PRIVACY POLICY

Last updated: 23 October 2026

This notice explains how I use personal information when you enquire, book DPR Photography, visit this website or appear in photographs taken as part of my wedding photography or The Guest Portrait Studio service. It covers the UK GDPR, the Data Protection Act 2018 and applicable UK privacy and electronic communications rules, as amended.

1. Who is responsible for your information?

I am David Peter Rackstraw, trading as DPR Photography, based in the North East of England. I am the data controller: I decide why and how information is used for my business. The Guest Portrait Studio is part of DPR Photography.

Email: info@dprphotography.co.uk
Telephone: 07940 749301
Website: dprphotography.co.uk

2. Information I collect and where it comes from

Enquiries and bookings can include names, email addresses, telephone numbers, wedding dates, venues, locations, plans, correspondence and how you heard about DPR Photography. Booking administration can also involve billing details, contracts, payment records, delivery addresses and preferences.

I create photographs of couples and guests, including children who attend weddings, and keep the image files and associated editing, delivery and permission records needed for the service. Information normally comes directly from you, from photographing the event, or from the couple or a planner organising it. Please share this notice with anyone whose details you provide and avoid sending unnecessary sensitive information.

Website services can collect technical information such as IP address, browser and device information, security logs and information about pages visited, depending on the services and privacy choices in use.

3. Why I use information and my lawful bases

Enquiries, quotations and bookings: I use your contact details and wedding plans to answer questions, check availability, prepare quotations, arrange a booking and provide the agreed service. The lawful basis is taking steps at your request before a contract, or performing our contract. For enquiries from a planner or venue acting for someone else, I rely on legitimate interests in responding to relevant business enquiries and organising the work.

Photographing guests and delivering the wedding story: I rely on legitimate interests in documenting the celebration, producing the commissioned photographs and delivering them to the couple. Guests are not automatically parties to the couple’s contract. I consider their reasonable expectations and privacy, and take particular care with children. For a Guest Portrait Studio session, I explain the intended portrait and gallery arrangements; participation is optional.

Business records: I use necessary invoice and accounting information to meet legal obligations. I rely on legitimate interests to manage correspondence, protect my work, deal with disputes, maintain appropriate backups and keep the website secure.

Publicity: I use consent for agreed public uses of identifiable photographs, as explained below. Where consent is required for optional tracking or electronic marketing, that is the lawful basis for that activity.

You choose whether to enquire. Fields marked as required are needed to respond or provide the service; without the necessary details I may be unable to answer, arrange a booking or deliver your photographs. Optional details are not a condition of making an enquiry.

4. Public photographs and your choices

I obtain written permission for agreed publicity uses, such as my portfolio, social media or promotional material. Publicity permission is separate from arranging and delivering photography. Declining it does not prevent you from enquiring or booking.

A couple’s permission does not automatically give consent on behalf of every identifiable guest. If you are a guest, or a parent or guardian concerned about a child’s photograph, please contact me about public use of that image. Where consent is the basis, you can withdraw it at any time by email or telephone without affecting earlier lawful use. I will stop future consent-based uses and remove material under my control where applicable. I cannot guarantee retrieval of copies already lawfully printed, downloaded or independently shared by others.

5. Client galleries and Google Drive

I use Google Drive to store and deliver client photographs. The agreed gallery or folder is shared with the client and any other intended recipients agreed for the booking. Gallery access allows those recipients to see the photographs it contains, which may include other guests. Please keep access links private and avoid forwarding them beyond the intended audience.

Clients and guests may download or share images after receiving access. If you have a concern about a photograph or a shared link, contact me so I can review access and the appropriate response. Please keep your own backup of delivered files; storage and gallery availability depend on the arrangements for your booking.

6. Service providers and other recipients

Wix provides this website and its enquiry-form services. Google provides Google Drive storage and delivery. Photographs are also processed using photography editing software, including Adobe Lightroom. Information may be handled by the email and IT services used for correspondence and storage, and, where needed for your order, print or album suppliers and delivery services.

