privacy policy

 

Last updated: June, 2026


Your privacy is very important to me.  I work very hard to make sure that I treat my clients with the utmost care and respect. This policy specifies how I will look after your personal data, sets out your privacy rights and also explains how the law, and my approach to privacy and personal data, protects you. This policy has been drafted in accordance with the requirements of the General Data Protection Regulations (GDPR) as well as the Data (Use and Access) Act.


Emma Challinor Photography is registered with the Information Commissioner's Office (ICO), as I process personal data through my work.


Please feel free to contact me at emma@emmachallinorphotography.com if you have any questions or wish to discuss things further.


Emma Challinor of Emma Challinor Photography will act as Data Protection Officer. She can be contacted on the above email address, on 07813 800686 or at Marlow SL7 3EB.



By using this website, you consent to this policy.


  1. Information I collect


I collect, process and store personal data only if it is directly provided to me by you. You may do this in your capacity as the user of this website, by enquiring in relation to my photography services, by becoming a client or supplier, or potential client or supplier.


Personal information covers any information which relates to you as an identifiable person. Below are examples of the type of data that this may include:


  • Identity data- forenames, last name, maiden name, date of birth, gender, marital status.
  • Contact data may include: home or work addresses, email address and telephone numbers, job title and position.
  • Financial data- may include bank account and payment card details.
  • Special category data- for example, data about your health or any additional needs, details about your race, religion, sex and political opinions.
  • Transaction Data- may include payments made for my services or for products you buy through me.
  • Technical data may include IP address, browser type and version, time zone setting etc on the devices used to access this website.
  • Profile and Usage Data may include enquiries submitted by you, questionnaire responses and how you use my website, products and services.
  • Marketing Data includes any preference that you have advised me of in relation to marketing communications from me and/or information provided to join my newsletter/ email list.
  • I note that under UK law, a photograph is considered personal data if the individual in the image can be distinctly identified. It falls into the categories of standard personal data, biometric data, or potentially special category data, depending on how the image is processed and what it reveals.


I may also collect non-personal data such as aggregated data, which is data that may be obtained from your personal data, but which does not directly or indirectly identify you.


2. How information is collected


A range of methods may be used, including


  • direct interactions with me in person, by post, phone, email or otherwise.  
  • I ask questions and send out a questionnaire to get to know each family.
  • Automated technologies or interactions with this website- such as by using the web enquiry form or filling in your name and email address to be added to my newsletter.
  • You may be asked to enter personal information, such as contact information, to access client galleries on Pixieset.
  • Third parties or publicly available sources.



3. Data Accuracy


It is important that the data that I hold about you is accurate and up-to-date. In the event that your data changes, please notify me so I can update my records.



4. Use of Your Information


I primary use the data:

  • to enable me to provide my services (and any goods you order through and from me), to communicate with you and to meet me contractual commitments to you. This may include identity, contact, financial and transactional data as well as profile data.
  • to notify you about any changes to my business, such as improvements, service or price changes. This may include identity and contact data.
  • If you are an existing client, I might contact you about services similar to those that were the subject of a previous sale to you, or products which might be created from a previous session.
  • If you consent by signing up to my email list, to receive such information about my services (such as mini-sessions) or products I offer, this may include identity, contact and marketing data.
  • Where I need to comply with a legal obligation.


Where I collect data for marketing purposes, I will always request your consent and only use your data for the purpose that you explicitly give permission for.



I will always obtain your consent prior to sharing your data with third party for their marketing purpose, and it will only happen if it is important for that third party to advise you of products or services that are of interest to you.


I will only use your personal data for a reason other than the purpose for which it was originally obtained if we consider that we need to use it for that other purpose and have a legitimate interest in doing so.



5. Disclosure of your information


There are a range of circumstances where I may disclose your data to third parties. These include:


  • Regulatory bodies- where I need to do so to comply with the law, to assist fraud protection and minimise credit risk.
  • My suppliers- if my printing lab, for example, needs to have such data to fulfil its service to you- e.g. print delivery
  • Third Party Marketing- only if you consent to me to do so, I may provide your contact details to suppliers I trust and value.

If you do not want me to share your data with third parties, you can withhold your consent to this by writing to me at the address above or at emma@emmachallinorphotography.com at any time.


6. Controlling the use of your data


Where I rely on consent as the lawful basis for processing your data, you can revoke or vary that consent at any time. You can contact me at my address or at emma@emmachallinorphotography.com



7. Data Storage / Transfer


As part of the services offered to you, the information you provide to me may be transferred to and stored in countries outside of the EEA, as we use remote website server hosts to provide the website and some aspects of our service, which may be based outside of the EEA, or use servers based outside of the EEA.  My website and gallery delivery service, Pixieset, is location in the USA.


