1. Introduction
This policy provides a framework for how personal data is handled in the course of delivering professional photography services.
2. Scope
This policy applies to all personal data processed by Tiny Lemon Studios. It includes data relating to:
- Contractors and suppliers
- Enquiries and general business contacts
This policy covers personal data held in both electronic and physical formats.
3. Data We Collect
We may collect and process the following categories of personal data:
- Booking and session details
- Photographic and video content created during sessions
- Payment and invoicing information
- Correspondence and communications relating to services
- Website usage data collected via analytics tools or cookies, where applicable
4. Legal Basis for Processing
We process personal data under one or more of the following lawful bases:
- Contract: where processing is necessary for a contract or to take steps prior to entering a contract
- Legal obligation: where processing is required to comply with legal or regulatory requirements
- Legitimate interests: where processing is necessary for the operation of the business, provided these interests are not overridden by the rights and freedoms of the individual
5. Purpose of Processing
Personal data is processed for the following purposes:
- Delivering photography services
- Communicating before, during and after sessions
- Editing, storing and delivering photographic content
- Maintaining business records and financial accounts
- Sending marketing communications where consent has been provided
- Complying with legal, tax or regulatory obligations
6. Data Sharing
Tiny Lemon Studios does not sell or rent personal data.
Personal data may be shared with trusted third parties only where necessary for the operation of the business. These may include:
- Editing, file transfer or delivery services
- Accounting or legal professionals
- Regulatory or government authorities where required by law
All third parties are required to handle personal data in accordance with applicable data protection legislation and appropriate contractual safeguards where necessary.
7. Data Storage and Retention
Personal data is stored securely using protected digital systems and secure devices. Any physical records are stored safely and disposed of securely when no longer required.
Data is retained only for as long as necessary for the purposes for which it was collected. Retention periods may include:
- Photographic content may be retained for portfolio, archival and client re-order purposes unless a deletion request is received
8. Data Subject Rights
- The right to request correction of inaccurate or incomplete data
- The right to request deletion of personal data in certain circumstances
- The right to restrict or object to certain types of processing
- The right to withdraw consent at any time, where processing is based on consent
- The right to data portability, where applicable
Requests to exercise these rights should be made using the contact details provided in this policy.
9. Marketing Communications
Marketing communications will only be sent where appropriate consent has been obtained or where there is a legitimate basis under UK GDPR.
Individuals may withdraw consent or opt out of marketing communications at any time by using the unsubscribe option in emails or by contacting Tiny Lemon Studios directly.
10. Data Breaches
Where a breach is likely to result in a risk to the rights and freedoms of individuals, we will notify the affected individuals and the Information Commissioner’s Office (ICO) without undue delay, in accordance with legal requirements.
11. Policy Review and Updates
This policy will be reviewed regularly and may be updated from time to time to reflect changes in legislation or business practices. The most current version will be made available upon request or published where appropriate.