I share only the information needed for the relevant task. Necessary information may also be shared with professional advisers, insurers, tax authorities or other bodies where required by law or needed to establish, exercise or defend legal claims. Public uses of images follow the publicity arrangements above. An enquiry is not permission to pass your details to other wedding suppliers for their marketing.

7. Processing outside the UK

Cloud services can involve processing outside the UK, including in the United States and, for Wix, Israel. The relevant provider arrangements may use UK adequacy regulations or approved contractual safeguards for the transfer concerned.

Wix explains its transfer arrangements in its Data Processing Agreement. Google explains its arrangements, including the UK Extension to the EU–US Data Privacy Framework for certified US entities, in its data transfer frameworks information. Please contact me for further information about the safeguards relevant to your information or how to obtain a copy.

8. How long information is kept

I keep information according to the purpose for which it is needed. Enquiry correspondence is retained while dealing with your plans and any relevant follow-up; the need for further retention depends on whether you book, an unresolved question or a dispute remains, and whether there is a lawful reason to keep the record.

Booking, contract and financial records are retained for the service and the applicable tax, accounting and legal-claim periods. Photographs, working files, delivery folders and backups are retained according to the agreed delivery and archive arrangements, outstanding print or album work, reasonable delivery-support needs and any relevant legal claim. These criteria do not mean every image or record is kept indefinitely.

Permission records are kept while needed to demonstrate the scope and status of consent. If you withdraw consent or object to marketing, a limited record of your preference may be retained to help respect it. Information that is no longer needed is deleted or anonymised where appropriate; backup copies may remain until the relevant backup cycle replaces them. Contact me for the retention arrangements that apply to your booking.

9. Cookies and website information

Wix uses cookies and similar technologies to provide and secure website functions. Optional analytics, advertising or other technologies, if enabled, can collect additional information. Where UK law requires consent, these technologies must only be used after you choose to allow them, and you must be able to change that choice.

Please use any cookie preference controls displayed on the website to review or change your choices. You can also block or delete cookies in your browser, although blocking essential cookies can affect website functions. Contact me for information about the technologies in use or help with your privacy choices.

10. Communications and marketing

I use enquiry and booking details to communicate about the service you have asked for. Sending an enquiry does not sign you up to a newsletter. If I ask you to subscribe to promotional emails, I will explain the purpose and obtain consent where required. You can unsubscribe or ask me to stop marketing at any time.

11. Protecting your information

I take appropriate organisational and technical steps to protect the information I handle, including limiting access to people who need it and taking care over file sharing. No online service or transfer is completely risk-free. If you believe information or a gallery link has been disclosed incorrectly, please contact me promptly.

12. Your data protection rights

Depending on the circumstances and lawful basis, you can ask to access your information, correct inaccuracies, erase information, restrict processing or receive a portable copy of information you supplied. These rights have legal conditions; deletion is not automatic where information must still be kept for a valid legal reason.

Your right to object: you can object to processing based on legitimate interests, including photography involving you, for reasons relating to your situation. I will consider the objection and stop unless there are overriding lawful grounds or the information is needed for legal claims. You have an absolute right to object to direct marketing.

Where I rely on consent, you can withdraw it at any time. To exercise a right, email or telephone me using the details above. I may need proportionate information to confirm your identity or locate an image. Requests are normally free and answered within one month; if the law allows extra time or another exception applies, I will explain this.

13. Questions and complaints

You can make a data protection complaint directly to me at info@dprphotography.co.uk or on 07940 749301. I will acknowledge it within 30 days, investigate and keep you informed, and explain the outcome without undue delay.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator. Visit ico.org.uk/concerns or telephone 0303 123 1113. You do not need my permission to raise a concern with the ICO.

14. Changes to this notice

I will update this page if my services or information-handling arrangements change. The date above shows when it was last revised.