Dickon Clark Photography — GDPR & Privacy Policy

 

This policy explains what personal data I collect, why I collect it, how I store it, and how you can exercise your rights under the UK GDPR.

1. Who I Am  

Dickon Clark Photography

24 The Butts

Belper

Derbyshire

DE56 1HX

Email: enquiries@dickonclark.co.uk

I am the data controller, responsible for how your personal data is used.

 

2. The Data I Collect

 I only collect the information needed to provide your photography services:

 • Your name, email address and phone number

• Details about your shoot

• Photographs from your session that may identify you, your business, or your guests

 This information is usually provided when you enquire, book, or take part in a shoot.

 

3. Why I Collect Your Data

 I use your data to:

 • Communicate with you before, during and after your shoot

• Photograph, edit and deliver your images

• Create products such as prints or albums

• Maintain an archive so you can request replacement images

• Showcase my work in my portfolio, website, social media or printed materials — only with your explicit consent

 Lawful bases for processing:

 • Contract — to deliver the photography services you’ve booked

• Consent — for portfolio use

• Legitimate interest — secure archiving of images

 

 4. How Your Data Is Stored

 Your data is stored securely using:

 • Encrypted devices ( password protected hard drives ) in my home office

• GDPR‑compliant cloud storage

• Password‑protected online galleries

 Only I have access to your data. I do not share identifiable images with third parties unless required to fulfil your order (e.g., professional print labs).

 

5. Online Galleries

 Your images may be delivered through a password‑protected gallery.

 Only you — and anyone you choose to share your password with — can view or download your photographs.

 

6. Portfolio Use (With Consent Only)

 I may ask for permission to use selected images from your shoot in:

 • My website or blog

• Social media

• Printed brochures, business cards or marketing materials

 I will never use your images publicly without your  consent.

You can withdraw consent at any time.

 

7. Schools, Youth Organisations & Parental Consent

 If you are a school, college, nursery, youth group, charity or organisation working with children or young people, you must ensure that parental or guardian consent has been obtained before any child or young person is photographed.

 By booking a session involving children or young people, you confirm that:

 • You have collected valid, GDPR‑compliant consent from parents or legal guardians

• You have clearly explained how the images may be used (e.g., school website, newsletters, displays, social media)

• You will provide evidence of consent if requested

• You understand that I cannot photograph any child or young person without this consent

 

I rely on your organisation to manage and verify consent, as you hold the direct relationship with parents and guardians.

If consent is not confirmed, I will not proceed with photographing the child or young person.

 

All images of children are handled with the highest level of care, stored securely, and never used in my portfolio or marketing without  permission.

 

8. How Long I Keep Your Data

 I keep your images and related correspondence so you can request replacements in future.

 If you would like your data deleted, you can ask at any time and I will remove it promptly.

 

9. Your Rights Under GDPR

 You have the right to:

 • Access the personal data I hold about you

• Correct inaccurate information

• Request deletion of your data

• Withdraw consent for portfolio use

• Complain to the ICO if you are concerned about how your data is handled

 

 I will always respond quickly and respectfully to any request about your data.