This privacy policy notice is for this website; www.michaelwhite-photography.co.uk and details how I respect your privacy and take care of the information you give me. The purpose of this notice is to explain to you how I control, process, handle and protect your personal information while using this website and if you hire me as your photographer. By using this website you agree to the terms outlined on this page. If you don’t agree to the following policy you can stop viewing or using this website whenever you like. 

KEY DEFINITIONS 
“I” or “me” refers to my business, Michael White Photography. 
“you”, “your” or “my” refer to the person(s) using this website and/ or have booked with Michael White Photography. 
GDPR means General Data Protection Act. 


WHAT ARE MY RIGHTS? 
Under the GDPR, you have the following rights, which I will always work to uphold: 

The right to be informed about how I collect and use your personal data. This Privacy Policy should tell you everything you need to know, but you can always contact me to find out more or to ask any questions. 
The right to access the personal data I hold about you. 
The right to have your personal data changed if any of your personal data held by me is inaccurate or incomplete. 
The right to be forgotten. You have the right to request that I erase your personal data which I am using where at least one of the following reasons apply: 
(a) your personal data is no longer necessary in relation to the purpose for which it was originally collected or used; 
(b) the processing of your personal data is based on your consent and you have withdrawn your consent and there is no other legal basis on which I can use and process your personal data; 
(c) you object to the processing as set out in the “right to object” section of this policy and I have no overriding legitimate interest for continuing to process it; 
(d) your personal data has been unlawfully processed. If that’s the case then I have to remove your data by law – but I’m very careful in only collecting the data I need to do the job you hired me to do. 
The right to restrict the processing of your personal data where 
(a) you contest the accuracy of your personal data and I am verifying the accuracy of the data; 
(b) the processing of your personal data is unlawful, but you do not want the relevant personal data erased; 
(c) I no longer need to keep your personal data, but you want to preserve your data for the establishment, exercise or defense of legal claims; 
(d) you have objected to me processing your data and I am considering whether my legitimate grounds override yours. 
The right to object to me using your personal data for a particular reason(s). If you ask me to stop processing your personal data on this basis, I will stop unless I can demonstrate a good reason as to why the processing should continue in line with data protection laws. 
The right to data portability. This means that, if you have provided personal data to me directly, I am using it with your consent and/ or for the fulfillment of your Client Agreement, and you are able to obtain and reuse your personal data for your own purposes across different services. 
You also have rights regarding automated decision making and profiling. To keep it simple, I do not obtain any personal data through automated systems. 
You also have the right to complain to the ICO (www.ico.org.uk) if you feel there is a problem with the way I am handling your data. If you do have any concerns, please do contact me first so we can work to find a common ground. 


HOW DO YOU USE AND STORE MY PERSONAL DATA? 
The only information I keep safe about you will be given by you! I won’t ever collect personal data about you that you haven’t given to me yourself. 

The data you give to me will most likely include your name, email address, phone number, home address, social media handles/URLs, personal interests and details about your wedding day. This data along with pictures of you will be securely stored for the purpose of contacting you, getting to know you, fulfilling the job you hired me to do and to ultimately give you the best photography experience possible. 

To detail how the data you give me might be used: 

To provide and manage your access to this website. 
To personalize and tailor your experience to make it as simple and enjoyable as possible. 
To provide and manage your password protected online photo gallery. 
To supply my products and services to you (your personal details are obviously required in order for me to enter into a contract with you). 
For communicating with you and getting to know you. 
To tag you in social media posts so that you can view and share your photos easily with your friends and family. 
For marketing purposes that may include featuring photos of you on this website, on a wedding blog and/ or on social media. 


HOW LONG DO YOU HOLD ON TO MY PERSONAL DATA? 
Your personal data will be securely stored by me for as long as is necessary to fulfill my services to you or until you withdraw your consent. I will not exceed the 7-year restriction GDPR has put in place so this is why it explains in your Client Agreement that once your photographs have been delivered to you, it is then your responsibility to keep them safe. 


IS MY DATA PROTECTED? 
I ensure the security of any personal information I hold by using secure data storage technologies and precise procedures in how I store, access and manage that information. The methods I use completely meet the GDPR compliance requirement. All my hard drives and cloud backups are encrypted, and the other services I use are all fully GDPR compliant. 


PRIVACY POLICY CHANGES 
This privacy policy was posted by www.michaelwhite-photography.co.uk on 20/01/2020. I may amend this policy in the future so please refer back to this page to keep up to date with any changes. 

Thank you for your time. If you have any concerns please contact me via the enquiries for or email (if you already have my email address).