
Privacy Policy

Last update:- 29th September 2025
1. Introduction
I respect your privacy and am committed to protecting your personal data. This policy explains how I collect, use, and store information in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
2. Data I Collect
I may collect the following information when you use my website or services:
- Contact details: name, email address, phone number, postal address
- Wedding details: date, venue, guest information, and other notes you share
- Communications: any information you provide when you contact me
- Order details: via Pic-Time, which are imported into my client management system (LightBlue)
- Usage data: IP address, browser type, pages visited, referring site, and times/dates (via Google Analytics, Jetpack, and my website host)
3. How I Use Your Data
Your personal data may be used to:
- Respond to your enquiries and communicate with you
- Provide photography services you have booked
- Manage bookings, contracts, and invoices
- Process and deliver gallery orders
- Send helpful planning resources, blog posts, or check-ins as part of the enquiry and booking process
- Analyse website traffic and improve my website (via Google Analytics, Jetpack, and host analytics)
- Run online advertising campaigns through Meta (Facebook/Instagram) using the Meta Pixel
4. Third-Party Services I Use
I only share your data with trusted third-party providers where necessary to deliver my services:
- LightBlue (UK-based CRM) — for managing enquiries, contracts, and bookings
- Pic-Time — for delivering online galleries and processing print/product orders
- Stripe — for secure online payment processing (I do not see or store card details)
- Google Analytics & Jetpack — for website analytics
- Meta Pixel — for tracking and measuring the effectiveness of Facebook/Instagram ads
5. Lawful Bases for Processing
I process personal data under the following legal grounds:
- Contract — to provide photography services you request
- Legitimate interests — for business administration, record-keeping, and analytics
- Consent — for placing non-essential cookies such as those used by Meta Pixel or Google Analytics
6. Cookies & Tracking
- My website uses cookies to function and to collect analytics.
- Google Analytics and Jetpack track anonymous usage data (e.g. pages visited, time on site).
- The Meta Pixel is installed to help me understand how my ads perform and to reach people who may be interested in my services.
- You can control cookies through your browser settings, and you can opt out of Meta ads through your Facebook/Instagram ad preferences.
7. Data Retention
I only keep your personal data for as long as necessary to fulfil the purposes described above, or as required by law. After this period, your data will be securely deleted or anonymised.
8. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data I hold about you
- Request corrections to inaccurate or incomplete data
- Request deletion of your data (where there is no legal or contractual reason for me to keep it)
- Restrict or object to processing in certain circumstances
- Request transfer of your data to another provider (data portability)
- Withdraw consent for processing where this is the lawful basis
To exercise your rights, please contact me using the details below.
9. Security
I take appropriate technical and organisational measures to protect your personal data against loss, misuse, or unauthorised access.
10. Changes to This Policy
This policy may be updated from time to time. The latest version will always be available on my website.
11. Contact Details
If you have any questions about this policy or how your data is handled, you can contact me at:
Steven Mitchell Photography
146 Maxwellton Avenue, East Kilbride, Glasgow G74 3DU
Hello@steven-mitchell.com
07736297474
If you are not satisfied with how your data is handled, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk.Visitor comments may be checked through an automated spam detection service.
