Privacy Policy

Dave Green Photography

Website: https://davegreenphotography.com

Contact: Contact form

Last updated: 11/03/2026

1. Introduction

This Privacy Policy explains how Dave Green Photography (“I”) collect, use, store, and protect your personal data when you visit my website, contact me, enquire about my services, book a session, access galleries, or otherwise interact with me.

I am committed to handling personal data in accordance with applicable data protection law in the United Kingdom, including the UK GDPR, the Data Protection Act 2018, and, where relevant, the Privacy and Electronic Communications Regulations (PECR). ICO guidance says privacy information should be clear, easy to access, and explain key things like purposes, rights, retention, and sharing. 

2. Who I am

Dave Green Photography is the data controller responsible for your personal data collected through this website and in connection with my photography services.

If you have any questions about this Privacy Policy or how I handle your personal data, please contact me here

3. The Personal Data I May Collect

I may collect and process the following categories of personal data:

Information you provide directly

This may include:

  • your name

  • email address

  • telephone number

  • business name, where relevant

  • postal address, where relevant

  • details of your enquiry

  • booking and project information

  • event, shoot, or session details

  • any other information you choose to send to me through forms, email, gallery systems, or other communications

Where my website contains different forms, the information collected may vary depending on the purpose of the form.

Information collected automatically

When you use my website, I may collect certain technical and usage data, such as:

  • IP address

  • browser type and version

  • device type

  • operating system

  • referral source

  • pages viewed

  • dates and times of visits

  • time spent on pages

  • clicks, navigation behaviour, and website interaction data

This may be collected through cookies, tracking technologies, server logs, analytics tools, and similar technologies.

Client, gallery, and photography-related data

Where relevant to our services, I may also process:

  • booking records

  • quotes and invoices

  • correspondence and communication history

  • gallery access and download activity

  • image selections and favourites

  • photographs and image files in which individuals may be identifiable

  • information relating to usage permissions, licences, or consents

4. How We Collect Your Data

I may collect personal data:

  • When you submit an enquiry through my website

  • When you complete any form on my website

  • When you email me

  • When you call me or otherwise communicate with me

  • When you book or request my services

  • When you access private or public galleries

  • When you interact with the website through cookies, analytics, or similar technologies

  • From third-party providers involved in website hosting, security, analytics, or communications, where applicable

5. How I Use Your Personal Data

I may use your personal data to:

  • Respond to enquiries

  • Provide quotations and service information

  • mManage bookings and client relationships

  • Deliver photography services

  • Create, host, and manage galleries

  • Communicate with you about a booking, gallery, or project

  • Provide image delivery and download access

  • Maintain records of work and business operations

  • Improve our website, services, and user experience

  • Monitor website use, performance, and security

  • Detect misuse or unauthorised activity

  • Comply with legal, tax, insurance, and regulatory obligations

  • Establish, exercise, or defend legal claims

  • Where lawful, display selected work in my portfolio, website, social media, or marketing materials

6. My Lawful Bases for Processing

Under UK data protection law, I must have a lawful basis for processing your personal data. Depending on the context, I may rely on:

Contract

Where processing is necessary to take steps at your request before entering into a contract, or to perform a contract with you, including:

  • responding to booking enquiries

  • arranging photography sessions

  • delivering agreed photography services

  • providing gallery access and image delivery

Legitimate interests

Where processing is necessary for our legitimate interests, provided your rights and freedoms do not override those interests, including:

  • responding to general enquiries

  • operating and improving the website

  • administering bookings and galleries

  • keeping business records

  • protecting my business, website, and systems

  • displaying my work in a professional portfolio where lawful and appropriate

Legal obligation

Where processing is necessary for compliance with legal obligations, including:

  • tax and accounting requirements

  • fraud prevention

  • responding to lawful requests from courts, regulators, or public authorities

Consent

Where required, I rely on your consent, including:

  • For non-essential cookies and similar technologies

  • For certain marketing communications, where applicable

  • In some situations involving the use of images, particularly where consent is the most appropriate lawful basis

ICO guidance says you should decide your lawful basis before processing and explain it in your privacy notice. 

7. Cookies, Analytics, and Tracking Technologies

My website uses cookies and similar technologies to make the site work, understand usage, improve performance, and support marketing activities.

These may include:

  • Google Analytics

  • Google Tag Manager

  • Meta Pixel

These tools may collect information about how visitors use the site, which pages they visit, how they found the site, and the actions they take on the site.

Where cookies or similar technologies are not strictly necessary, we will only use them where the appropriate consent has been obtained, where required by law. ICO guidance says you must tell users what cookies will be set, explain what they do, and obtain consent for non-essential cookies and similar technologies. It also says advertising purposes are not exempt from consent requirements. 

For more information, please see our Cookie Policy.

8. Contact Forms and Website Enquiries

Our website may include multiple enquiry, contact, or request forms with different fields depending on the purpose of the form.

