1. INTRODUCTION  PAK Photography ("we", "us", "our") is committed to protecting your privacy and handling your personal data responsibly. This privacy policy explains how we collect, use, store and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.  We are a sole trader. Dog portrait photography  

2. DATA CONTROLLER  The data controller responsible for your personal data is:  PAK Photography OX14 3BA  Email: Bethanieyoungphotography@gmail.com   For data protection enquiries, please contact us using the details above.  

3. PERSONAL DATA WE COLLECT  We may collect and process the following categories of personal data:  Name and contact details; Email address; Phone number; Postal address; Location data; Photos or images; Website browsing behaviour; Demographics (age, gender, etc.); Social media profiles; Device and browser information; Preferences and interests.  We collect this information when you: • Contact us via our website, email, phone or in person • Create an account or register with us • Make a purchase or enquiry • Subscribe to our newsletter or marketing communications • Use our website or services • Interact with us on social media  

4. HOW WE USE YOUR DATA  We use your personal data for the following purposes:  • To provide our products and services to you • To respond to your enquiries and requests • To process transactions and send related information • To send you technical notices and support messages • To communicate with you about products, services, offers and events (where you have consented or we have a legitimate interest) • To personalise and improve your experience • To monitor and analyse trends, usage and activities • To detect, prevent and address fraud and security issues • To comply with legal obligations  

5. LAWFUL BASIS FOR PROCESSING  We process your personal data under the following lawful bases:Performance of a Contract: We process your name, contact details, postal address, booking details, and photograph imagery to fulfill our contract with you (e.g., executing the dog photography session, delivering prints, and handling billing).Consent: We rely on your clear, affirmative consent to process your website browsing behavior, device/browser information, and interest preferences via non-essential analytics and marketing cookies. We also rely on consent to send you newsletter marketing communications. You can withdraw your consent at any time.Legitimate Interests: We process your personal data (such as initial enquiry form messages and basic contact details) where it is necessary for our legitimate business interests to respond to client queries, manage customer relationships, and improve our services, provided these interests do not override your fundamental rights.Legal Obligation: We process and retain financial transactions, invoices, and accounting records to comply with statutory UK tax regulations and HMRC reporting requirements. 

6. DATA SHARING  We may share your personal data with:  Website hosting providers; Analytics providers (Google Analytics, etc.); Payment processors (Stripe, PayPal, etc.); Accountants and bookkeepers; Delivery and shipping companies; Social media platforms; IT support providers; CRM systems.  We will only share your data where necessary for the purposes outlined in this policy and in compliance with data protection law. We require all third parties to maintain appropriate security measures and to process your data only in accordance with our instructions.  We do not sell your personal data to any third party.  

7. DATA RETENTION: We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, tax, accounting, or reporting obligations.Our standard retention periods are as follows:Transaction & Invoice Records: Retained for 6 years from the end of the financial year in question to comply with UK tax law (HMRC).Website Analytics Data: User-level and event-level data linked to cookies and advertising identifiers are securely retained within Google Analytics 4 for a maximum period of 14 months.Customer Enquiries: General communication logs and website enquiries that do not result in a booking are securely deleted 2 years after our last contact.Marketing Preferences: Retained until you choose to unsubscribe, opt out, or withdraw your explicit consent.Image retention and storage: As a photography business, we capture and process digital images of you and your pets.How long we keep images: We securely store your final session images and raw photograph files for a maximum period of 14 months from the date of your photography session.Why we keep them: We retain these files for this 14-month window to fulfill our contract with you (allowing time for print ordering, re-downloads, or replacing lost files) and for our own legitimate business interests (such as resolving any administrative queries or processing potential re-orders).What happens next: Once the 14-month period expires, your digital image files will be permanently and securely deleted from our hard drives, cloud storage, and backup systems. If you require copies of your images after this date, please ensure you have downloaded and saved them securely, as we will no longer hold copies.

8. DATA SECURITY  We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures include:  • Secure, encrypted connections (HTTPS) for data transmission • Password protection and access controls • Regular security updates and monitoring • Staff training on data protection  

9. YOUR RIGHTS  Under data protection law, you have the following rights:  • Right of access: Request a copy of the personal data we hold about you • Right to rectification: Request correction of inaccurate or incomplete data • Right to erasure: Request deletion of your data in certain circumstances • Right to restrict processing: Request limitation of how we use your data • Right to data portability: Receive your data in a structured, commonly used format • Right to object: Object to processing based on legitimate interests or for marketing • Right to withdraw consent: Withdraw consent at any time where processing is based on consent  To exercise any of these rights, please contact us using the details in Section 2. We will respond to your request within one month.  

10. COOKIES  Our website uses cookies and similar tracking technologies to function effectively and optimize your user experience:Essential Cookies: These are strictly necessary for the website to operate, load correctly, and allow secure browsing. They do not require your consent.Analytics and Marketing Cookies: With your explicit permission via our cookie consent banner, we use Google Analytics 4 to track user behavior. These cookies collect pseudonymized digital identifiers, including truncated IP addresses, browser types, and device information. This data helps us analyze website traffic and user preferences. We do not track you until you click "Accept" on our consent banner, and you can change your preferences at any time. 

11. MARKETING  We will only send you marketing communications if you have given your explicit consent. You can withdraw this consent at any time by contacting us or using the unsubscribe link in our emails.  

12. INTERNATIONAL TRANSFERS  We primarily process your data within the UK and European Economic Area. Where we transfer data outside these areas, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the UK Information Commissioner's Office.  

13. CHANGES TO THIS POLICY  We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website or contacting you directly.  

14. COMPLAINTS  If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):  Information Commissioner's Office Wycliffe House, Water Lane Wilmslow, Cheshire SK9 5AF Website: https://ico.org.uk Telephone: 0303 123 1113  We would appreciate the opportunity to address your concerns before you contact the ICO. Please contact us in the first instance using the details in Section 2.  

15. CONTACT US  If you have any questions about this privacy policy or how we handle your personal data, please contact us:  PAK Photography 110 Lower Radley, Abingdon, Oxfordshire. OX14 3BA Email: Bethanieyoungphotography@gmail.com   ---  This privacy policy is provided as a template guide. You should review and adapt it to your specific circumstances and seek legal advice if necessary to ensure full compliance with applicable regulations.