Privacy Policy

Rosi Pepper Photography – Privacy Policy

Effective Date: 03.09.2025 Last Updated:03.09.2025
Business Name: Rosi Pepper Photography Contact:  info@rosipepperphotography.co.uk

1. Introduction

Rosi Pepper Photography is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, and safeguard your personal data when you interact with our website, services, and communications. We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable laws.

2. Data We Collect

We may collect and process the following categories of personal data:

• Identity Data: Name, email address, phone number, postal address
• Booking & Session Data: Session type, preferences, image metadata
• Technical Data: IP address, browser type, device information, cookies
• Marketing Data: Preferences, engagement with emails and social media

3. How We Collect Data

We collect data through:

• Direct interactions (e.g. contact forms, bookings, email, phone)
• Automated technologies (e.g. cookies, analytics tools)
• Third-party sources (e.g. social media platforms, referrals)

4. Legal Basis for Processing

We process your personal data under the following lawful bases:

• Consent – when you opt in to marketing or cookies
• Contractual Necessity – to fulfil bookings and deliver services
• Legitimate Interest – to improve services and website performance

5. How We Use Your Data

We use your data to:

• Manage bookings and deliver photography services
• Respond to enquiries and provide client support
• Send updates, promotions, or newsletters (with your consent)
• Improve website functionality and user experience

6. Data Sharing

We do not sell your personal data. We may share it with:

• Secure third-party service providers (e.g. gallery hosts, payment processors)
• Legal or regulatory authorities when required by law

7. Data Retention

We retain personal data only as long as necessary:

• Client records: Up to 6 years for legal and financial compliance
• Marketing data: Until you withdraw consent

8. Your Rights

Under UK GDPR, you have the right to:

• Access, correct, or delete your personal data
• Object to or restrict processing
• Withdraw consent at any time
• Lodge a complaint with the Information Commissioner’s Office (ICO)

9. Security

We implement appropriate technical and organisational measures to protect your data, including:

• SSL encryption
• Secure servers and firewalls
• Access controls and regular monitoring

10. Contact

If you have any questions about this Privacy Policy or your personal data, please contact: 

Email: info@rosipepperphotography.co.uk