Privacy Policy

1. Introduction

IngaB. Photography ("we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ingaphoto.co.uk (the "Website") or use our photography services.

We are registered in the United Kingdom and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our Website or services, you consent to the data practices described in this policy.

2. Data Controller

IngaB. Photography is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at:

3. Information We Collect

3.1 Information You Provide to Us

We collect information that you voluntarily provide to us, including:

• Contact Information: Name, email address, phone number, and postal address when you enquire about our services or book a session
• Booking Information: Event details, dates, locations, special requests, and preferences for your photography session
• Payment Information: Billing address and payment details (note: payment card details are processed securely through third-party payment processors)
• Communications: Any messages, enquiries, or feedback you send us via email, contact forms, or social media
• Photographs: Images of you and others captured during photography sessions

3.2 Information Collected Automatically

When you visit our Website, we automatically collect certain information. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information. This information is primarily needed to maintain the security and operation of our Website, and for our internal analytics and reporting purposes.

The information we collect includes:

• Log and Usage Data: Service-related, diagnostic, usage and performance information our servers automatically collect when you access or use our Website. This may include your IP address, device information, browser type and settings, information about your activity on the Website (such as date/time stamps, pages and files viewed, searches, and other actions you take).
• Device Data: Information about your computer, phone, tablet or other device you use to access the Website. This may include your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
• Location Data: Information about your device's location, which can be either precise or imprecise. We may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information by refusing access or disabling your Location setting on your device.
• Cookies and Tracking Technologies: Please see our Cookie Policy for more details on how we use cookies and similar technologies.

3.3 Information from Third Parties

We may receive information about you from third parties, including:

• Social media platforms when you interact with our profiles
• Referrals from other clients or wedding vendors
• Review platforms where you leave feedback about our services

4. How We Use Your Information

We use the information we collect for the following purposes:

4.1 To Provide Our Services

• Process bookings and manage photography sessions
• Communicate with you about your booking and session details
• Deliver photographs and related products
• Process payments and manage invoicing
• Provide customer support and respond to enquiries

4.2 For Business Operations

• Improve our Website and services
• Analyse website usage and performance
• Maintain records for accounting and legal purposes
• Protect against fraud and unauthorised activity

4.3 For Marketing (with your consent)

• Send newsletters and promotional materials
• Share updates about our services and special offers
• Display your photographs on our Website, portfolio, or social media (only with your explicit permission)

5. Legal Basis for Processing

Under the UK GDPR, we process your personal data based on the following legal grounds:

• Contract: Processing necessary to perform our contract with you (e.g., providing photography services)
• Legitimate Interests: Processing necessary for our legitimate business interests, provided these do not override your rights
• Consent: Where you have given explicit consent for specific purposes (e.g., marketing communications, portfolio use)
• Legal Obligation: Processing necessary to comply with legal requirements

6. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

6.1 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our business, including:

• Payment processors for secure transaction handling
• Cloud storage providers for secure file storage
• Email service providers for communications
• Website hosting and analytics providers
• Print labs for producing physical products

6.2 Other Vendors (Weddings and Events)

For weddings and events, we may share relevant contact information with other vendors involved in your event (e.g., wedding planners, venues) solely for coordination purposes and only with your consent.

6.3 Specific Third Parties

We may share and disclose your information with the following third parties:

• Advertising and Marketing: Google AdSense and Facebook for targeted advertising
• Web and Mobile Analytics: Google Analytics for website performance monitoring
• Website Hosting: Our website hosting provider for delivering the Website

We have contracts in place with our data processors, which are designed to help safeguard your personal information. They cannot do anything with your personal information unless we have instructed them to do so. They will also not share your personal information with any organisation apart from us. They also commit to protect the data they hold on our behalf and to retain it for the period we instruct.

6.4 Business Transfers

We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

6.5 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

7. Data Retention

We retain your personal information for the following periods:

• Client Records: 7 years after the completion of services for accounting and legal purposes
• Photographs: Indefinitely in our archive unless you request deletion (high-resolution files are stored for a minimum of 2 years)
• Marketing Data: Until you withdraw consent or unsubscribe
• Website Analytics: 26 months (Google Analytics default)
• Enquiries (non-clients): 2 years unless converted to a booking

8. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details provided above. We will respond to your request within one month.

9. Photographs and Image Rights

As a photography business, we handle images that may contain personal data. Here's how we manage photograph-related privacy:

9.1 Client Photographs

• All photographs from your session are stored securely and confidentially
• We will not use your photographs for marketing, portfolio, or social media without your explicit written consent
• You may request deletion of your photographs at any time, subject to our retention policy for legal and accounting purposes

9.2 Portfolio and Marketing Use

• If you consent to portfolio use, you may withdraw that consent at any time
• We will remove images from our website and marketing materials upon request within a reasonable timeframe
• Images shared on third-party platforms may remain cached even after removal from our accounts

9.3 Third Parties in Photographs

If your photographs include other individuals (e.g., wedding guests), we rely on you to ensure appropriate consent has been obtained for their inclusion in any portfolio or marketing use.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Secure, encrypted storage for digital files
• Password protection and two-factor authentication
• Regular backups to prevent data loss
• Limited access to personal data on a need-to-know basis
• Secure transmission of data using SSL/TLS encryption

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

11. International Transfers

Your personal data is primarily stored and processed in the United Kingdom. If we transfer your data outside the UK (for example, to cloud storage providers), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO).

12. Children's Privacy

We photograph children as part of family sessions, newborn shoots, and events. We obtain consent from parents or legal guardians before photographing minors. Parents/guardians control decisions about the use and storage of their children's images.

Our Website is not directed at children under 16, and we do not knowingly collect personal information from children without parental consent.

13. Third-Party Links

Our Website may contain links to third-party websites (e.g., social media platforms, vendor websites). We are not responsible for the privacy practices of these websites. We encourage you to read the privacy policies of any third-party sites you visit.

14. Do Not Track Signals

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected.

At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.

15. California Residents' Privacy Rights

If you are a resident of California, you are granted specific rights regarding access to your personal information under the California Consumer Privacy Act (CCPA).

California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year.

If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.

If you are under 18 years of age, reside in California, and have a registered account with the Website, you have the right to request removal of unwanted data that you publicly post on the Website. To request removal of such data, please contact us using the contact information provided below.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will notify you by updating the "Last updated" date and, where appropriate, by other means such as email.

We encourage you to review this policy periodically to stay informed about how we protect your information.

17. Complaints

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the issue. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

18. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

19. Related Policies

Please also review our Cookie Policy and Terms & Conditions for more information about how we operate.