RM Fotografia Privacy Policy

Last updated: 29 July 2026

Business owner: RM Fotografia (Rahela M) Location: Marcham, Oxfordshire Wales Website: www.rmfotografia.co.uk

1. Who We Are

RM Fotografia provides photography services including family shoots, events, portraits and commercial work. We are the “data controller” for the personal data we collect.

You can contact us about this policy or any privacy questions

2. The Personal Data We Collect

We collect personal data when you contact us, book a session, appear in photographs, or use our website. This may include:

Contact details: name, email, phone number
Booking information: session type, location, dates, preferences
Photographs & video: images in which you or your child can be identified (these are personal data under UK GDPR)
Consent forms / model releases: signed permission for image use (commercial/editorial)
Payment information: processed securely via third‑party providers (we do not store card details)
Website data: IP address, analytics, cookies, enquiry form submissions
Social media interactions: messages, comments, tagged content

3. How We Use Your Data

We use your personal data to:

Respond to enquiries and manage bookings
Deliver photography services
Edit, store and deliver your images
Manage contracts, invoices and payments
Communicate about your session, galleries or products
Publish images only where consent has been given (e.g., portfolio, social media, marketing)
Maintain business records and comply with legal obligations

4. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

Contract: to provide photography services you have booked
Consent: for using identifiable images in marketing or promotional materials (consent must be explicit, specific and can be withdrawn at any time)
Legitimate interests: for general business administration, website analytics, and non‑identifiable atmosphere/event shots where appropriate (following ICO guidance)
Legal obligation: for accounting, tax and regulatory requirements

5. Image Use & Consent

Images where a person is identifiable are personal data. We will never use your images for marketing without your explicit consent.

For children under 13, consent must come from a parent or guardian. You may withdraw consent at any time by emailing info@rmfotografia.co.uk.

6. Sharing Your Data

We may share data with:

Professional editing software providers
Online gallery platforms
Payment processors
Printing labs
Website hosting and analytics providers
Legal or regulatory authorities if required

We do not sell your data.

7. International Transfers

Some service providers (e.g., gallery platforms, cloud storage) may store data outside the UK. We ensure appropriate safeguards such as Standard Contractual Clauses or equivalent protections.

8. Data Retention

Contact and booking records: up to 7 years (accounting/legal requirements)
Consent forms: as long as the related images are used
Photographs: retained indefinitely unless you request deletion (unless contractual obligations require retention)
Website analytics: typically 12–26 months, depending on provider settings

9. Your Rights

Under UK GDPR, you have the right to:

Access your data
Correct inaccurate data
Request deletion
Withdraw consent
Restrict processing
Object to certain uses
Request data portability

To exercise any rights, email info@rmfotografia.co.uk.

10. Cookies & Website Tracking

Our website may use cookies for:

Basic site functionality
Analytics (e.g., visitor numbers, pages viewed)
Security and performance

You can manage cookies through your browser settings. Note: A separate Cookie Policy may be required depending on your analytics tools (ICO guidance) .

11. How We Keep Your Data Secure

We use:

Encrypted storage
Password‑protected systems
Secure cloud platforms
Access controls
Regular backups
Secure delivery methods for galleries and downloads

12. Changes to This Policy

We may update this policy when our services or legal requirements change. The latest version will always be available on our website.