Privacy Policy

Georgia Smith Photography
Website: georgiasmithphotography.uk
Email: georgia@georgiasmithphotography.uk
Last updated: May 2025

Your privacy matters. This policy explains, in plain language, what information I collect when you visit georgiasmithphotography.uk, why I collect it, and how I keep it safe. I want you to feel completely at ease from the very first click.
If you have any questions at all, please do not hesitate to get in touch.

1. Who I Am
I am Georgia Smith, a wedding and portrait photographer based in the UK. I am the sole data controller for this website, which means I decide how your personal information is used and I am responsible for keeping it secure.
You can reach me at georgia@georgiasmithphotography.uk.

2. What Information I Collect
I only ever collect what I genuinely need. Here is a breakdown.
Information you give me directly
When you fill in my contact or enquiry form, I collect your name, email address, and any details you choose to share about your event. Nothing more.
Information collected automatically
Like most websites, mine collects some basic technical data when you visit: your IP address, the browser and device you are using, which pages you looked at, and how long you spent on them. This helps me understand how the site is performing and how to improve your experience.
Cookies
My website uses cookies. These are small files stored on your device that help the site function smoothly and remember your preferences. Some cookies are essential for the site to work; others are used for analytics so I can see which pages people find helpful. You can manage or disable cookies through your browser settings at any time.

3. Why I Use Your Information
I use the information I collect for the following purposes:

To respond to your enquiry and discuss your photography booking
To send you information relevant to your booking or session
To improve the website and make sure it is working as it should
To meet any legal obligations that apply to me as a small business

I will never use your information to send you unsolicited marketing emails, and I will never sell your data to anyone. Ever.

4. The Legal Basis for Processing Your Data
Under UK GDPR, I need a lawful basis for processing your personal information. Depending on the situation, I rely on one of the following:

Contractual necessity: when processing is needed to fulfil your photography booking
Legitimate interests: for example, improving the website or understanding how visitors use it
Legal obligation: where I am required by law to retain certain records
Consent: where you have actively opted in, such as signing up to receive updates


5. How Long I Keep Your Data
I keep your contact and booking information for as long as is reasonably necessary. In most cases, this means retaining records for six years after your booking concludes, in line with standard UK business and tax requirements. If you enquire but do not go on to book, I will not hold your details any longer than needed to handle your enquiry.
You can ask me to delete your information at any time (see Your Rights below).

6. Who I Share Your Information With
I take a careful, considered approach to sharing. Your personal information may be passed to the following third parties, only where necessary:

Email and website hosting providers, to keep the site running and deliver your messages to me
Website analytics tools (such as Google Analytics), to help me understand how the site is used
Accountancy or legal professionals, if required for compliance purposes

All third parties I work with are required to handle your data with care and in line with UK data protection law. I do not share your details with anyone else.

7. Keeping Your Information Safe
I take data security seriously. I use industry-standard security measures to protect your personal information from unauthorised access, loss, or misuse. My website is hosted on a secure server with an SSL certificate (the padlock you see in your browser), which means any information you send to me is encrypted in transit.
No system is entirely without risk, but I do everything I reasonably can to keep your data safe.

8. Your Rights
Under UK GDPR, you have a number of important rights when it comes to your personal data. You have the right to:

Access a copy of the personal information I hold about you
Ask me to correct any inaccurate or incomplete information
Request that I delete your personal data
Object to or restrict how I process your information
Withdraw your consent at any time, where processing is based on consent
Receive your data in a portable format, where applicable

To exercise any of these rights, simply get in touch at georgia@georgiasmithphotography.uk. I will do my best to respond promptly and always within one month.
If you are ever unhappy with how I have handled your data, you also have the right to raise a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk.

9. Links to Other Websites
My website may occasionally include links to other sites, such as my social media profiles or supplier pages. Once you leave georgiasmithphotography.uk, this privacy policy no longer applies. I would encourage you to read the privacy policy of any external site you visit.

10. Changes to This Policy
From time to time, I may need to update this privacy policy. Any changes will be posted on this page with a revised "last updated" date. If anything significant changes, I will do my best to let you know.

Thank you for taking the time to read this. If anything here feels unclear or you have a question I have not answered, please reach out. I am always happy to help.
Georgia x
georgia@georgiasmithphotography.uk