography related websites, in exhibitions, in advertising, brochures, magazine articles and other such material, providing that the images used are used lawfully and without damage to Catherine Regan Photography’s client(s). The rights of the people captured in these photographs are protected by Catherine Regan Photography as detailed in this privacy policy.

 

Aged 16 or Under

If you are aged 16 or under‚ please get your parent or guardian’s permission before you provide me with personal information.

 

Review of this Policy & Access to your Information

I will keep this Policy under regular review, and the Policy was last updated in May 2018. If you are concerned about any information I have about you, you can write or email to:

Post: Catherine Regan Photography, 5 Battenhall Road, Worcester WR5 2BJ

Email: cathregan@live.co.uk