Privacy Policy


Paul Empson Photography


This website is operated by Paul Empson Photography ( I ).


I take the protection and security of your personal information very seriously and this policy sets

out our responsibilities under The General Data Protection Regulation 2016 (‘GDPR’) and other

applicable laws in England and Wales relating to the processing and security of personal



This policy explains to you how I use and secures your personal information whilst you are using

the website.


This policy was last updated on 23rd May 2018.


Use of Your Data


This section explains how Paul Empson Photography uses your data.


Collection of Data


Contact form


The information you supply via my contact form is emailed & used only by me. I will use it to

contact you & create a client information document – name, email & phone number being the 3

most used fields with also possibly address & event location should your enquiry necessitate

such information. I do not share or sell any information you supply with any other parties.

I will only ever contact you in regard to the specific role you contacted me for.




I use Google Analytics to analyse the use of this website. Google Analytics generates statistical

and other information about website use by means of cookies, which are stored on users'

computers. The information generated relating to our website is used to create reports about the

use of the website. Google will store this information. Google's privacy policy is available at:


Most browsers allow you to reject all cookies, whilst some browsers allow you to reject just third

party cookies.




I do not actively market to clients. I will only contact you in regard to a specific role you have

hired me to conduct for you: photography.


Purchasing Products


I do not sell products online at, however I host photos – wedding &

events via a 3rd party hosting site that allows for you to order prints & downloads via

3rd party professional print labs. If you order images via wedding galleries or events pages the

information you enter is used by those companies to complete your order: name, address, email

address and phone number for the purpose of processing your order.


All personal data I collect is held electronically within encrypted folders on PC’s. All backups are

therefore encrypted too.


Marketing and your Data


We may send you emails regarding the status of orders, we have a business case for doing this

and these emails are not for the purposes of marketing.


Please be assured we do not share or sell your personal data to, anyone.


I do not keep or use emailing lists.


Accuracy and Retention


This section explains how Paul Empson Photography maintains the accuracy of your data and

how long we hold your data for – please see individual sections below for more details.


Data Accuracy


You provide me with your contact information via the contact form on my website: I may create a written & digital record of the information provided in

provision of the role you have enquired about: wedding, event photography etc.


Data Retention


Information – personal data - will only be retained for the specific task you contacted me for.

Where data has been collected or transferred to paper the paper documentation will be shredded

12 months after the date of your assignment.


Electronic data will remain in encrypted form for 7 years as required by HMRC in relation to the

processing of financial transactions.


Digital images, I may use some images for business use: flyers, booklets, banners and on my

website. If you decide you don’t want images featuring you used you can request them to be

removed via the contact form.


Data Security


Data is held on PC and is encrypted.


GDPR and your Rights


This section explains your rights under GDPR – please see section below for more details.


Paul Empson Photography will only use your information to contact you regarding the

assignment I was hired by you to complete.


As an individual, you may have certain rights under the GDPR regarding the use of your personal

data, these are:


  • The right to object – you can object to Paul Empson Photography processing your personal

data at any time. Email: to object.


  • The right to be forgotten – you can request that Paul Empson Photography remove your

personal data from our systems.


  • The right to access your personal data – You have a right to know what personal data Paul

Empson Photography hold on you and for what purpose we are processing your personal

data. This is known as a Data Subject Access Request (DSAR). These requests must be

made in writing by either email or letter with photographic identification to confirm your



  • Remember: I only have the personal information you supplied via the contact form initially

or via verbal communication. This tends to be name, email, mobile number; subsequently I

may receive address. I don’t often require any more than that & I only use the information

to contact you with regard to your query or assignment.

You can send these requests to or by post using the details as shown

on the contract form.


How to Complain


I appreciate that I do not always get things right, this section explains how you can make a



If you feel the need to complain I will endeavour to do my best to deliver a satisfactory and

amicable outcome. If you do wish to complain about how your personal information is used by

Paul Empson Photography then please email us at:


I will try to respond within 10 working days, this allows me time to investigate your complaint