Privacy Policy

Effective date: September 2025
Controller: Chris Humphreys Photography Ltd
Address: 2 Fairlie Grove, Rosewell, Midlothian, EH24 9BZ
Contact: chris@chrishumphreys.net | +44 (0)7905 449073
Website: www.chrishumphreys.net

​

1. Who We Are

Chris Humphreys Photography Ltd (“we”, “us”, “our”) provides professional architectural, interior, and commercial photography, videography, and virtual tour services.
We are the Data Controller for personal data we collect and use in connection with our services.

​

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

• Client details: name, job title, business name, email, phone number, address, billing details.

• Project information: shoot addresses, access details, on-site contacts.

• Images and recordings: photographs and video footage may include identifiable individuals.

• Financial data: invoices, payment records, and related correspondence.

• Communications: emails, forms, messages, and other interactions.

We generally do not collect special category data (e.g. health, ethnicity) or children’s data.

​

3. How We Use Personal Data

We process personal data to:

• Provide and manage photography, video, and virtual tour services.

• Administer bookings, contracts, invoicing, and payments.

• Communicate with clients and respond to enquiries.

• Deliver and maintain our website and online galleries.

• Promote our services (only with consent or where legitimate interest applies).

• Comply with legal, tax, and accounting requirements.

We do not sell or trade personal data.

​

4. Lawful Bases for Processing

Under the UK GDPR, we rely on the following lawful bases:

• Contract: to perform a contract or take steps before entering one.

• Legitimate interests: to operate, promote, and protect our business.

• Consent: where you have actively agreed (e.g., marketing).

• Legal obligation: to meet tax, accounting, or regulatory requirements.

Where consent is relied upon, you may withdraw it at any time.

​

5. Sharing of Personal Data

We may share limited data with:

• Trusted third parties (IT, hosting, editing, payment, and delivery providers).

• Professional advisers (accountants, insurers, solicitors).

• Legal or regulatory authorities, where required by law.

All third parties are required to keep data secure and use it only for agreed purposes.

​

6. International Data Transfers

We primarily store and process data in the UK.
If we use suppliers outside the UK, we ensure appropriate safeguards such as UK adequacy regulations or standard contractual clauses.

​

7. Retention of Personal Data

We retain data only as long as necessary for its purpose:

• Client and project records: up to 7 years (for accounting/tax).

• Images and video: typically 90 days after delivery, unless archiving or extended usage is agreed.

• Marketing data: until you withdraw consent.

• Legal or contractual data: as required by law.

• ​

8. Data Security

We use reasonable technical and organisational measures to protect data, including secure servers, password protection, and encryption where practical.
While we take all appropriate steps, no method of transmission over the internet is 100% secure.

​

9. Your Rights

You have the following rights under the UK GDPR:

• Access to your personal data.

• Correction of inaccurate or incomplete data.

• Deletion of data (“right to be forgotten”) where applicable.

• Restriction or objection to processing.

• Data portability (for information you provided).

• Withdraw consent at any time.

To exercise your rights, contact: chris@chrishumphreys.net

​

10. Images and Video of Individuals

Our photography and video work may capture people incidentally or intentionally.
We rely on legitimate interest when capturing images in public or business spaces, and consent when filming or photographing identifiable individuals for promotional use.
Clients are responsible for obtaining necessary permissions or notices for shoots under their control.

​

11. Cookies and Analytics

Our website may use minimal cookies or third-party analytics (e.g., Google Analytics) to understand site performance.
You can control cookies through your browser settings.

​

12. Complaints

If you are concerned about how we handle personal data, please contact us first.
You also have the right to complain to the Information Commissioner’s Office (ICO):
www.ico.org.uk | Tel: 0303 123 1113

​

13. Updates to This Policy

We may update this notice occasionally to reflect changes in law or practice.
The most recent version will always be published on our website.