If you’ve clicked here it must be because you are interested in knowing about my GDPR compliancy, or because you have hit the wrong key in error (it happens to us all!) I’ll assume it’s the former, so here is Little Wonders Photography’s updated GDPR compliant privacy policy:
Personal data I collect
During the enquiry stage you will have given me your name, email address, home address, possibly your telephone number, and your baby’s due date or age. All of this is necessary for me to do my job. Once you book and your baby arrives you will have given me their birth weight as well. Again, this information is necessary for me to do my job.
How I collect and keep your personal data
You may have used my contact form on my website, or enquired via Facebook messenger, both of which arrives in an inbox that is tightly passworded with something that doesn’t contain my birthday date!
If you go ahead with booking with me, I will store your personal information in my email account and in a written hardcopy -both are only seen and used by me. All accounts have secure passwords. I will store this information for 12 months after your photo session.
If you enquire but don’t book this time I will delete all your personal data from my email account and Messenger after the appropriate time. As enquiries and bookings often span over a 12-month period this is the time I will deem an ‘appropriate time’ before deleting.
Right of confirmation, access, rectification and erasure
If you have questions about how your personal data is handled, you can just drop me an email and I will be happy to give your further information. I’m happy to show you the information I have on you. If some of the information is wrong, you have the right to correct it. If you’d like me to delete all your personal data, you have the right to request it.
Use of your data
The summary of this is that I will be responsible in how I process your data. I will definitely use your email to email you about your photo session. I wouldn’t give your email out to anyone else, I also won’t be sending you lots of newsletters.
Any and all information I request from you is entirely voluntary, however, without this information it won’t be possible to proceed with a booking.
Use of your face-based data
When it comes to your photographs, the EU hasn’t been too specific about what that means for working photographers except that we need to demonstrate reasonable and legitimate use.
If a third party does approach me asking me to buy one of your photos, I will email you about it, it’ll never be without your consent or knowledge.
There’s a couple of things I do to run my business, like show my work on Facebook and my own website. If you have booked me you probably looked at photos of real babies I’ve photographed on my facebook page or website. I do ask families to opt into this in my contract (that is the booking email you get before paying the deposit), but you can always decide to keep your baby photos private. Usually only 1-4 images from the session are shared as a preview online, and the rest will only be viewed by you. The online images are protected from unauthorised use by watermarking. I will ask you directly during the session if you’re OK with me putting your previews on my Facebook page and website.
I store photos of your lovely babies on a personal PC while I’m working on them, and then on an external hard drive in my house once the session has been edited and your images have been sent to you. I keep a master copy of the edited images on my hard drive as an emergency back-up, or in the event of you wishing to make future purchases. I will keep these for 1 year. Your edited images are displayed to you on a password protected gallery on a GDPR compliant website for the purposing of you choosing your images. Only you and I have the password, and log in locations are tracked from my website to detect any unauthorised access.
Your chosen digital files are transferred to you using a file transfer service using the email address you have provided.
GDPR compliancy achieved!