1. Introduction
LivHayman Photography ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our photography services.
This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
2.1 Information You Provide
- Contact Information: Name, email address, phone number, postal address
- Account Information: Username, password, preferences
- Order Information: Billing address, shipping address, payment details
- Communications: Messages, enquiries, feedback
- Event Information: Details about photography sessions, locations, participants
2.2 Information Collected Automatically
- Device Information: IP address, browser type, operating system
- Usage Data: Pages visited, time spent, clicks, navigation paths
- Cookies: Session cookies, preference cookies, analytics cookies
- Location Data: Approximate location based on IP address
2.3 Information from Third Parties
- Social media platforms (when you interact with our social media pages)
- Payment processors (transaction confirmations)
- Marketing partners (with your consent)
3. How We Use Your Information
We use your personal data for the following purposes:
- Service Delivery: To provide photography services and deliver products
- Communication: To respond to enquiries and send service updates
- Orders: To process orders and payments
- Marketing: To send promotional materials (with your consent)
- Improvement: To improve our website and services
- Legal Compliance: To comply with legal obligations
- Security: To protect against fraud and maintain website security
4. Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract: Processing necessary to fulfil our contract with you
- Consent: You have given explicit consent for specific purposes
- Legitimate Interests: Processing necessary for our legitimate business interests
- Legal Obligation: Processing required by law
- Vital Interests: Processing necessary to protect someone's life
5. Data Sharing and Disclosure
We may share your information with:
- Service Providers: Print labs, shipping companies, cloud storage providers
- Payment Processors: Stripe, PayPal (as applicable)
- Professional Advisors: Lawyers, accountants, insurers
- Law Enforcement: When required by law or court order
- Business Transfers: In case of merger, sale, or acquisition
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law.
- Customer Records: 7 years after last transaction (for tax purposes)
- Marketing Lists: Until you unsubscribe or request deletion
- Photography Files: 3 years after session (unless otherwise agreed)
- Website Analytics: 26 months
- CCTV/Security: 30 days (if applicable)
7. Your Rights
Under UK GDPR, you have the following rights:
- Access: Request a copy of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Request limited processing of your data
- Portability: Receive your data in a portable format
- Object: Object to certain types of processing
- Automated Decisions: Not be subject to automated decision-making
To exercise these rights, please contact us at privacy@livhayman.co.uk
8. Cookies
We use cookies to enhance your experience on our website. For detailed information about the cookies we use and your choices, please see our Cookie Policy.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- SSL/TLS encryption for data transmission
- Secure password requirements
- Regular security assessments
- Limited access to personal data
- Staff training on data protection
However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
10. International Transfers
Some of our service providers may be located outside the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:
- Standard contractual clauses approved by the ICO
- Adequacy decisions
- Your explicit consent
11. Children's Privacy
Our services are not directed to children under 16. We do not knowingly collect personal data from children under 16 without parental consent. If you believe we have collected such information, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.