Last Updated: July 2025

1. Introduction

Welcome to Michael Gibson Creative Photography ("we", "our", "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website [yourwebsite.com] and use our services. By using our website or services, you agree to the terms outlined in this policy. If you do not agree, please do not use our website or services.

2. Who We Are

Michael Gibson Creative Photography is photography business providing bespoke photography solutions to businesses across the North-East of England. We act as a Data Controller for the personal data we collect and process.

Contact Details:

• Business Name: Michael Gibson Creative Photography

• Email: michael.gibson@mgcreativepix.co.uk

• Website: www.mgcreativephotography.co.uk

3. What Personal Data We Collect

We collect different types of personal data depending on how you interact with us:

• Identity Data – Name, title, images

• Contact Data – Email address, phone number, postal address

• Financial Data – Payment details (for services)

• Transaction Data – Records of services purchased

• Technical Data – IP address, browser type, device details

• Marketing Data – Preferences for receiving communications

• Other Data You Provide – Through forms, messages, or enquiries

During a session: During our session, I may collect:

• Images of you, your family, guests, or property

• Preferences or notes related to style or session requirements

• Consent forms (where applicable) for portfolio or marketing use

This information helps me create brand visuals and messaging that reflect you and your business accurately and meaningfully. All data is treated confidentially and stored securely, and is only used for the purpose of delivering your design project.

4. How We Collect Your Data

• Direct interactions - When you contact us, book services, or sign up for content

• During the provision of photography services – photographs taken

• Automated technologies - Cookies, pixels, and analytics tools via our website

• Third parties - Payment processors, email platforms, or social media tools

5. How We Use Your Data

We use your data to:

• Provide and manage services

• Process transactions

• Respond to your enquiries

• Send optional marketing communications (if you opt in)

• Improve our website and services

• Comply with legal obligations

We never sell or rent your data.

6. Legal Basis for Processing Your Data

We rely on the following lawful bases:

• Consent – For marketing emails or sharing testimonials/images

• Contractual necessity – To fulfil a service agreement

• Legal obligation – For tax, accounting, or legal compliance

• Legitimate interest – To operate our business efficiently without overriding your rights

7. Data Security & Retention

We take data protection seriously and use appropriate technical and organisational measures including password protection, secure storage, and encryption. We retain data only as long as necessary for our services and legal obligations. After that, we delete or anonymise it securely.

8. Your Rights Under GDPR

You have the right to:

• Access your personal data

• Rectify inaccurate data

• Erase your data (where appropriate)

• Restrict or object to how your data is used

• Port your data to another provider

• Withdraw consent at any time

To exercise your rights, contact us at michael.gibson@mgcreativepix.co.uk

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

• Website: www.ico.org.uk

• Phone: 0303 123 1113

• Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

9. Sharing Your Data with Third Parties

We may share your data with trusted third parties that help us operate our business:

• Payment processors (e.g. Stripe)

• Marketing/email platforms (e.g. MailerLite)

• Analytics tools (e.g. Google Analytics)

• Cloud storage providers (e.g. Google Drive, Dropbox, WeTransfer)

• Subcontractors or VAs who help manage tasks (bound by confidentiality) All providers are GDPR-compliant and process your data securely.

10. International Data Transfers

Some of our tools or service providers may store or process data outside the UK or European Economic Area (EEA), such as in the USA. Where this occurs, we ensure appropriate safeguards are in place, such as: • Standard Contractual Clauses approved by the European Commission • Providers certified under international frameworks (e.g., the UK Extension to the EU-U.S. Data Privacy Framework) We only work with providers that meet high data protection standards.

11. Cookies & Tracking Technologies

We use cookies to:

• Understand how visitors use our site

• Improve your browsing experience

• Track email campaign performance

You can adjust your cookie preferences through your browser settings.

12. Changes to This Policy

We may update this policy from time to time. Any updates will be posted on this page. If significant changes occur, we may notify you via email.

13. Contact Us

If you have questions about this policy or how we handle your data, contact us at:

• Email: michael.gibson@mgcreativepix.co.uk

• Website: www.mgcreativephotography.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been misused:

• Website: www.ico.org.uk

• Phone: 0303 123 1113

• Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF