What personal data I collect and why I collect it
When visitors leave comments on the site I collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Contact forms, Information & Security
I use personal data, provided directly and voluntarily to me by clients, for two purposes. The first is to carry out my contractual obligations. This is the information I need to do my job. This personal data includes: names, addresses, email addresses, phone numbers and further information which I need to complete your photography requirements.
The second purpose is for me to analyse and fully understand client behaviour, to assist me in relation to sales and marketing. For example, to better understand where you heard about me and whether or not you choose to book me. This is a legitimate interest and a reasonable expectation that most people would have about a business.
When you first get in touch with me, it’s usually via the contact form on this website, via email, or mobile. I collect your names, wedding date and venue and closer to the wedding date I sometimes collect further information such as best man, maid of honour etc. All of this is information I need to perform my job.
The information which I retain is only accessible via my secure password protected system, which has also has firewall and anti virus protection. Only I have access to this. I also communicate with you via email and occasionally via mobile phone through text or voice. I use Google mail and currently Vodafone both of which are GDPR compliant.
If you make an initial enquiry with me and do not go ahead with booking me, after a single follow up call I delete your information from my system so that your data is no longer stored.
My website has a blog which is open to the public to comment on (once I have authorised it), if you make a comment, you can choose what personal data is shown. You can also choose to delete the comment.
Payments to me are largely made online using debit/credit cards, bank transfer or cheque. Your account details will therefore be visible in my business bank account in the normal way.
Right of confirmation, access, rectification and erasure
You have the right to confirmation, access, rectification and erasure of all the above data that I hold on you. For example, if you wish to see the initial contact form you submitted and check it for accuracy, or perhaps following your wedding you’d like to have your details completely removed, then you have that right.
If you leave a comment on my site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behave in the same way as if the visitor has visited the other website.
The site also uses performance cookies which collect information about how you use the site, such as how you are referred to it and how long you stay on certain pages. This information is aggregated and therefore anonymous and is only used to improve the performance of the site. Some of these performance cookies are Google Analytics web cookies. To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.
Displaying of images & who I share your data with
Other than those third parties mentioned in this Notice and listed below, Jeff Woodall Photography shall not pass on your personal data to any third party.
Your personal data may, subject to my obligations to comply with data protection legislation, be shared with the following third parties:
- Associate or assistant photographers who join me on wedding or portrait shoots and need information in order to operate as such;
- Having taken precautions to maintain the security of such personal data, I may in certain circumstances share personal data with the ICO, and other legal, regulatory and law enforcement bodies
- We may disclose your contact details to our suppliers or subcontractors insofar as reasonably necessary to deliver sub-contracted services or product orders. The legal basis for this processing is consent.
- Media and related businesses for the purposes of marketing my offerings, improving my services, and running a profitable business. These third party businesses may include, wedding magazines/publications, photography websites, wedding websites, social media sites, or other outlets, with the aim of raising public awareness of my services.
How long I retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to me. You can also request that I erase any personal data I hold about you. This does not include any data I am obliged to keep for administrative, legal, or security purposes.
As well as the right to withdraw consent and exercise any of the above rights mentioned under ‘Your rights under the GDPR’, you also have the right to raise a complaint with a regulatory body. In the United Kingdom, this is the Information Commissioner’s Office (ICO). If you have concerns about the way your data is being processed by an organisation, you can find out more here.
Data Protection Officer
The data protection officer’s contact name is: Jeff Woodall
Clients & wedding guests captured in images
In terms of explicit GDPR compliance, Wedding clients and guests are photographed within the parameters of GDPR legislation on the basis of ‘legitimate interests.’ The taking of photographs of wedding guests when viewed as a form of processing personal data is necessary for the legitimate interests of Jeff Woodall Photography as a photography business unless there is a good reason to protect a given individual’s personal data which overrides those legitimate interests.
Where I send your data
Visitor comments may be checked through an automated spam detection service.
If you want to contact me with questions about your personal data, wish to exercise any of your rights, or ask me further detailed questions, please use the contact form.