We collect the information you choose to submit through those forms in order to:

  • respond to your message

  • provide the information or service requested

  • manage potential bookings or projects

  • keep a record of communications and enquiries

Please do not submit sensitive personal data through website forms unless it is necessary and specifically requested.

9. Galleries and Image Delivery

We may provide online galleries through our own systems or website areas for proofing, viewing, selecting, sharing, or downloading photographs.

When you use a gallery, we may process:

  • your name and contact details

  • login or access information

  • gallery usage activity

  • download history

  • image selections, favourites, and related interactions

We use this information to operate and secure the gallery, provide access to images, and manage the delivery of our services.

10. Use of Photographs for Portfolio and Marketing

As a photography business, we may wish to use selected photographs for purposes such as:

  • displaying work on our website

  • showing examples in our portfolio

  • posting on social media

  • promoting our services in marketing materials

Where photographs include identifiable individuals, we will only do this where we consider we have an appropriate lawful basis and it is fair and lawful to do so in the circumstances.

Depending on the type of shoot and the arrangement with the client, this may be based on:

  • an agreed contractual term

  • legitimate interests, where appropriate

  • consent, where this is the most suitable basis

Any permissions, restrictions, or usage terms agreed with a client will normally be recorded separately in the relevant client contract, booking terms, model release, or written agreement.

Yes, this bit matters. Quite a lot. Humans get oddly animated when their face appears online without the right paperwork.

11. Marketing Communications

We may use your contact details to respond to your enquiry or communicate with you about services you have requested.

We will not send marketing emails or similar electronic marketing where consent is required unless that consent has been obtained, or unless another lawful route applies under PECR and data protection law. ICO guidance says PECR sits alongside UK GDPR and uses the UK GDPR standard of consent. 

You can ask us to stop sending marketing communications at any time by contacting moc.yhpargotohpneergevadobfsctd-784502@evad.

12. Sharing Your Personal Data

We may share personal data where necessary with trusted third parties such as:

  • website hosting providers

  • analytics and tag management providers

  • advertising and social media platform providers

  • email and communication providers

  • IT and website support providers

  • cloud storage providers

  • payment processors

  • accountants, insurers, and professional advisers

  • legal and regulatory authorities where required

We require third parties processing personal data on our behalf to respect the security of your personal data and process it lawfully.

13. International Transfers

Some of the third-party services we use, including analytics, tracking, cloud, and communication providers, may process personal data outside the UK.

Where personal data is transferred outside the UK, we will take steps to ensure appropriate safeguards are in place, in accordance with applicable data protection law.

14. How Long We Keep Your Data

We will only keep personal data for as long as reasonably necessary for the purposes for which it was collected, including for legal, accounting, insurance, security, and record-keeping purposes.

The ICO says there are no fixed retention periods in data protection law. You must justify the period you choose and should not keep data on a “just in case” basis. 

Unless a different period is required or justified, we may typically keep personal data as follows:

  • general enquiries: up to 12 months after the last meaningful contact

  • client booking and project records: up to 7 years after the end of the relevant financial year, for tax, accounting, insurance, and business record purposes

  • gallery access records and download logs: up to 24 months after the gallery is closed or expires

  • photographs and delivered project files: for as long as reasonably necessary for the original service, archival reference, backup, dispute handling, and portfolio records

  • analytics and tracking data: according to the configuration and retention settings of the relevant platform

  • marketing suppression records: as long as needed to make sure we respect opt-out requests

We may keep data for longer where necessary to comply with legal obligations, resolve disputes, enforce agreements, or maintain appropriate business records.

15. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

However, no method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

16. Your Rights

Depending on the circumstances, you may have the right to:

  • request access to your personal data

  • request correction of inaccurate personal data

  • request erasure of your personal data

  • request restriction of processing

  • object to processing

  • request transfer of your data, where applicable

  • withdraw consent at any time, where consent is the basis for processing

  • complain to the Information Commissioner’s Office

ICO guidance says privacy notices should explain people’s information rights, including the right to withdraw consent where consent is used. 

To exercise any of your rights, contact: moc.yhpargotohpneergevadobfsctd-1b4d18@evad

17. Complaints

If you have concerns about how we use your personal data, please contact us first and we will try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office (ICO).

18. Third-Party Websites

Our website may contain links to third-party websites, platforms, or services. Those websites have their own privacy policies and we are not responsible for their content or privacy practices.

19. Children’s Data

Our website is not intended for children, and we do not knowingly collect personal data from children through the website without appropriate authority where required.

If you believe a child has provided personal data to us inappropriately, please contact us.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time by publishing the revised version on our website.

21. Contact

If you have any questions about this Privacy Policy or your personal data, please contact:

Dave Green Photography

Website: https://davegreenphotography.com

Contact Me Here

Last updated: 11/03/2026