GDPR & Data Protection

Overview

Adam Gardner Photography complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how the online customer portal collects personal data and your rights regarding that data.

I am the data controller for the personal information you provide through this website and the customer portal. I am responsible for how your data is collected, used, and protected.

Personal Data Collected by the Online Portal

The online customer portal collects the following personal data to provide and manage your photography services:

• Your full name and contact details (email address, phone number, postal address).
• Your wedding or event details, including date, venue, partner name, and timeline information.
• Booking form responses, including any preferences or special requests you share.
• Digital signatures on wedding agreements and related documents.
• Invoice and payment records (processed securely via third-party providers).
• Portal account login credentials and activity logs.
• Any photos, notes, or documents you upload to your portal account.

Your Data Is Never Shared

The personal data collected through the online portal is NOT shared with anyone.

I do not sell, rent, exchange, or disclose your personal information to any third party for marketing, advertising, or commercial purposes. Your data is used exclusively to deliver the photography services you have booked and to manage your account.

The only limited sharing that may occur is with trusted service providers (such as payment processors) who help operate the business under strict contractual confidentiality — and only the minimum information necessary to perform their function.

Lawful Basis for Processing

I process your personal data under the following lawful bases:

• Contract — processing is necessary to provide the photography services you have requested and to manage our agreement.
• Legal obligation — where I am required to retain records for tax or legal compliance.
• Consent — where you have given clear consent, for example for guest photo uploads or optional communications.
• Legitimate interests — limited technical data used to improve and secure the website.

Data Storage and Security

Your personal data is stored securely within the customer portal, which is protected by authentication and access controls. Wedding galleries are password protected so only you and those you choose to share access with can view them.

Payment information is handled entirely by certified third-party payment providers; full card details are never seen or stored by me.

Your GDPR Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• The right to be informed about how your data is used (this page).
• The right of access to the personal data I hold about you.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure ('the right to be forgotten'), subject to legal exceptions.
• The right to restrict or object to the processing of your data.
• The right to data portability — receiving your data in a structured, machine-readable format.
• The right to withdraw consent at any time, without affecting processing already carried out.
• The right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

How to Exercise Your Rights

To exercise any of your rights, or if you have any questions about how your data is handled, please contact me through the Contact page. I will respond to your request within one month, as required by the UK GDPR.