GDPR and Privacy Policy
This Privacy Policy outlines how Mirror Image complies with the GDPR (General Data Protection Regulation). This Policy explains how Mirror Image Photography; collects, processes, manages and stores your personal details and what your rights are under GDPR and how they are adhered to.
Website use – http://www.mirrorimagephotography.co.uk/
Mirror Image is committed to safeguarding the privacy of its website users and its customers.
The Site uses a Squarespace hosting platform. Your data may be stored through Squarespace’s data storage, databases and their general applications. They store your data on secure servers behind a firewall. The site utilises systems that are designed to prevent unauthorised access to any personal data you may submit on the Site. The Site maintains data accuracy and guarantees the correct use of the information under this statement. The systems used at The Site comply with the latest security standards and include necessary electronic, physical, and managerial procedures, which help to protect the information collected online and to ensure and guarantee its correct and safe use. Nevertheless, due to the fact that no data can be 100% free on the Internet, we cannot guarantee that any information submitted to us will be totally secure and safe. Users provide the information at their own risk. The Site constantly assesses and evaluates the abilities of new technologies in providing the additional protection of the information where possible.
The use of http://www.mirrorimagephotography.co.uk/ does not require any personal information when you visit our site. Should you wish to provide your personal details on the course of a product related enquiry or in transacting to receive additional information – any information you provide to us will be protected from unauthorised access and you will be informed of exactly how your information is to be used. The details below state the exact way in which information practices are handled by us below;
Your Personal Information
By Personal Information we are referring to a visitor’s personal name, e-mail address and any other information they deem fit to provide. Personal Information can be gathered via an online contact form, by the posting of a comment in relation to content on the site, or by interacting with one of Heather Photography’s Social Media platforms (Facebook and Instagram) We may also request Personal Information when hosting a competition whereby applicants must apply to participate.
Under no circumstances will any Personal Information be used for anything other than the reason it has been submitted for. We reserve the right to use any Personal Information for promotion administration purposes, including but not limited to verification and notification of winners as applicable.
All correspondence to Mirror Image via email, social media, website, contact form, What’s app, messenger are password protected and Mirror Image is solely responsible for the handling and managing of all personal data.
Any Personal Information obtained regarding an enquiry will be stored within the medium in which it was received and, unless a booking is complete, all Personal Information will be deleted prior to the date of the event or six months after final contact is made. Where a booking is made, relevant Personal Information provided by the client will be stored for a period of up to ten (10) years after the date of the event.
All electronic devices where your Personal Information is stored, for example, mobile phone, tablet and desktop, all contain passwords. Images are stored on external hard drives which are password protected. Any paper documents where your Personal Information can be accessed are stored in a secure, private location only accessible by Mirror Image.
We may at times use an assistant or a second shooter, under these circumstances they will have access to your name and telephone number for the duration of the event. All paperwork with this Personal Information on will be destroyed after the event has been carried out.
Personal information shall not be shared with Third Party operators or websites, unless considered necessary when completing your transaction. For example, Mirror Image uses We Transfer as a means to distribute final photographs to clients; we will use your name and images to complete this order. This Site holds no responsibility for privacy policies on other sites, but endeavours to only work with GDPR compliant companies.
Mirror Image may need to disclose Personal Information, when necessary, in the instance of insurance claim, or legal reason that may occur. Wherever possible we will inform those affected prior to the release of Personal Information.
Communication with you.
Mirror Image will contact you regarding your enquiry, booking, to collect fees or monies owed, or as otherwise necessary. For these purposes we may contact you via email, telephone, text message, messenger and / or postal mail.
Images
GDPR legislation states that a photograph may contain some form of personal data where they can be processed to allow “the unique identification or authentication of a natural person”. Mirror Image will never photograph an individual as a means of unique identification or authentication unless contracted to do so. Guests at events, where we have been contracted to capture images, appear in photos taken by Mirror Image as a part of the event. Guests captured in portraits or in group photos do so as part of the event and their rights are protected by Mirror Image as detailed in this Privacy Policy.
We may display any photographs on our website, blog, social media, on photography related websites, in exhibitions, in advertising, brochures, magazine articles and other such material, providing that the images used are used lawfully and without damage to Mirror Image clients. The rights of the people captured in these photographs are protected by Mirror Image as detailed in this Privacy Policy.
Mirror Image retains the full copyright of any photographs produced. Images captured at events will be retained for a maximum of one year years after the date of the event.
Your Right to Access information or Withdraw your Data.
Anyone photographed by Mirror Image, whether a client or guest, and whether past or current may withdraw consent for a photograph in which they appear to be displayed. The process for this is to email specifying the photo in question. After the request has been made, we will take the necessary step to remove the image online.
You have the right to contact Mirror Image at anytime and ask to view the Personal Information that the business has stored on you. You have the right to ask to have such information deleted or removed. If you would like access to your stored data please contact us at info@mirrorimagephotography.co.uk
Right to amend our Privacy Statement
Heather Photography reserves the right to amend this Privacy Policy at any time. Changes shall be effective right upon posting up on the Site. Last updated April 2020.