Privacy Policy

Last updated: June 3, 2026

1. Information We Collect

Personal Data for Photography Services

• Contact Information: Name, email address, phone number when you inquire about portrait photography services
• Photography Preferences: Session type, preferred dates, special requirements
• Images: Photographs taken during portrait sessions with your explicit consent
• Payment Information: Billing address and payment details (processed securely through third-party providers)

Website Usage Data

• Analytics Data: Page views, session duration, device type (only if you consent to analytics cookies)
• Essential Cookies: Required for website functionality and security
• Communication Records: Email correspondence and consultation notes

2. How We Use Your Information

• Service Delivery: To provide portrait photography services, schedule sessions, and deliver final images
• Communication: To respond to inquiries, send booking confirmations, and provide service updates
• Legal Compliance: To meet our contractual and legal obligations
• Marketing: To send promotional content about our services (only with your explicit consent)
• Website Improvement: To analyze website performance (only with analytics cookie consent)

3. Legal Basis for Processing (GDPR)

• Contract Performance: Processing necessary to fulfill our portrait photography services
• Legitimate Interest: For business communications and service improvement
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: For tax records and business compliance

4. Cookie Policy

Essential Cookies (Always Active)

• Website functionality and security
• Session management
• Cookie preference storage

Analytics Cookies (Optional)

• Google Analytics to understand website usage
• Performance monitoring
• You can opt-out at any time via our cookie banner

Marketing Cookies (Optional)

• Social media integration
• Advertising performance (if applicable)
• You can opt-out at any time

5. Data Sharing and Third Parties

We only share your personal data in the following circumstances:

• Service Providers: Secure email services, payment processors, and cloud storage (all GDPR compliant)
• Legal Requirements: When required by law or legal process
• Professional Labs: For print services (only with your explicit consent)

We never sell your personal data to third parties.

6. Image Rights and Usage

Your Portrait Images

• You own the rights to images of yourself
• We retain usage rights for portfolio and marketing purposes (unless you opt-out)
• You can request removal of your images from our portfolio at any time
• All commercial usage requires written consent

Portfolio Usage

• We may use session images for our portfolio and marketing materials
• You can opt-out of portfolio usage at booking or any time after
• Images will be removed within 30 days of opt-out request

7. Data Retention

• Client Records: 7 years for tax and business purposes
• Portrait Images: 5 years or until you request deletion
• Website Analytics: 26 months (Google Analytics default)
• Marketing Data: Until you unsubscribe or request deletion
• Email Communications: 3 years for business records

8. Your Rights Under GDPR

As a data subject, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data
• Restrict Processing: Limit how we use your data
• Data Portability: Receive your data in a machine-readable format
• Object: Object to processing for marketing purposes
• Withdraw Consent: Withdraw consent at any time

How to Exercise Your Rights

Contact us at [email protected] or use our contact form. We will respond within 30 days.

9. Data Security

• SSL encryption for all data transmission
• Secure cloud storage with encryption at rest
• Regular security updates and monitoring
• Limited access to personal data on need-to-know basis
• Regular data backups with encryption

10. International Transfers

Some of our service providers may be located outside the EU. When this occurs:

• We ensure adequate protection through adequacy decisions or appropriate safeguards
• Data is only transferred to GDPR-compliant services
• You can request details of specific safeguards in place

11. Children's Privacy

• We do not knowingly collect data from children under 16
• Portrait sessions with minors require parental consent
• Parents/guardians can exercise rights on behalf of children

12. Changes to This Policy

• We may update this policy to reflect changes in our practices or legal requirements
• Material changes will be communicated by email or website notice
• Continued use of our services constitutes acceptance of updates

13. Contact Information

Data Controller: Oscar Espinoza Photography

Email: [email protected]

Address: Surrey, United Kingdom

Privacy Contact

For privacy-related inquiries, contact [email protected].

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated:

ICO Website: ico.org.uk
Phone: 0303 123 1113