Mark Ellis Photography respects your privacy and is committed to protecting your personal data. This privacy policy outlines how we collect, use, and protect your information in accordance with the UK GDPR and the Data Protection Act 2018.
1. Information We Collect
We may collect and process the following personal data:
Identity Data: Name, title, and contact details.
Booking Data: Event details, such as dates, locations, and services requested.
Photographic Data: Photos and videos taken during sessions.
Payment Data: Payment details processed securely through third-party providers.
Technical Data: IP address, browser type, and device information.
Usage Data: Information about your interaction with our website.
Marketing Data: Preferences for receiving promotional content.
2. How We Use Your Data
We use your data to:
Provide and improve our photography services.
Respond to inquiries or booking requests.
Send updates, promotions, or newsletters (with your consent).
Comply with legal and regulatory requirements.
3. Legal Bases for Processing
We process your personal data under the following legal bases:
Consent: When you provide explicit consent.
Contract: To fulfill a contract with you or take steps at your request before entering into one.
Legal Obligation: To comply with legal obligations.
Legitimate Interests: When processing is necessary for our legitimate business interests, except where your rights override these interests.
4. Data SharinG
We do not sell your personal data. However, we may share it with:
Service providers, such as payment processors or delivery services, to facilitate our services.
IT providers who support our website and data security.
Regulators or authorities where required by law.
5. International Data Transfers
If your data is transferred outside the UK, we will ensure it is protected under appropriate safeguards, such as standard contractual clauses approved by the UK Information Commissioner’s Office (ICO).
6. Data Retention
We retain your data only as long as necessary for the purposes outlined above, including fulfilling legal, accounting, or reporting requirements.
7. Your Rights
Under the UK GDPR, you have the following rights:
Access: Request a copy of your personal data. Rectification: Request corrections to inaccurate or incomplete data. Erasure: Request deletion of your data where applicable. Restriction: Request a temporary halt to processing. Data Portability: Request transfer of your data to you or another provider. Objection: Object to processing based on legitimate interests or direct marketing. Withdraw Consent: Withdraw your consent at any time.
8. Data Security
We implement appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed without authorization.
9. Cookies
Our website uses cookies to improve user experience and analyze traffic. For more details, please see our Cookie Policy.
10. Contact Us
If you have any questions about this privacy policy or how we handle your data, please contact us: