Privacy Policy

Last updated: 1st February 2026

Who I am

My website address is: https://photographsbyeve.co.uk

This website is operated by Eve Spalding, trading as Photographs by Eve.

For the purposes of UK data protection law, I am the data controller responsible for your personal data.

If you have any questions about this policy or how your data is used, you can contact me at:

Email: hello@photographsbyeve.co.uk

Your privacy

I am committed to protecting your privacy and handling your personal data in a safe, transparent, and lawful way, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Personal data I collect

I may collect and process the following personal data:

Your name

Email address

Telephone number

Postal address (where relevant)

Information relating to your enquiry, booking, or order

Records of our communications (emails, messages, calls)

I only collect personal data that is necessary for running my business and providing my services.

How I collect your data

I collect personal data when you:

Submit an enquiry through my website contact form

Contact me by email, phone, text, or social media

Book my services

Interact with my website (via cookies – see below)

Contact forms & communication

When you contact me via my website contact form, I collect your details so I can:

Respond to your enquiry

Provide information about availability, packages, and pricing

Communicate with you about a booking

I may also send a short text message to confirm that I have received and replied to your enquiry.

I keep records of our communications (such as emails, text messages, or social media messages) for business and reference purposes.

Social media

If you interact with me via social media (for example by sending a message or commenting on a post), I may keep a record of those interactions. Social media platforms have their own privacy policies, and I encourage you to review them.

How and why I use your personal data

I use your personal data for the following purposes:

To communicate with you and respond to enquiries

To manage bookings and fulfil contracts

To provide my photography services

To process payments and deliver products or galleries

To comply with legal and accounting obligations

Legal basis for processing your data

Under UK GDPR, I rely on the following legal bases to process your personal data:

Consent – when you submit an enquiry or contact me

Contract – when you book my services

Legal obligation – for tax, accounting, and record-keeping purposes

Legitimate interests – to operate and manage my business effectively

How long I keep your data

I only keep your personal data for as long as necessary:

Enquiry data: kept for up to 12 months

Client booking data and contracts: kept for up to 6 years (to meet HMRC and legal requirements)

Invoices and financial records: kept for 6 years

Photographs: retained in line with my business practices and for portfolio, contractual, and archival purposes

Who I share your data with

I do not sell or rent your personal data.

I may share limited personal data with trusted third parties only where necessary to run my business, such as:

Website hosting providers

Email and communication services

Online gallery and image delivery platforms

Payment processors

Accountants or bookkeepers

These providers only receive the data necessary to perform their services and are required to handle your data securely and lawfully.

Cookies

Cookies are small text files stored on your device that help websites function properly.

I use cookies to:

Ensure the website functions correctly

Improve the performance and design of the website

Understand how visitors use the site

Some cookies are essential for the website to work. Others help analyse website usage. I do not use cookies to personally identify you.

You can control or delete cookies through your browser settings. Disabling cookies may affect how the website functions.

Embedded content from other websites

This website may include embedded content (such as videos or images). Embedded content behaves in the same way as if you visited the other website directly.

These websites may collect data about you, use cookies, or track your interaction with embedded content. I have no control over how third-party websites handle your data.

Data security

I take appropriate measures to protect your personal data, including secure systems, password protection, and limited access to personal information.

Your rights

Under UK GDPR, you have the right to:

Request access to the personal data I hold about you

Request correction of inaccurate data

Request erasure of your data (where applicable)

Object to or restrict processing

Request data portability

To exercise any of these rights, please contact me using the details above.

Please note that some data may need to be retained for legal or administrative purposes.

Complaints

If you are unhappy with how I handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s

Website: ico.org.uk

Changes to this policy

This Privacy Policy may be updated from time to time. The most current version will always be available on this page.