Privacy Policy

Last updated: 11/11/2026

My Contact Details

Information I Collect

GBF Photography is a Data Controller as defined in the UK General Data Protection Regulation (UK GDPR). I collect and process personal information to deliver my services and operate my business effectively.

The personal information I may collect includes primary personal identifiers such as your name, contact number, email address, business name, and IP address. My website forms may also collect information regarding the services you are interested in.

Cookies are used on my website on an opt-in or opt-out basis. These provide information on pages visited and time spent on the site, helping to improve website performance and user experience.

My website and data hosting providers operate in compliance with EU and UK GDPR standards through the use of standard contractual clauses. Appropriate third-party due diligence is carried out to ensure data protection compliance.

Client information is stored securely on protected digital devices. The information collected is necessary to deliver agreed photography and related business services. I do not sell or pass your data to unconnected third parties.

How I Collect Personal Information and Why I Have It

Most of the personal information I process is provided directly by you for one or more of the following reasons: to enquire about services, to allow me to contact you, to arrange consultations or shoots, to deliver creative photography services, and to operate standard business functions such as invoicing, communication, and quality control.

I use the information you provide solely to deliver the services you have requested. Where required, I may share limited information with trusted tools, data processors, or my assistant strictly for the purpose of delivering agreed services like travel logistics and scheduling. Client confidentiality is maintained at all times, and commercially or financially sensitive information will not be disclosed unless agreed with you.

Under the UK GDPR, the lawful bases I rely on for processing personal data include your consent, the fulfilment of a contract, and compliance with legal obligations such as accounting requirements. You may withdraw your consent at any time by contacting info@gbfphotography.com.

How I Store Your Personal Information

I take reasonable and appropriate precautions to ensure that your personal information is securely stored. This includes access controls on digital devices, regular software updates, and encrypted website forms using HTTPS security standards.

How Long I Store Your Personal Information

I retain personal information for as long as necessary to fulfil legal, contractual, and business obligations. Client data is typically retained for a minimum of six years to comply with HMRC requirements. After this period, unless earlier deletion is requested, personal information is securely deleted from systems and backups.

Your Data Protection Rights

Under the Data Protection Act 2018, you have rights including the right to access your personal data, request rectification of inaccurate or incomplete data, request erasure in certain circumstances, restrict processing, object to processing, and request data portability.

You are not required to pay a fee to exercise these rights. I have one month to respond to any valid request. To exercise your rights, please contact info@gbfphotography.com.

How to Complain

If you have any concerns about how I use your personal information, please contact me in writing at info@gbfphotography.com.