GDPR Policy for Alchemy Photography

Thank you for your interest in my website and data protection policy. You can use my website without the need to provide any personal data should you wish to. If you want to purchase photographic services, the processing of personal data will become necessary.

Any and all personal data will be in line with the GDPR and any UK data protection regulations.

Privacy Policy

This policy sets out how and why we collect any of your personal information, how it is processed and how it is kept secure. By using this website or engaging with me to provide any photographic services, you are agreeing to be bound by this policy.

Data collection and processing

Alchemy Photography is the controller of data that passes through this website or via email. This data is kept private between myself and a few other carefully selected data processors.

Data which I retain

In order to provide photographic services to you, I take and store photographs from your event. These photographs are stored for as long as the hard disks are functional in order to provide copies should you lose your photographs. This service is provided as a legitimate interest.

Should you wish me to remove your photographs from my hard disks and backups after I have delivered your photographs, I will do so if you provide me with an email confirming your request.

I also collect personal details from yourselves, your wedding party and the other wedding suppliers at your wedding. The details I may ask for are:

Names
Phone numbers
Email addresses
Social media links
I may also post photos from your wedding in a variety of places, listed below. This is done via legitimate interest. Should any member of your wedding party not wish to be included in this, please let me know by email. In addition to this, I also provide you with the ability to opt out of posting photographs from your wedding in the various places.

On my website
In wedding blogs and other websites
In other brands I work in
On social media
To your other wedding suppliers
I also capture website visitor names, phone numbers and email addresses when visitors make contact via my website to enquire about my services at your event.

External data processors
In addition to my own data, I also use a variety of data processors. They are listed below.

Smugmug
Smugmug is a service to provide online hosting of data. I store your wedding photos on Smugmug. They self-certify as being compliant with Privacy Shield, so are compliant with GDPR. I retain data via legitimate interest.

Google Suite
Google Suite is a tool for providing services which are available over the internet. I use Calendar and Email in order to store information relating to your wedding. Google are fully GDPR compliant. I retain 7 years of data in order to be compliant with legal obligations.

Google Analytics
Google Analytics is a service which provides information about how visitors use a website. I use the information to provide you with a more effective website. Google is fully GDPR compliant. I have nominated a 24 month period for retaining personal information for legitimate interest.

Security Precautions
Your security is very important to me. I take all reasonable steps to ensure that data is help and processed securely.