Logo gold.png

Hi there. Thanks for reading this bit. Engaging with you is one of the best bits of my job, so it's important I do it in the right way. If any of the following seems baffling you to (because it took me a while, too...) then just ask me and I'll do my best to answer any questions you have. At the end of the day, this page can be summed up by 'I want to be as transparent as possible, and if you don't like something I have on file relating to you, ask me and it's gone.'




This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from www.paulpwphotography.com and the sister site I use when you click on 'your photos' at the top of the page, clients.misterphipps.com (the “Site”).


As part of the booking process for my photographic services, I have to collect some personal information. I use that information for several reasons: to provide a better tailored service to you, as each family and project are unique; to give you more information about the service you’ve asked about; to contact you if I need to obtain or provide additional information; and to check every now and then that you’re happy and satisfied.

Essentially, this normally relates to names and addresses - who you are, where your address is, the place where you want any orders to be sent, etc. 


When you visit the Site, I automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, it collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. You should get one of those banners that pops up, and if you want any more information on cookies, just click on the relevant button when it pops up.

Paulpwphotography.com is hosted on the Wix.com platform. Wix.com provides me with the online platform that allows me to tell you about the products and services I provide. If you send me information through a 'subscribe' button, or any chat feature on this website, your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications.


When you use the 'contact me' form, however, your details are sent through to my client management software, which is a snazzy online portal called Studio Ninja. It’s an Australian company, so the data that I collect from you may be transferred to and stored at a destination outside the European Economic Area (“EEA”). By submitting your personal data, you agree to this transfer, storing or processing. I will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy. It's password protected with a unique (and rather complex!) password.

If you place an order for photographs by clicking 'Your Photos' or navigating to clients.misterphipps.com you'll be sent to a website called Shootproof. Before ordering anything, you have to accept their terms and conditions - basically agreeing they can send me your name and address for the purposes of fulfilling your order. I will transfer your name and email address over to Studio Ninja. This means I can link you to my record of an event you've attended and easily find your photographs, even if the gallery has been removed from Shootproof (as I can only have a certain number of galleries live at any one time).

If I take your photograph on behalf of Fantom Events, and for covid-security reasons your print needs to be mailed to you, you agree to me passing the personal information you give me through the ordering process to them. They have your name and address anyway, but the practicalities of doing this means they will be able to match your name and address with your likeness.

The originals of your photographs are stored on an external hard drive, with a back up stored on my OneDrive. This is password protected.

When you make an enquiry through the Site, I will maintain your personal information for my records for up to five years. This is so I can match any new enquiries with any you've made before. Some clients can reach out a couple of years after first getting in touch, so it makes it easier to have one record for you, rather than several.  

You can ask for all your contact information to be deleted from my records at any time by emailing Paul@paulpwphotography.com


In general, I will only contact you to discuss a project you have asked me to complete. As part of the booking or enquiry process, you will have opportunities to opt in to future communications with me. This is very rarely used, to be fair, but in the future I may let you know about upcoming events I'm at, new products I'm offering or to show you something I've written over at my other website www.misterphipps.com. You can unsubscribe at any time by emailing Paul@paulpwphotography.com


I am fully committed to respecting individuals’ rights to access personal information held about them in accordance with Article 17 of the GDPR.

Subject access rights

Any individual who makes a valid subject access request is entitled to be:

  • told whether their personal data is being processed;

  • given a description of the personal data, reason for processing and whether it has been shared with any other organisations or persons;

  • given details of the source of the data (where this is available);

  • given the right to rectify, object to, or restrict processing of personal data;

  • given the ‘right to be forgotten’ as set out in Article 17 of the GDPR; and,

  • given details of how long their information will be retained for.


Individuals are only entitled to their own personal data, and not to information relating to other people, unless they are acting on behalf of that person. In these circumstances, written consent will be required.

Exempt information

I may not be able to release some information. Information which is exempt from a subject access request includes:

  • personal data where disclosure could prejudice the prevention or detection of crime; and,

  • personal data identifying another person (a third party) whose details cannot be disclosed without their permission.


How to make a request

In order to make a valid subject access request the following must be provided:

  • a clear written request by email.


Proof of identification may be requested to ensure that the personal information requested is provided to the right person.