Privacy Policy

INTRODUCTION

Carla Tier Photography (CTP) takes your privacy seriously. This policy explains how we collect, use, and protect your personal data, in line with UK GDPR. By using our website or services, you consent to the practices described below.


DATA CONTROLLER

The data controller for this policy is Carla Tier trading as Carla Tier Photography. CTP is registered with the Information Commissioner’s Office (ICO).

Contact:

carlatierphotography@gmail.com

Larkfield, The Parks, Minehead, Somerset, TA24 8BT


1. INFORMATION WE COLLECT


  • Website Information (Device Data): IP address, browser type, time zone, cookies, and browsing activity.
  • Enquiry/Order Information: Name, email, phone, billing/shipping address, payment details.
  • Photography Data: Photographs of individuals, including children, date of birth or year group for school sessions, and consent forms.


2. HOW WE USE YOUR INFORMATION


Website Use:

  • Improve and optimise the website.
  • Detect fraud and security risks.
  • Process enquiries and orders.


Photography Services:

  • Deliver photography sessions, personalise experience, provide online gallery access.
  • Process orders and arrange delivery of prints/digital files.
  • With your consent, use images for marketing (social media, website, printed materials).


School Photography:

  • Provide images to parents for purchase and to schools for internal purposes (records, registers, ID cards).
  • Images are never used for marketing or external promotions without additional consent.
  • Galleries are password-protected, with unique access codes for families; previews may be watermarked until purchased.


3. SHARING YOUR PERSONAL DATA

  • With third parties to deliver services: print labs, gallery providers (e.g., Pics4Schools), delivery services.
  • With schools for internal use of pupil images.
  • Where legally required (subpoena, lawful request, to protect life, or comply with regulations).
  • Payment providers process credit/debit card data; CTP does not store these directly.


4. SECURITY OF YOUR DATA

  • Password-protected devices and accounts.
  • Encrypted storage for digital files.
  • Locked cabinets for any paper records.
  • In the unlikely event of a breach, the relevant authorities and affected individuals will be notified within 72 hours.


5. RETENTION OF DATA

  • Photography data and order information: 7 years for legal/tax purposes.
  • Parents may request deletion of images and data at any time, except for legal/tax retention obligations.
  • Archived photographs may be stored indefinitely to allow replacement prints; parents can request deletion even after archiving.
  • Website device information is retained as needed for analytics and security.


6. YOUR RIGHTS

  • Right to access, correct, or erase your personal data.
  • Right to object to or restrict processing.
  • Right to data portability.
  • Rights related to automated decision-making and profiling.
  • To exercise your rights, contact: carlatierphotography@gmail.com


7. CHANGES TO THIS POLICY

We may update this policy occasionally.

Significant changes will be communicated, and continued use of our services after changes indicates acceptance.