Paul Empson Photography
This website is operated by Paul Empson Photography ( I ).
I take the protection and security of your personal information very seriously and this policy sets
out our responsibilities under The General Data Protection Regulation 2016 (‘GDPR’) and other
applicable laws in England and Wales relating to the processing and security of personal
This policy explains to you how I use and secures your personal information whilst you are using
the www.paulempson.co.uk website.
This policy was last updated on 23rd May 2018.
Use of Your Data
This section explains how Paul Empson Photography uses your data.
Collection of Data
The information you supply via my contact form is emailed & used only by me. I will use it to
contact you & create a client information document – name, email & phone number being the 3
most used fields with also possibly address & event location should your enquiry necessitate
such information. I do not share or sell any information you supply with any other parties.
I will only ever contact you in regard to the specific role you contacted me for.
I use Google Analytics to analyse the use of this website. Google Analytics generates statistical
and other information about website use by means of cookies, which are stored on users'
computers. The information generated relating to our website is used to create reports about the
Most browsers allow you to reject all cookies, whilst some browsers allow you to reject just third
I do not actively market to clients. I will only contact you in regard to a specific role you have
hired me to conduct for you: photography.
I do not sell products online at www.paulempson.co.uk, however I host photos – wedding &
events via Zenfolio.com a 3rd party hosting site that allows for you to order prints & downloads via
3rd party professional print labs. If you order images via wedding galleries or events pages the
information you enter is used by those companies to complete your order: name, address, email
address and phone number for the purpose of processing your order.
All personal data I collect is held electronically within encrypted folders on PC’s. All backups are
therefore encrypted too.
Marketing and your Data
We may send you emails regarding the status of orders, we have a business case for doing this
and these emails are not for the purposes of marketing.
Please be assured we do not share or sell your personal data to, anyone.
I do not keep or use emailing lists.
Accuracy and Retention
This section explains how Paul Empson Photography maintains the accuracy of your data and
how long we hold your data for – please see individual sections below for more details.
You provide me with your contact information via the contact form on my website:
www.paulempson.co.uk I may create a written & digital record of the information provided in
provision of the role you have enquired about: wedding, event photography etc.
Information – personal data - will only be retained for the specific task you contacted me for.
Where data has been collected or transferred to paper the paper documentation will be shredded
12 months after the date of your assignment.
Electronic data will remain in encrypted form for 7 years as required by HMRC in relation to the
processing of financial transactions.
Digital images, I may use some images for business use: flyers, booklets, banners and on my
website. If you decide you don’t want images featuring you used you can request them to be
removed via the contact form.
Data is held on PC and is encrypted.
GDPR and your Rights
This section explains your rights under GDPR – please see section below for more details.
Paul Empson Photography will only use your information to contact you regarding the
assignment I was hired by you to complete.
As an individual, you may have certain rights under the GDPR regarding the use of your personal
data, these are:
data at any time. Email: email@example.com to object.
personal data from our systems.
Empson Photography hold on you and for what purpose we are processing your personal
data. This is known as a Data Subject Access Request (DSAR). These requests must be
made in writing by either email or letter with photographic identification to confirm your
or via verbal communication. This tends to be name, email, mobile number; subsequently I
may receive address. I don’t often require any more than that & I only use the information
to contact you with regard to your query or assignment.
You can send these requests to firstname.lastname@example.org or by post using the details as shown
on the contract form.
How to Complain
I appreciate that I do not always get things right, this section explains how you can make a
If you feel the need to complain I will endeavour to do my best to deliver a satisfactory and
amicable outcome. If you do wish to complain about how your personal information is used by
Paul Empson Photography then please email us at: email@example.com
I will try to respond within 10 working days, this allows me time to investigate your complaint