Privacy Policy

How I Handle Your Data & Photos

When you book with Rachel Weatherley Photography, I collect and use your personal information and photographs responsibly and securely.

What I collect

• • Your contact details (name, email, phone, address if needed).
• • Details about your booking (event date, location, timings, special requests, names of third parties (such as in group photograph lists)).
• • The photographs I take for you which will include images of you, your guests, and your venue.
• • Some photographs may reveal special category information (such as religion or health). I rely on your explicit consent, given in the Photographer's Agreement, to process such data.
• • Any other information you provide to me directly or through the use of my website.

Why I collect it & the legal basis

• To keep in touch with you about your booking and deliver your photographs — legal basis: performance of a contract.
• In relation to the personal information and photographs of guests and third parties, it is in my legitimate interests to process these in order to fulfil my contract with you — legal basis: legitimate interests.
• To meet legal and tax requirements (i.e. HMRC Reporting) — legal basis: legal obligation
• To showcase my work as part of my portfolio, website, and marketing, with your consent in the Wedding Photographer's Agreement — legal basis: consent.
• To understand how visitors use my website and to improve the services offered, with your consent as set out in the Cookie Settings — legal basis: consent.

How I keep it safe

I take data security seriously:

• My website runs on hosting located in the UK.
• Client galleries are delivered through a specialist third-party photo delivery platform, which hosts your images on my behalf.
• If you order prints, albums, or other products, these are produced by trusted third-party print and lab providers, who act as processors to fulfil your order.
• Some of these processors may operate outside the UK. Where this occurs, I ensure appropriate safeguards are in place (such as UK adequacy decisions or standard contractual clauses).
• Analytics (Optional Cookies): With your consent, I use first-party cookies to understand how visitors use my website. This involves:
  • Data collected: Pages visited, time spent on site, device type, referrer and any campaign data.
  • Your control: You can withdraw consent at any time by clicking the cookie settings link in the footer, or by using browser settings to block cookies.
  • Purpose: This data helps me improve the website and understand visitor behaviour. It is not used to identify you personally, track you across other websites, or build a profile about you.
• Essential Cookies: Some cookies are strictly necessary for the website to function (e.g., security tokens, session management) and cannot be disabled.
• I never sell your details to anyone.

How long I keep it

Booking and enquiry records: retained for up to 7 years. Photographs are retained for a minimum of 1 year after gallery delivery, to allow for reprints and portfolio use, after which they may be deleted.

Your rights under UK GDPR

You have the right to:

• Access — request a copy of the personal data I hold about you.
• Rectification — ask me to correct inaccurate or incomplete data.
• Erasure — ask me to delete your data (unless I need to keep it for tax, legal or contractual reasons).
• Restriction — ask me to pause processing of your data in certain circumstances.
• Data portability — receive your data in a structured, machine-readable format where processing is based on consent or contract.
• Object — object to processing based on legitimate interests (including, where consent has not been given, portfolio or marketing use of your photos). I will stop unless I can demonstrate compelling legitimate grounds.
• Withdraw consent — where processing is based on consent (e.g. analytics cookies), you can withdraw at any time without affecting the lawfulness of prior processing.
• Automated decisions — I do not use automated decision-making or profiling that produces legal or similarly significant effects.

To exercise any of these rights, please get in touch. I will respond within one month.

Right to complain: If you are unhappy with how I handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, or by calling 0303 123 1113.