top of page

PRIVACY POLICY

Last updated: January 2026

​

Kimberley Langstone Photography ("I", "me", "my") is committed to protecting and respecting your privacy. This Privacy Policy explains how personal data is collected, used, stored, and protected when you visit www.kimberleylangstone.com, make an enquiry, book a session, or otherwise engage with my photography services.

​

This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

 

1. WHO I AM (DATA CONTROLLER)

​

Business name: Kimberley Langstone Photography
Website: www.kimberleylangstone.com
Location: United Kingdom
Email: hello@kimberleylangstone.com

​

I am the data controller responsible for your personal data.

​

2. PERSONAL DATA I COLLECT

​

I may collect and process the following personal data:

​

a) Information You Provide Directly

  • Your name

  • Email address

  • Phone number

  • Home address (if relevant to bookings or product delivery)

  • Details about your family or children (names, ages, due dates)

  • Session preferences and enquiries

  • Any information you include in contact forms, emails, or messages

​

b) Client & Contract Information

  • Booking details

  • Signed contracts and model release forms

  • Invoice and payment information (processed securely via third-party providers)

​

c) Website Usage Data

  • IP address

  • Browser type and version

  • Pages visited and time spent on the site

  • Referring website links

This data is collected through cookies, analytics tools, and standard server logs.

​

d) Photographic Images

  • Photographs of you and your family taken during sessions

These images are personal data under UK GDPR.

​

3. HOW I USE YOUR PERSONAL DATA

​

I use your personal data to:

​

  • Respond to enquiries and provide information

  • Manage bookings and client relationships

  • Deliver photography services and products

  • Process payments and issue invoices

  • Communicate important information about your session

  • Improve my website and services

  • Comply with legal and accounting obligations

​

Photographs may also be used for marketing purposes only with your explicit consent, typically granted via a model release agreement.

​

4. LAWFUL BASIS FOR PROCESSING

​

Under UK GDPR, I process personal data based on the following lawful grounds:

​

  • Contract: To fulfil photography services you have booked

  • Consent: For marketing communications and use of images for portfolio, website or social media

  • Legal obligation: For tax and accounting records

  • Legitimate interests: To operate and improve my business (while respecting your rights)

​

You may withdraw consent at any time.

​

5. HOW YOUR DATA IS STORED

​

I take appropriate technical and organisational measures to protect your personal data.

​

  • Digital files are stored on password-protected devices and secure cloud storage

  • Physical documents are stored securely

  • Access to personal data is limited to me only

​

I retain personal data only for as long as necessary to fulfil its purpose or comply with legal requirements.

​

Image Retention

​

  • Client galleries are stored securely

  • Images may be archived long-term for client access and business records

  • You may request deletion of your images at any time, unless I am legally required to retain them

​

6. SHARING YOUR DATA

​

I do not sell or rent your personal data.

​

Your data may be shared with trusted third parties only when necessary, such as:

​

  • Pic-Time (online gallery delivery, image storage and client proofing)

  • Secure cloud storage services

  • Accounting software or accountants

  • Website hosting and analytics providers

  • Professional photo book and print laboratories (digital printers) for the fulfilment of albums and printed products you have ordered

​

Only the information required to fulfil the service or product will be shared. All third parties are GDPR-compliant (or UK GDPR–equivalent where applicable) and only process data on my instructions.

​

7. COOKIES

​

This website uses cookies to:

​

  • Ensure the website functions correctly

  • Analyse website traffic and performance

​

You can control or disable cookies through your browser settings. Some website features may not function properly without cookies.

A separate Cookie Policy may be provided if required.

​

8. MARKETING COMMUNICATIONS

​

I will only send marketing emails if you have opted in.

​

You can unsubscribe at any time by:

​

  • Clicking the unsubscribe link in emails, or

  • Contacting me directly

​

9. YOUR DATA PROTECTION RIGHTS

​

Under UK GDPR, you have the right to:

​

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of your data ("right to be forgotten")

  • Restrict processing of your data

  • Object to processing

  • Request data portability

  • Withdraw consent at any time

  • ​

To exercise any of these rights, please contact me using the details above.

​

10. CHILDREN'S PRIVACY

​

My services involve photographing children; however, all communication and contracts are conducted with parents or legal guardians only. I do not knowingly collect personal data directly from children through this website.

​

11. THIRD-PARTY LINKS

​

My website may contain links to third-party websites. I am not responsible for the privacy practices or content of those sites.

​

12. CHANGES TO THIS PRIVACY POLICY

​

I may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

​

13. CONTACT INFORMATION

​

If you have any questions about this Privacy Policy or how your data is handled, please contact:

​

Kimberley Langstone Photography
Email: hello@kimberleylangstone.com

​

If you are not satisfied with how your data is handled, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO): www.ico.org.uk

bottom of page