Privacy policy

The Keepsake Photography is a sole trader business run by Phibia Rizk, trading from Grange Farm, Grange Farm Close, Bedfordshire, MK45 4RS, United Kingdom.

For data protection purposes we are the "controller" of the information described below, which means we decide how and why it is used. You can reach us at thekeepsakephoto.co@gmail.com.

The only information this website collects is what you type into the contact form:

• ·your name
• ·your email address
• ·what kind of session you are interested in, if you pick one
• ·a preferred date, if you give one
• ·your message

That is the whole list. The site has no account sign-up, no newsletter, and no analytics or tracking of any kind.

To stop the contact form being abused by automated spam, we count how many submissions come from an internet address over a fifteen-minute period. That address is held in memory only, is never written to our database, and is discarded when the period ends.

We use what you send us to reply to your enquiry and, if you go ahead, to arrange your session. Nothing more. We do not sell it, and we do not use it for marketing unless you separately ask us to.

Our lawful basis is legitimate interests: you contacted a photography business to ask about photography, and replying to you is the obvious and expected use of what you sent. You can object to this at any time using the contact details above.

Running a website means a small number of suppliers process information on our behalf. Each is bound to use it only as we instruct:

• ·Resend: delivers the notification email when you submit the form
• ·Neon: hosts the database your enquiry is stored in
• ·Render: hosts the website itself
• ·Cloudflare: stores and delivers the photographs you see

Some of these suppliers operate outside the United Kingdom. Where information is transferred abroad, it is protected by the safeguards UK data protection law requires.

A photograph in which someone can be recognised is their personal information too.

We only publish photographs of clients and their guests on this website and on our social media where we have their agreement to do so, which is covered in our booking contract. If you appear in a photograph here and would like it removed, email us and we will take it down. You do not need to give a reason.

Enquiries that do not lead to a booking are deleted within twelve months.

If you book a session, we keep the enquiry and your booking details for six years after the work is finished, because HMRC requires business records to be retained for that long.

This website sets no tracking cookies and uses no analytics, so there is no cookie banner to dismiss.

Your browser may remember whether you chose the light or dark version of the site. That preference is stored on your own device, is never sent to us, and identifies nobody.

Our hosting provider may set a cookie strictly necessary for security, for example to check that a visitor is not an automated attack. These are exempt from consent requirements.

Under UK data protection law you can ask us to:

• ·give you a copy of the information we hold about you
• ·correct it if it is wrong
• ·delete it
• ·stop or limit how we use it
• ·provide it in a portable format

You can also object to us using it. Email us and we will respond within one month. There is no charge.

If you are unhappy with how we have handled your information, please tell us first so we can put it right.

You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.

If we change how we handle personal information we will update this page and change the date at the top of it.