PRIVACY POLICY

www.whiteorchardphotography.com

Type of website: Photography Studio
Effective date: 14th of November, 2020

www.whiteorchardphotography.com (the “Site”) is owned and operated by Rebecca Brunt.

Rebecca Brunt is the data controller and can be contacted at:

Fenlake Walk, Wath Upon Dearne, Rotherham, S63 7FJ

Email: whiteorchardphotography@gmail.com
Phone: 07828335449

Website: www.whiteorchardphotography.com

Purpose
The purpose of this privacy policy (this “Privacy Policy”) is to inform users of our Site of the following:

The personal data we will collect;
Use of collected data;
Who has access to the data collected;
The rights of Site users; and
The Site’s cookie policy.

This Privacy Policy applies in addition to the terms and conditions of our Site.

We have not designated a Data Protection Officer, as our organisation does not meet the criteria outlined in Article 37 of the GDPR that mandate the appointment of a Data Protection Officer.

By using our website, users consent to the terms outlined in this Privacy Policy.

If the legal basis for processing your personal data is your consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of any processing conducted before its withdrawal.

To withdraw your consent, please contact us at: whiteorchardphotography@gmail.com

Legal Basis for Processing

We collect and process personal data of users in the EU only when we have a lawful basis to do so, in accordance with Article 6 of the GDPR.

The legal bases we rely on for processing your personal data include:

Consent: Users have given their consent for the processing of their personal data for one or more specific purposes.
Legitimate Interests: Processing is necessary for the purposes of our legitimate interests or those of a third party, provided these interests are not overridden by the fundamental rights and freedoms of users. Our legitimate interests include:
- Providing users with information about offers and future promotions.
Contractual Necessity: Processing is necessary for steps requested by a user before entering into a contract, or to fulfil a contract with the user.
- If users do not provide the necessary personal data to perform the contract, we will be unable to complete the booking.

Personal Data We Collect

We collect only the personal data necessary to fulfil the purposes outlined in this Privacy Policy. Any additional data will only be collected with prior notification to you.

Data Collected Manually

We may collect the following personal data when you interact with our site or perform specific actions:

First and last name
Date of birth
Email address
Phone number
Address

How Data is Collected

We may collect personal data through the following methods:

Completing a contact form.

How We Use Personal Data

The personal data collected on our site is used solely for the purposes outlined in this Privacy Policy or on the relevant pages of our site. We will not use your data for any purpose beyond what is disclosed in this Privacy Policy.

The data collected when users perform specific actions may be used for:

Facilitating communication.

Who We Share Personal Data With

Employees
User data may be disclosed to employees within our organization who require access to it in order to achieve the purposes stated in this Privacy Policy.

Other Disclosures
We do not sell or share your data with third parties, except in the following circumstances:

When required by law.
In connection with any legal proceedings.
To establish, exercise, or protect our legal rights.
To buyers or potential buyers in the event of a sale of the company.

If you navigate to external websites via hyperlinks on our site, please be aware that we are not responsible for the privacy policies or practices of those websites and have no control over them.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.

If your data needs to be retained beyond this period, you will be notified accordingly.

How We Protect Your Personal Data

We are committed to safeguarding your personal data through robust security measures, including advanced browser encryption and secure servers housed in protected facilities. Access to user data is strictly limited to authorised employees who are bound by confidentiality agreements. Any breach of these agreements will result in immediate termination.

While we employ comprehensive measures to secure user data and ensure your protection, it is important to recognise that no system is entirely immune to risk. As the internet can sometimes be insecure, we cannot guarantee the absolute security of your data beyond what is reasonably practical.

Your Rights as a User
Under the GDPR, you have the following rights:

Right to be informed.
Right of access.
Right to rectification.
Right to erasure.
Right to restrict processing.
Right to data portability; and
Right to object.

Children

We do not knowingly collect or process personal data from individuals under the age of 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will promptly delete the information.

Parents or guardians of children under 16 may contact our Privacy Officer to address any concerns or request the removal of such data.

How to Access, Modify, Delete, or Challenge Your Personal Data

If you wish to:

Confirm whether we have collected your personal data,
Understand how your data has been used or to whom it has been disclosed,
Request that your data be modified or deleted, or
Exercise any other rights under the GDPR,

please contact our Privacy Officer at:

whiteorchardphotography@gmail.com

How to Opt-Out of Data Collection, Use, or Disclosure

In addition to the methods outlined in the "How to Access, Modify, Delete, or Challenge Your Personal Data" section, we offer the following specific opt-out options for the collection, use, or disclosure of your personal data:

Marketing Emails: You can opt out of receiving marketing emails by sending an email to whiteorchardphotography@gmail.com

and requesting removal from our mailing list.

Cookie Policy

A cookie is a small file stored on your device by a website to gather information about your browsing habits. You have the option to be notified whenever a cookie is transmitted. Additionally, you can choose to disable cookies through your internet browser settings; however, please note that this may affect the quality of your user experience.

Types of Cookies We Use

We use the following types of cookies on our site:

Functional Cookies: These cookies remember your preferences and selections, ensuring they are saved for your future visits.
Analytical Cookies: These cookies help us improve the design and functionality of our site by collecting data on how users interact with it. This includes information such as which content you access and how long you stay on our site.

Comments on the Blog

Our website features a blog section where users can choose to leave comments on individual posts. A blog is a publicly accessible platform that allows users to post articles or share thoughts, often with the option for others to comment.

If you decide to leave a comment, the content of your comment, along with the date it was posted and the pseudonym you select, will be publicly displayed. Additionally, the IP address assigned to you by your Internet Service Provider (ISP) may be logged for security purposes. This helps us address any potential legal issues, such as violations of third-party rights or the posting of illegal content.

The collection of your personal data, including your IP address, is primarily for our protection, enabling us to take appropriate action if needed. However, this data will not be shared with third parties unless required by law or necessary for our defence in a legal matter.

Contacting Us via the Website

Our website provides easy access to contact us via email or telephone. When you reach out to us through email or a contact form, any personal data you voluntarily provide will be stored solely for the purpose of processing and responding to your inquiry. Rest assured; your personal data will not be shared with third parties.

Existence of automated decision-making as a responsible company, we do not use automatic decision-making or profiling

Modifications

We may update this Privacy Policy periodically to ensure compliance with applicable laws and to reflect any changes to our data collection practices. Any amendments will be accompanied by an updated "Effective Date" at the top of this policy. We recommend that users review this Privacy Policy regularly to stay informed of any updates. If necessary, we will notify users of significant changes via email.