Introduction

LaHu Wedding Photography takes your privacy very seriously. This privacy policy has been prepared in line with the EU’s General Data Protection Regulation (GDPR), which promotes fairness and transparency for all individuals in respect of their personal data. This privacy policy applies to all data we process and by using LaHu Wedding Photography you consent to our collection and use of such data. If you would like to get in touch about anything in this policy or about your personal data then please contact Lauren Hughes info@lahustudios.com or by phone 07525760920.

1. Compliance Declaration

Both LaHu Studios and this website, www.lahuweddingphotography.com, comply with the DPA, GDPR and PECR. The GDPR comes into effect on the 25th of May 2018. This Notice is updated whenever changes are made to relevant data protection legislation.

2. The Data we Collect

As a data controller we collect a variety of data in order to deliver our services and we will manage your personal data transparently, fairly and securely. We may ask you to provide us the following data – First and last names, contact numbers, email and postal addresses as well as other information pertaining specifically to your wedding. Being a photographic business we also create and manage images as per our contractual agreement(s). We use the above data to deliver our service to you. We collect this data on the following lawful basis to arrange or fulfil a Contract. When you visit our website we may also collect Cookies. These are small pieces of data that websites send to a user’s computer and are stored on the user’s web browser. They are designed to enable the website to remember information, such as what a user might have put in a shopping cart for example. This helps us monitor website traffic.

3. Your Rights Under the GDPR

Under the GDPR, you have a number of different rights relating to your personal data and how it is processed. They are as follows: Right to be informed about the collection and use of your personal data. Right to access your personal data, and any supplementary information which constitutes personal data. Right to have your personal data rectified; this means you can ask me to correct your personal data if it changes, turns out to be inaccurate, or is incomplete. Right to have your personal data deleted; this means that you have the right to request the deletion or removal of your personal data. There are some circumstances when you do not have this right. Right to restrict me processing your personal data. Right to data portability. Right to object to me processing your personal data. Rights related to automated decision making including profiling. Most of these Rights will apply to your personal data and how it is processed by LaHu Studios, but some (such as the right to data portability and rights related to automated decision making including profiling) are not relevant to this business at the time of writing. If you want to know more about your rights, please click here. For other information relating to data protection legislation, please visit the ICO website directly.

4. Which Third Parties do we Share Personal Data with?

Other than those third parties mentioned in this Notice and listed below, LaHu Studios shall not pass your personal data to any third party. Your personal data may, subject to my obligations to comply with data protection legislation, be shared with the following third parties: Pixieset Media Inc., as further described above; 17Hats.com, CRM software for contract and invoice management; ‘Second photographers’ or ‘Associate photographers’ who join me on wedding shoots and need information to be able to do their job; Having taken precautions to maintain the security of such personal data, I may in certain circumstances share personal data with the ICO, and other legal, regulatory and law enforcement bodies; In anonymised form, I may share personal data with: Any third party, in relation to the sale of some or all of my business, or its assets, or as part of any business restructuring or reorganisation. I will take steps with the aim of ensuring that your rights continue to be protected if your personal data is transferred in accordance with this clause; and Data aggregators and platform providers as part of an analysis of user metrics or sales performance (including but not limited to Google and Facebook). In certain circumstances I may also share your personal data with third party media businesses for the purposes of marketing my offerings, improving my services, and running a profitable business. These third party businesses may include, wedding magazines/publications, wedding websites, social media sites, or other outlets, with the aim of raising public awareness of my business. Your information will never be sold to profit motivated organisations for their or my financial gain.

5. Why do we Share your Personal Data with the Above?

We share your data in order to deliver our service to you / for marketing purposes. We may transfer personal data to a country outside of the European Economic Area (EEA) if necessary e.g. if a third party we utilise could have servers located outside of the EEA. If this is the case, we will either obtain your consent or otherwise ensure that the transfer is legal and your data is secure by following the EU’s guidelines.

6. How do we Keep your Personal Data Secure?

We keep your data secure and only accessible by trained members of our team. In the unlikely event of a criminal breach of our security we will inform the relevant regulatory body within 72 hours and, if your personal data were involved in the breach, we will also inform you.

7. Changes to our Privacy Policy and Control

We may change this privacy policy from time to time. When we do, we will let you know by changing the date on this policy, notifying customers of only significant changes. By continuing to access or use our services after those changes become effective, you agree to be bound by the revised privacy policy. We also give you the option to manage your data via email or post. While we do not hold personal data any longer than we need to. The duration will depend on your relationship with us, and whether it is ongoing. We may keep some of your personal data for upto 7 years and images for one year from the wedding date.

8. Your Consent

By using this site and/or engaging me on my Terms and Conditions, you agree to be bound by this Notice.

9. Your Right to Withdraw Consent

You have the right to withdraw your consent to be bound by this Notice at any time. If you wish to do so, please use the contact form at the bottom of this page. You also have the right, as set out above, to withdraw your consent to my processing your personal data.

10. Your Right to Lodge a Complaint

As well as the right to withdraw consent and exercise any of the above rights mentioned under ‘Your rights under the GDPR’, you also have the right to raise a complaint with a regulatory body. In the United Kingdom, this is the Information Commissioner’s Office (ICO). If you have concerns about the way your data is being processed by an organisation, you can find out more here.