top of page
Isobel Buxton Photography logo with two star icons either side of 'IBP' in a fancy font.

Isobel Buxton Photography privacy policy

This privacy notice tells you what to expect us to do with your personal information.

​

Contact details

Email: info@isobelbuxton.com

​

What information we collect, use, and why

We collect or use the following information to provide services and goods, including delivery:

  • Names and contact details

  • Addresses

  • Payment details (including card or bank information for transfers and direct debits)

  • Website user information (including user journeys and cookie tracking)

  • Photographs or video recordings

We collect or use the following information for service updates or marketing purposes:

  • Names and contact details

  • Marketing preferences

  • Location data

  • Recorded images, such as photos or videos

  • Purchase or viewing history

  • IP addresses

  • Website and app user journey information

  • Records of consent, where appropriate
     

Lawful bases

Our lawful bases for collecting or using personal information to provide services and goods are:

  • Contract

  • Legitimate interest:

    • Collecting information is a means to communicate with the client about their photography needs, provide contracts and invoices, and deliver the final products. Without their contact details, it is impossible to provide my services.

Our lawful bases for collecting or using personal information for service updates or marketing purposes are:

  • Contract

  • Legitimate interest:

    • My work is purely photography. I create and share photographs as my business and provide the photographs for the clients to treasure forever.
      ​

Where we get personal information from

  • People directly

​

How long we keep information

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

​

How do we keep your information safe?

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

​

Who we share information with

Others we share personal information with

  • Professional or legal advisors

  • Financial or fraud investigation authorities

  • Relevant regulatory authorities

  • Organisations we’re legally obliged to share personal information with

  • Emergency services (where necessary)

  • Publicly on our website, social media or other marketing and information media (where appropriate)
     

Google Analytics

We may share your information with Google Analytics to track and analyse the use of the Services. The Google Analytics Advertising Features that we may use include: Google Analytics Demographics and Interests Reporting, Google Display Network Impressions Reporting and Remarketing with Google Analytics. To opt out of being tracked by Google Analytics across the Services, visit https://tools.google.com/dlpage/gaoptout. You can opt out of Google Analytics Advertising Features through Ads Settings and Ad Settings for mobile apps. Other opt out means include http://optout.networkadvertising.org/ and http://www.networkadvertising.org/mobile-choice. For more information on the privacy practices of Google, please visit the Google Privacy & Terms page.

Your data protection rights

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal data.

Your right to rectification - You have the right to ask us to rectify personal data you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal data in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal data in certain circumstances.

Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the personal data you gave us to another organisation, or to you, in certain circumstances.

Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent.

You don’t usually need to pay a fee to exercise your rights. If you make a request, we have one calendar month to respond to you.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

​

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

Website: https://www.ico.org.uk/make-a-complaint

​

Last updated

1 August 2024

​

​

bottom of page