Privacy Notice: How we handle your data (UK GDPR Compliant)

1. Who we are: J.P Noakes is the "Data Controller" for any personal information you provide. You can contact us at info@jpnoakesphotography.com

2. The Data we collect: We only collect what is strictly necessary to provide our photography services:

Identity Data: Name and title.

Contact Data: Email address, phone number, and billing/home address.

Event Data: Dates, locations, and names of subjects (e.g., wedding party details).

Technical Data: Your IP address and browsing habits on this site (collected via cookies).

3. Why we need it (Legal Basis) Under the UK GDPR, we rely on the following legal bases:

Contractual Necessity: We need your details to fulfill our photography contract and deliver your images.

Consent: For sending you any marketing newsletters or material (which you can opt-out of at any time).

Legitimate Interests: To manage our business, prevent fraud, and improve our website experience.

4. How we store your images Photography involves "Special Category Data" if it reveals sensitive info (like religious ceremonies).

Storage: We use secure, encrypted cloud storage (e.g., Pixieset, Dropbox) and physical password-protected drives.

Retention: We typically retain your contact data for 6 years following the end of the tax year to comply with HMRC record-keeping requirements. We archive image files for [2] years as a courtesy.

5. Your Rights As a UK resident, you have the right to:

Access: Ask for a copy of the data we hold about you.

Rectification: Ask us to correct any wrong information.

Erasure: Ask us to delete your data (the "Right to be Forgotten").

Complain: If you aren't happy, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.