Privacy Policy 

Last updated: May 2026 

Thank you for choosing Tin Squid Photography. Your privacy is incredibly important to us. This Privacy Policy outlines how we collect, use, store, and protect your personal data when you use our website, book our services, or interact with us. 

We comply fully with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. 

 

1. Who We Are 

For the purpose of data protection laws, the data controller is: 

  • Business Name: Tin Squid Photography 

  • Contact Name: Alex Haydock 

 

2. The Data We Collect 

We may collect and process the following types of personal information: 

  • Identity & Contact Data: Your name, partner’s name (if applicable), email address, phone number, and home address. 

  • Event Details: Dates, times, locations, schedules, and specific guest details relevant to your booking. 

  • Visual Data: Digital photographs and video footage captured during your event or session. 

  • Financial Data: Bank details, billing addresses, and payment history (processed securely via our third-party payment processors). 

  • Communication Data: Any correspondence via email, contact forms, social media, or messaging apps. 

 

3. How We Collect Your Data 

We collect data through various methods, including: 

  • Direct Interactions: When you fill out a contact form, sign a contract, or correspond with us directly. 

  • During the Session/Event: Through the actual capture of images and footage. 

  • Third Parties: If a guest or planner provides your details in relation to an event. 

 

4. How and Why We Use Your Data (Legal Basis) 

Under the UK GDPR, we must have a lawful basis to process your data. We use your data for the following reasons: 

  • Performance of a Contract: To fulfill our agreement with you, deliver your gallery, communicate about your event, and process payments. 

  • Legitimate Interests: To market our business (using images on our website or social media), maintain our internal business archives, and improve our services. Note: We will always respect your preferences regarding public portfolio sharing. 

  • Legal Obligation: To keep accurate financial records for tax and accounting purposes (HMRC). 

 

5. Image Storage, Portfolios, and Social Media 

Photography inherently involves processing visual data. 

  • Client Galleries: Images are hosted on secure, password-protected online galleries (e.g., Pic-Time) for you to view and download. 

  • Marketing & Portfolio: We love sharing our work. We may use selected images on our website, social media channels, or in printed marketing materials. If you prefer that your images remain completely private, please let us know prior to signing your contract, and we will happily honour that request. 

 

6. Sharing Your Data 

We do not sell your personal data. We only share your data with trusted third parties necessary to run our business, including: 

  • Online Gallery Hosts & Cloud Storage: To deliver and back up your images safely. 

  • Studio Management Software: To manage contracts, questionnaires, and invoicing. 

  • Professional Printers/Labs: If you order physical prints or albums. 

  • Second Shooters/Assistants: Only the essential details required for them to assist on the day of the shoot. 

  • HMRC & Accountants: For standard legal and financial compliance. 

 

7. Data Retention 

  • Contact Information & Contracts: Retained for up to 7 years to comply with UK tax law and handling potential legal claims. 

  • Image Files: RAW and edited image files are archived securely for 2 years to allow for replacement requests, though we cannot guarantee permanent storage. 

 

8. Your Legal Rights 

You have specific rights under data protection laws regarding your personal data: 

  • Access: The right to request a copy of the personal data we hold about you. 

  • Correction: The right to ask us to correct inaccurate information. 

  • Erasure ("Right to be Forgotten"): The right to ask us to delete your data, subject to certain legal exceptions (such as tax record requirements). 

  • Object to Processing: The right to object to our use of your images for marketing purposes. 

To exercise any of these rights, please contact us at tin.squid.photography@outlook.com 

 

9. Changes to This Policy 

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The "Last updated" date at the top will reflect the most recent revision. 

How Can I Help?