A transfer of your personal data may happen when your information is stored for me by Pixieset.


If you use my website while you are outside of the EEA, your personal data may be transferred outside the EEA in order to provide you with the services.


If I transfer or store your personal data outside the EEA in this way, I will take steps with the aim of ensuring that your privacy rights continue to be protected, as outlined in this privacy document.


8. Security


All your personal photographs and information is kept on a password protected hard drive at my home office.


Your gallery is always password protected, and also protected with a download pin so that your photographs are not accessible.


The transmission of information via the internet or email is not completely secure. I will do my best to protect your personal data, but cannot guarantee the security while you are transmitting it to my site: any such transmission is at your own risk.


Where you are given a password- eg to access your gallery- you are responsible for keeping this password confidential.


In the event of a data breach, I will notify the ICO and you.



9. Data Retention


The length of time that I store data depends on the purpose for which it was collected. I will only store data for as long as is required to fulfil that purpose or for the purpose of satisfying legal requirements. I retain photographs that I delivered as part of your final gallery for at least 3 years unless you notify me that you would like me to delete them once you have downloaded the photographs that you intend to keep.


Please notify me in writing at emma@emmachallinorphotography.com at any time if you wish me to remove the photographs from my hard drives.


It is a legal requirement that I keep certain data about my customers and suppliers for at least six years. The type of data includes contact, identity, financial and transaction data.


When you have requested that I provide you with marketing materials, I will retain your data until such time as consent is withdrawn by you.



10. Use of Cookies & Tracking Pixels


My website uses cookies (and tracking pixels) to gather information about your computer for my services and to provide statistical information regarding the use of my website. Such information will not identify you personally- it is statistical data about my visitors and their use of my website.    Please see my cookie policy for more information.


11. Your Rights


The GDPR gives you a range of rights in relation to the personal data that I collect from you. You have the right to:

  • access your personal data- this right is commonly known as the ‘data subject access request’ and enables you to receive a copy of the personal data I hold about you.
  • Request Update of the personal data. (You can have any incomplete or inaccurate data corrected)
  • Erasure of your personal data. This enables you to ask us to delete personal data where there is no justifiable reason for us continuing to retain and process it. We may not always been able to delete the data, such as if there is an ongoing contractual relationship between use or if we are legally required to retain the data.
  • Object to Processing of your personal data where we are relying on consent or our legitimate interests as the justification for processing the data.
  • Restrict the processing of your personal data- eg to vary the process by which I contact you.
  • Request the transfer of your data to you or to a third party.
  • Withdraw consent. If you withdraw consent we may not be able to provide certain products and services to you.


You can exercise these rights at any time by writing to me at  emma@emmachallinorphotography.com


12. Third Party Links


You might find links to third party websites on my website. If you click a link to a third-party website and visit that site, you may be allowing that site to collect and share certain data about you. These websites should have their own privacy policies which you should check. I do not accept any responsbility or liability for their policies whatsoever.


12.b. Client Galleries


Emma Challinor Photography creates a client gallery for each client to whom photos are delivered as part of the services contracted. My client galleries are hosted by Pixieset.  To visit a client gallery you will be required to enter a password.  This password is there to protect client photographs. Sometimes, entry of personal data is needed.  Again, this is used for security purposes.



13. Special Precautions over Children's Data


As a family photographer, I am particularly careful about sharing any personal data that relates to children.  I will always remove any identifying information about children (addresses, uniform badges, locations, family surnames).


On my social media- I share faceless images of children if they are not my own children unless I have explicit written consent to share the image from their parent or guardian.


On my website- I only share images that include children's faces with explicit consent from their parents.


If anyone would like for an image to be removed, I will do so at the earliest opportunity.  Even if you have given consent in the past, you can withdraw consent at any time and I respect this entirely.


Any family who wants their photographs to be entirely private, and to never appear on my website, my social media or my Pixiset gallery homepage, will have this desire for privacy fully respected.



14. Complaints.


If you have any concerns about how I handle your personal information, please write to me in the first instance.  You can write to me at emma@emmachallinorphotography.com.   I would welcome the opportunity to discuss any concerns, and I will work very hard to resolve any issues with you where possible.  I take my responsibilities here very seriously and I always want my customers to be happy- and to feel that their privacy is fully protected.  I will always acknowledge your complaint within 10 days and respond as quickly as possible.


If you feel I have not addressed your concerns, you can also contacct Information Commissioner’s Office (ICO) which is the UK supervisory authority for data protection issues. (www.ico.org)


I regularly review my policies to reflect changes on my website, in response to changes in legislation and in response to feedback. I welcome any queries, comments or requests you may have. Please do not hesitate to contact me.


Emma Challinor 02.06.2026     |      emma@emmachallinorphotography.com     |      07813 800686     |     Marlow SL73EB