Hi there. Thanks for reading this bit. Engaging with you is one of the best bits of my job, so it's important I do it in the right way. If any of the following seems baffling you to (because it took me a while, too...) then just ask me and I'll do my best to answer any questions you have. At the end of the day, this page can be summed up by 'I want to be as transparent as possible, and if you don't like something I have on file relating to you, ask me and it's gone.
PERSONAL INFORMATION I COLLECT
As part of the booking process for my photographic services, I have to collect some personal information. I use that information for several reasons: to provide a better tailored service to you, as each family and project are unique; to give you more information about the service you’ve asked about; to contact you if I need to obtain or provide additional information; and to check every now and then that you’re happy and satisfied.
Essentially, this normally relates to names and addresses - who you are, where your address is, the place where you want any orders to be sent, etc.
When you visit the Site, I automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, it collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site.
Paulpwphotography.com is hosted on the Wix.com platform. Wix.com provides me with the online platform that allows us to sell our products and services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. You should get one of those banners that pops up, and if you want any more information on cookies, just click on the relevant button when it pops up.
STORING YOUR PERSONAL DATA
If you place an order for photographs by clicking 'Your Photos' or navigating to clients.misterphipps.com you'll be sent to a website called Shootproof. Before ordering anything, you have to accept their terms and conditions - basically agreeing they can send me your name and address for the purposes of fulfilling your order. I will transfer your name and email address over to Studio Ninja.
If I take your photograph on behalf of Fantom Events, and for covid-security reasons your print needs to be mailed to you, you agree to me passing the personal information you give me through the ordering process to them. They have your name and address anyway, but the practicalities of doing this means they will be able to match your name and address with your likeness.
The originals of your photographs are stored on an external hard drive, with a back up stored on my OneDrive. This is password protected.
When you make an enquiry through the Site, I will maintain your personal information for my records for up to five years. This is so I can match any new enquiries with any you've made before. Some clients can reach out a couple of years after first getting in touch, so it makes it easier to have one record for you, rather than several.
You can ask for all your contact information to be deleted from my records at any time by emailing Paul@paulpwphotography.com
In general, I will only contact you to discuss a project you have asked me to complete. As part of the booking or enquiry process, you will have opportunities to opt in to future communications with me. This is very rarely used, to be fair, but in the future I may let you know about upcoming events I'm at, new products I'm offering or to show you something I've written over at my other website www.misterphipps.com. You can unsubscribe at any time by emailing Paul@paulpwphotography.com
I am fully committed to respecting individuals’ rights to access personal information held about them in accordance with Article 17 of the GDPR.
Subject access rights
Any individual who makes a valid subject access request is entitled to be:
told whether their personal data is being processed;
given a description of the personal data, reason for processing and whether it has been shared with any other organisations or persons;
given details of the source of the data (where this is available);
given the right to rectify, object to, or restrict processing of personal data;
given the ‘right to be forgotten’ as set out in Article 17 of the GDPR; and,
given details of how long their information will be retained for.
Individuals are only entitled to their own personal data, and not to information relating to other people, unless they are acting on behalf of that person. In these circumstances, written consent will be required.
I may not be able to release some information. Information which is exempt from a subject access request includes:
personal data where disclosure could prejudice the prevention or detection of crime; and,
personal data identifying another person (a third party) whose details cannot be disclosed without their permission.
How to make a request
In order to make a valid subject access request the following must be provided:
a clear written request by email.
Proof of identification may be requested to ensure that the personal information requested is provided to the right person.