Privacy Policy

This privacy policy sets out how Robert Littlejohns (referred to as “I” in the privacy policy) uses or “processes” your personal data on this website and for the provision of Pet Photography Sessions (referred to as “Sessions” in the privacy policy). This policy may be updated from time to time and the most up-to-date policy will be displayed on this page (https://roblj.co.uk/privacy/).

If you have any questions about this policy or how your data is managed, please get in touch here.

Last updated 5th October 2024

What personal data is collected and how is it used?

I collect the following types of personal data:

  • Contact details, such as name, address, phone number and email address. These are used to:
    • Arrange the location, date, and time of Sessions.
    • Request payment for Sessions.
    • Deliver products after a Session.
  • Photographs of individuals (this excludes animals, GDPR only applies to people). These may be captured during Sessions either at your request or as a result of being near the intended subject. These are used to:
    • Deliver products after a Session.
    • Promote my services on this website or Instagram.
  • Financial information, such as payments made for Sessions. These are used to ensure that Sessions are paid for and to ensure I meet my tax obligations.

With the exception of photographs, all personal data I process is provided directly by you when you contact me using the contact or enquiry forms on this website, by e-mail, through Instagram, or through LinkedIn.

I do not sell any personal data.

What are my lawful bases for processing?

Under UK General Data Protection Regulation (UK GDPR), I rely on lawful bases for processing personal data. The lawful bases I use are:

Consent: the individual has given clear consent for the processing of their data for a specific purpose. This is done when you accept this privacy policy before submitting a contact or enquiry form on this website. Consent will also be requested to allow use of photographs for promotional purposes when signing up for a Session.

Contract: processing the personal data is required to deliver contracts for photography services.

How do I store personal data?

Your personal data is stored securely on encrypted media or secure online storage based in the UK. It is only accessible to me and will be processed only in line with the lawful bases detailed above. The exception to this is photographs where consent has been given for use for promotional purposes where this personal data may be stored on this website or Instagram.

Personal data will be stored for the following periods:

  • Contact information: 1 year after last contact.
  • Photographs of individuals: Up to 1 year after the Session if no consent for promotional use is provided, otherwise indefinitely.
  • Financial information: 6 years.

Personal data is securely deleted once the retention period has elapsed.

Third party services

I make use of Stripe for payment processing. Their privacy policy can be found at https://stripe.com/gb/privacy.

I make use of Instagram for promotional purposes. Their privacy policy can be found at https://privacycenter.instagram.com/policy.

Your data protection rights

Under data protection law, you have the following rights:

Right to be informed: You have the right to know what personal data we process, why we process it, how long we retain it for, and who it will be shared with. This information is provided in this privacy policy.

Right of access: You have the right to ask for copies of your personal data.

Right to rectification: You have the right to ask us to rectify personal data you think is inaccurate and to ask us to complete data you think is incomplete.

Right to erasure: You have the right to ask us to erase your personal data in certain circumstances.

Right to restriction of processing: You have the right to ask us to restrict the processing of your personal data in certain circumstances.

Right to object to processing: You have the right to object to the processing of your personal information in certain circumstances.

Right to data portability: You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge to exercise your rights. If you make a request, we have one calendar month to respond to you. Please contact me if you wish to make a request.

How to complain

If you have any concerns about my use of your personal information, you can make a complaint to me here.

You can also complain to the ICO if you are unhappy with how we have used your data. Their address is: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Their helpline can be contacted on 0303 123 1113 and their website is https://www.ico.org.uk.