Privacy Policy for Iris Willow Photography

At Iris Willow Photography, your privacy is important to us. We are committed to protecting and respecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, book our photography services, or engage with us in any other way.

1. Who We Are
Iris Willow Photography is a UK-based photography business that specializes in wedding, family, and newborn photography. We are registered with the Information Commissioner's Office (ICO) and fully comply with data protection laws, including the General Data Protection Regulation (GDPR).

2. Information We Collect
We may collect the following types of personal data when you interact with our website or services:

  • Personal Information: This includes your name, email address, phone number, and other details you provide when contacting us, booking a session, or subscribing to our newsletter.

  • Payment Information: If you book a session or purchase a product, we collect payment details (such as card numbers or billing information), which are processed by secure third-party payment providers.

  • Website Usage Data: We may collect data on how you use our website, such as your IP address, browser type, and pages visited. This information helps us improve our website and services.

  • Images and Content: Any photos or videos taken during your session, as well as any content you provide for promotional purposes.

3. How We Use Your Information
We use the information we collect for the following purposes:

  • To Provide Photography Services: To fulfil bookings, deliver images, and communicate about your sessions.

  • To Improve Our Services: To analyze usage data and enhance our services, website, and client experience.

  • Marketing and Communication: If you have opted in, we may send you marketing materials, newsletters, or updates about our services.

  • Legal Compliance: To comply with legal obligations or protect our rights in the case of any dispute.

4. GDPR and Your Rights
As a business based in the UK, we comply with the General Data Protection Regulation (GDPR). Under GDPR, you have the following rights regarding your personal data:

  • Right of Access: You have the right to request a copy of the personal information we hold about you.

  • Right to Rectification: You can request that any inaccurate or incomplete data be corrected.

  • Right to Erasure: You can request that we delete your personal data, subject to certain legal conditions.

  • Right to Restrict Processing: You can request that we limit how we process your personal data in specific circumstances.

  • Right to Object: You can object to the processing of your personal data for marketing purposes.

  • Right to Data Portability: You can request that your data be transferred to another organization in a structured, commonly used format.

If you wish to exercise any of these rights, please contact us using the details below.

5. How We Protect Your Information
We take data protection seriously and use appropriate technical and organizational measures to safeguard your personal information. However, please be aware that no method of data transmission over the internet is completely secure, and while we strive to protect your information, we cannot guarantee absolute security.

6. Sharing Your Information
We will not sell or rent your personal information to third parties. However, we may share your data in the following circumstances:

  • Service Providers: We may share your personal data with trusted third-party service providers, such as payment processors or cloud storage services, to assist us in running our business. These providers are obligated to keep your information confidential and use it solely for the purposes we specify.

  • Legal Compliance: We may disclose your information if required by law or in the event of a legal dispute.

7. Cookies and Tracking Technologies
Our website uses cookies to enhance your experience and track website usage. Cookies are small files placed on your device to collect and store information about how you use our site. You can manage or disable cookies through your browser settings, but this may affect your experience on our website.

8. Retention of Data
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. Once the data is no longer needed, we securely delete or anonymize it.

9. Third-Party Links
Our website may contain links to third-party websites, such as social media platforms or other services. Please note that we are not responsible for the privacy practices of these external websites. We encourage you to review their privacy policies before providing any personal information.

10. Children’s Privacy
Our services are not intended for children under the age of 13. We do not knowingly collect personal data from children. If we discover that we have inadvertently collected data from a child under 13, we will take steps to delete that information.

11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page, and we will update the “Last Modified” date at the bottom of the policy. We encourage you to review this policy periodically.

Last Modified: 2025