Privacy and data protection

Your privacy matters.

We believe your photographs and personal information deserve thoughtful, careful handling.

Draft privacy information — requires review before launch. The site owner must confirm the legal entity, contact details, lawful bases, recipients, hosting location, retention schedules and contracts before publishing.

What we collect

When you create an account, request a photography session or make a purchase, we process information such as your name, email address, chosen photographs, transaction references and communications. For school services, identifiable pupil images may be processed under a separate school-specific arrangement.

How photographs are handled

Public landscape previews are intended for general viewing. Private school and client albums are accessible only to authorised account holders or administrators. High-resolution files are not stored in the public web directory and are released after verified payment where purchases apply.

Payments

Payment card information is entered on Square's hosted payment pages rather than stored by this website. We keep order and transaction status information for fulfilment and accounting. Physical-print orders also record the selected product and delivery details and share the recipient name/address and artwork with our print supplier, Prodigi. During Sandbox testing no real printing or delivery occurs; please use dummy delivery details.

Retention and requests

Photo retention and deletion periods will be specified in applicable photography arrangements. You can request information, correction or deletion, subject to applicable legal obligations, by contacting info@tashasuttonphotography.co.uk.

Security

The platform supports encrypted HTTPS connections, account authentication, administrator multi-factor authentication, access-controlled galleries and logged high-resolution downloads. Technical safeguards supplement, but cannot eliminate, screenshotting or inappropriate use after a permitted download.

Optional email updates

Newsletter signup is separate from accounts, bookings and enquiries. If you opt in, we store your email address, optional name, the consent wording and request/confirmation dates. Only confirmed subscribers receive seasonal photography updates. Each newsletter includes an unsubscribe link; no account login is needed to opt out.

We do not use newsletter open or link tracking. Postmark processes newsletter delivery. Unconfirmed requests are removed after 30 days by the maintenance worker. If you ask us to erase newsletter details, we remove your name and email and keep a minimal suppression hash and consent history to honour your preference and record it. Contact us using the address below for access or erasure requests.

Questions

For privacy and image-related concerns, email info@tashasuttonphotography.co.uk.