What personal data I collect and why I collect it
Comments
When visitors leave comments on the site I collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Contact forms, Information & Security
I use personal data, provided directly and voluntarily to me by clients, for two purposes. The first is to carry out my contractual obligations. This is the information I need to do my job. This personal data includes: names, addresses, email addresses, phone numbers and further information which I need to complete your photography requirements.
The second purpose is for me to analyse and fully understand client behaviour, to assist me in relation to sales and marketing. For example, to better understand where you heard about me and whether or not you choose to book me. This is a legitimate interest and a reasonable expectation that most people would have about a business.
When you first get in touch with me, it’s usually via the contact form on this website, via email, or mobile. I collect your names, wedding date and venue and closer to the wedding date I sometimes collect further information such as best man, maid of honour etc. All of this is information I need to perform my job.
The information which I retain is only accessible via my secure password protected system, which has also has firewall and anti virus protection. Only I have access to this. I also communicate with you via email and occasionally via mobile phone through text or voice. I use Gmail which is GDPR compliant.
If you make an initial enquiry with me and do not go ahead with booking me, after a single follow up call I delete your information from my system so that your data is no longer stored.
My website has a blog which is open to the public to comment on (once I have authorised it), if you make a comment, you can choose what personal data is shown. You can also choose to delete the comment.
Payments to me are largely made online using debit/credit cards, bank transfer or cheque. Your account details will therefore be visible in my business bank account in the normal way.
Right of confirmation, access, rectification and erasure
You have the right to confirmation, access, rectification and erasure of all the above data that I hold on you. For example, if you wish to see the initial email you submitted via the contact form and check it for accuracy, or perhaps following your wedding you’d like to have your details completely removed, then you have that right.
Cookies
If you leave a comment on my site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behave in the same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Analytics
The site also uses performance cookies which collect information about how you use the site, such as how you are referred to it and how long you stay on certain pages. This information is aggregated and therefore anonymous and is only used to improve the performance of the site. Some of these performance cookies are Google Analytics web cookies. To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.
Displaying of images & who I share your data with
Other than those third parties mentioned in this Notice and listed below, Jeff Woodall Photography shall not pass on your personal data to any third party.
Your personal data may, subject to my obligations to comply with data protection legislation, be shared with the following third parties:
- Associate or assistant photographers who join me on wedding or portrait shoots and need information in order to operate as such;
- Having taken precautions to maintain the security of such personal data, I may in certain circumstances share personal data with the ICO, and other legal, regulatory and law enforcement bodies
- We may disclose your contact details to our suppliers or subcontractors insofar as reasonably necessary to deliver sub-contracted services or product orders. The legal basis for this processing is consent.
- Media and related businesses for the purposes of marketing my offerings, improving my services, and running a profitable business. These third party businesses may include, wedding magazines/publications, photography websites, wedding websites, social media sites, or other outlets, with the aim of raising public awareness of my services.
- I may display images to promote Jeff Woodall Photography on my website, blogs, social media, on wedding photography related websites, in exhibitions, competitions, in advertising, brochures, business cards, magazine articles and other such material, providing that the images used are used lawfully and without damage to Jeff Woodall Photography’s client(s). The rights of the people captured in these photographs are protected by Jeff Woodall Photography as detailed in this privacy policy. Potential clients will be asked to give permission for this as part of the contractual agreement before any work is undertaken.
How long I retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to me. You can also request that I erase any personal data I hold about you. This does not include any data I am obliged to keep for administrative, legal, or security purposes.
As well as the right to withdraw consent and exercise any of the above rights mentioned under ‘Your rights under the GDPR’, you also have the right to raise a complaint with a regulatory body. In the United Kingdom, this is the Information Commissioner’s Office (ICO). ‘Jeff Woodall Photography’ operates under the umbrella of Opsytech Ltd, which is registered with the ICO. If you have concerns about the way your data is being processed by an organisation, you can find out more here.
Data Protection Officer
The data protection officer’s contact name is: Jeff Woodall
Clients & wedding guests captured in images
Under GDPR legislation, a digital image may in some instances constitute a form of personal data where they can be processed to allow “the unique identification or authentication of a natural person.” Jeff Woodall Photography will never photograph an individual as a means of unique identification or authentication unless consensually contracted to do so. Guests at weddings appear in photos taken by Jeff Woodall Photography as a part of the visual recording of the event in photos. Guests captured in portraits or in group photos do so as part of the event and their rights are protected by Jeff Woodall Photography as detailed in this privacy policy.
In terms of explicit GDPR compliance, Wedding clients and guests are photographed within the parameters of GDPR legislation on the basis of ‘legitimate interests.’ The taking of photographs of wedding guests when viewed as a form of processing personal data is necessary for the legitimate interests of Jeff Woodall Photography as a photography business unless there is a good reason to protect a given individual’s personal data which overrides those legitimate interests.
Operating within the parameters of legitimate interests as laid out in GDPR legislation, the disproportionate effort involved in providing privacy policy information to all wedding guests at the event and the degree to which it would distract me from performing my job renders it unfeasible to do. Wedding clients are therefore requested to direct their guests to read this privacy policy in advance of the event and to advise them to contact us in advance with any concerns around the processing of their personal data, namely being photographed.
Where I send your data
Visitor comments may be checked through an automated spam detection service.
Additional information
If you want to contact me with questions about your personal data, wish to exercise any of your rights, or ask me further detailed questions, please use the contact form.