Privacy Policy
Andrew Davis Photography
Last updated: 17 February 2026
Andrew Davis Photography (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.
1. Who We Are
Legal Name: Andrew Davis Photography
Address: 5b Penybont Road, Pencoed, Bridgend, CF35 5PY
Email: enquiries@andrew-davis-photography.com
Andrew Davis Photography is the data controller responsible for your personal data unless otherwise stated.
2. What Personal Data We Collect
We may collect and process the following personal data:
Name (including children’s names where required for order processing)
Email address
Postal address
Telephone number
Order details
Booking information
Correspondence records
Photographic images captured as part of commissioned services
We do not intentionally collect special category (sensitive) personal data unless voluntarily provided.
3. How We Use Your Personal Data
We use personal data to:
Provide photography services
Process and fulfil print or product orders
Communicate regarding bookings or enquiries
Maintain business records
Comply with legal and tax obligations
4. Lawful Basis for Processing
We rely on the following lawful bases under UK GDPR:
Contract – where processing is necessary to fulfil a booking or order
Legal obligation – to comply with tax and accounting laws
Legitimate interests – for business administration and record keeping
Consent – where required (for example, marketing communications)
5. Data Retention
We retain personal data only for as long as necessary:
Financial and order records: up to 6 years (for tax and legal purposes)
Client contracts: up to 6 years
Enquiry records: typically up to 24 months
Photographs are retained securely for the duration required to fulfil the agreed services or as specified by contract with the client or institution
After these periods, personal data is securely deleted or anonymised.
6. Image Usage & Retention
Photographs taken by Andrew Davis Photography may be used for:
Delivery of commissioned services (prints, digital images, galleries)
Portfolio, marketing, and promotional purposes only with consent from the client or parent/guardian where applicable
Images are retained securely for as long as necessary to fulfil the agreed services or as otherwise specified in the contract with the client or institution. Once no longer required, images are securely deleted or anonymised unless explicit consent has been provided for longer-term use (for example, inclusion in a portfolio or website gallery).
Clients or guardians may withdraw consent for marketing or promotional use at any time by contacting us at enquiries@andrew-davis-photography.com. Withdrawal of consent will not affect images already delivered as part of contracted services.
7. Photography Involving Children
Andrew Davis Photography provides photography services that may involve children, including school, nursery, studio, and event photography.
In providing these services, we may process:
A child’s name (where required for identification or order processing)
Photographic images of the child
Order information linked to the child
School and Nursery Photography
Where photography services are arranged by a school or nursery:
The school or nursery acts as the data controller for pupil information.
Parental consent is obtained by the school or nursery prior to photography.
We process pupil data solely for the purpose of delivering the agreed photography services.
Studio and Direct Bookings
Where photography services are booked directly by a parent or legal guardian (for example studio sittings), personal data relating to the child is processed under contract with the parent or guardian.
We do not knowingly collect personal data directly from children without appropriate adult authority.
8. Third-Party Service Providers
We may use trusted third-party providers to deliver certain services, including:
Online gallery platforms
Professional print laboratories
Website hosting services
Where clients place print orders directly through an online gallery or laboratory platform, that provider acts as an independent data controller and processes personal data in accordance with its own Privacy Policy.
We encourage clients to review the Privacy Policies of any third-party services they use.
9. Cookies
Our website uses cookies to ensure proper functionality and improve user experience. Non-essential cookies are only used where consent has been provided via our cookie banner.
You may manage cookie preferences through your browser settings or the cookie consent tool available on our website.
10. Data Security
We take appropriate technical and organisational measures to protect personal data, including:
Restricted access to stored data
Secure devices and password protection
Use of encrypted systems by third-party providers where applicable
11. Disclosure of Information
We do not sell, rent, or trade personal data.
We may disclose personal data where required by law, court order, or where necessary to protect our legal rights.
12. International Transfers
Personal data is primarily processed within the United Kingdom. If personal data is transferred outside the UK (for example via cloud-based service providers), appropriate safeguards will be implemented in accordance with UK data protection law.
13. Your Rights
Under UK data protection law, you have the right to:
Request access to your personal data
Request correction of inaccurate or incomplete data
Request erasure of your data
Request restriction of processing
Object to processing
Request data portability
Withdraw consent at any time (where processing is based on consent)
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been handled unlawfully.
14. Changes to This Policy
We may update this Privacy Policy from time to time. The most current version will always be available on our website with the updated revision date.
15. Contact
If you have any questions about this Privacy Policy or your personal data, please contact:
Andrew Davis Photography
5b Penybont Road
Pencoed
Bridgend
CF35 5PY
