Privacy Policy

Introduction
This Privacy Policy explains how we collect, use, and protect your personal data when you interact with our services or website. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are
We are Will Bradshaw Photography, a photography and video service provider based in Telford. For privacy-related questions, you can contact us at info@willbradshawphotography.com

What Data We Collect
We may collect the following personal data:

Name, email address, phone number, and other contact details.
Information related to your project (e.g., preferences or requirements).
Billing details for invoicing purposes (we do not take payment through the website — invoices are settled directly, typically by bank transfer).
Any communication you send to us via our contact form, WhatsApp, email, or phone.
Website usage data, such as pages visited and general location/device information, collected automatically via Google Analytics.
Photographs and video footage taken as part of a booked project, which may include images of people other than the person who booked us (for example, staff or attendees at a corporate event).

Our Legal Basis for Processing Your Data
We rely on the following legal bases under UK GDPR:

Contract — to provide the photography/video services you’ve booked, communicate with you about your project, and issue invoices.
Legitimate interests — to understand how visitors use our website (via analytics), and to showcase completed work in our portfolio and marketing, in line with the usage terms set out in our Terms and Conditions.
Legal obligation — to retain financial records such as invoices for the period required by HMRC.
Consent — where we ask for it specifically, such as before sending you promotional material, or for non-essential cookies.

How We Use Your Data
We use your data to:

Provide and manage our photography and video services.
Respond to your inquiries and communicate about your project.
Prepare and send invoices.
Understand and improve how our website is used.
Send updates or promotional material, but only if you’ve opted in — we currently do this manually and do not use a mailing list platform.

Data Sharing and Third-Party Tools
We do not sell or rent your personal data. We do share limited data with the following third parties, only as needed to run our business and website:

Google Analytics — collects anonymised website usage data to help us understand visitor behaviour.
WPForms — processes the details you submit through our website contact form.
WhatsApp (Meta) — if you choose to contact us via WhatsApp, your messages are handled according to WhatsApp’s own privacy policy as well as this one.
Our email and website hosting providers, who store data as part of running our email and website infrastructure.
Any party required by law, such as HMRC for tax purposes.

International Data Transfers
Some of the third parties listed above (including Google and Meta) may store or process data outside the UK, including in the United States. Where this happens, these providers maintain their own safeguards for international transfers (such as approved contractual clauses), as required under UK GDPR. We do not have any other reason to transfer your data internationally.

Cookies
Our website uses cookies set by Google Analytics, to help us understand how visitors use the site, and by embedded Google Maps content. These may set cookies or collect data in line with Google’s own privacy policy. Where required, we will ask for your consent to non-essential cookies via a cookie notice on the site.

Photographs of Third Parties
Where a project involves photographing or filming people other than the client who booked us — for example, staff or attendees at a corporate event — the client is responsible for ensuring those individuals are aware that photography/video is taking place. We process these images under the same legitimate interests basis described above, in connection with delivering the booked project and, where agreed, our portfolio and marketing use.

Data Retention
We retain personal data only for as long as necessary:

Invoices and financial records are kept for a minimum of 5 years after the relevant tax year, in line with HMRC requirements.
Enquiry and project communication is generally kept for as long as needed to deliver the project and resolve any follow-up, and is periodically reviewed and deleted where no longer needed.
Delivered photographs/video may be retained for portfolio and archival purposes unless you ask us to remove them.

Children’s Data
We do not knowingly collect personal data directly from children. Where a booked session involves anyone under 18, we rely on the parent or legal guardian to provide consent and act on the child’s behalf, as set out in our Terms and Conditions.

Your Rights
Under the UK GDPR, you have the right to:

Access, correct, or delete your personal data.
Restrict or object to our processing of your data.
Withdraw consent for marketing communications or non-essential cookies at any time.
Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk if you believe your rights have been violated.

Data Security
We take appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse.

Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on our website with the updated date.

Contact Us
If you have any questions or concerns about this policy, please contact us at info@willbradshawphotography.com.