 
        
        
      
    
    Privacy policy
1. Introduction
Welcome to Casartelli Photography (“we”, “our”, or “us”).
We respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use, and protect your information when you visit our website — www.casartelliphotography.co.uk — or contact us regarding our photography services, including wedding photography.
We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other relevant privacy laws.
2. Who We Are
Business name: Casartelli Photography
 Website: www.casartelliphotography.co.uk
 Email: contact@casartelliphotography.co.uk
 Phone: 07984 931 935
 Data Controller: Casartelli Photography (the party responsible for your data)
3. The Information We Collect
We collect and process the following types of personal data when you contact us or use our website:
a) Information you provide directly
When you fill out our contact form, send us an email, or enquire about our services, we may collect:
- Your full name 
- Email address 
- Phone number 
- Wedding date and venue (if applicable) 
- Any other information you choose to share in your message 
b) Automatically collected data
When you visit our website, we may automatically collect:
- Your IP address 
- Browser type and version 
- Device type and operating system 
- Pages visited and time spent on the site 
- Referral source (how you found our site) 
This information may be collected via cookies and similar technologies (see Section 8 below).
4. How We Use Your Information
We use your personal data for the following purposes:
- To respond to your enquiries and provide quotations for photography services 
- To manage your booking and communicate with you about your wedding or photography session 
- To send relevant updates or follow-up communications (only where you have consented) 
- To improve our website, services, and customer experience 
- To comply with legal and regulatory obligations 
We will never sell, rent, or trade your personal data to third parties.
5. Legal Basis for Processing
We process your data under the following lawful bases:
- Contract: When we need your data to provide photography services or respond to an enquiry. 
- Consent: When you have given us clear permission to contact you for marketing or updates. 
- Legitimate interests: When processing is necessary for our business purposes (e.g. improving our website or services), provided your rights are not overridden. 
- Legal obligation: When we must retain or share data to comply with UK law (e.g. tax records). 
6. Data Retention
We only keep your personal data for as long as necessary:
- Enquiry data: Up to 12 months if you do not proceed with a booking. 
- Client data: Up to 7 years after your event, for tax, accounting, and record-keeping purposes. 
- Marketing data: Until you withdraw your consent or unsubscribe. 
After this period, your data will be securely deleted or anonymised.
7. Sharing Your Information
We may share your personal data only when necessary with:
- Service providers: e.g. website hosting, email services, or payment processors — all bound by strict confidentiality and data protection terms. 
- Legal authorities: If required by law or to protect our rights. 
We do not transfer personal data outside the UK or the European Economic Area (EEA) unless appropriate safeguards are in place.
8. Cookies and Website Analytics
Our website uses cookies to enhance your experience and analyse site traffic. Cookies are small text files stored on your device.
You can control or disable cookies through your browser settings. For more information, see our Cookie Policy (if applicable).
We may also use analytics tools (such as Google Analytics) to help us understand how visitors use our site. These tools collect non-identifiable information.
9. Your Data Protection Rights
Under the UK GDPR, you have the following rights:
- Access: Request a copy of your personal data we hold. 
- Rectification: Correct inaccurate or incomplete data. 
- Erasure: Request deletion of your data where applicable (“right to be forgotten”). 
- Restriction: Limit how we process your data. 
- Data portability: Request your data in a structured, commonly used format. 
- Objection: Object to processing based on legitimate interests or marketing. 
- Withdraw consent: At any time, if processing is based on consent. 
To exercise any of these rights, please contact us at [Insert contact email].
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
 www.ico.org.uk
10. Data Security
We implement appropriate technical and organisational measures to protect your data from loss, misuse, or unauthorised access.
This includes using secure servers, password protection, encryption, and limiting data access to authorised personnel only.
11. Links to Other Websites
Our website may contain links to other websites. We are not responsible for the privacy practices or content of external sites. Please check their privacy policies before providing personal data.
12. Updates to This Privacy Policy
We may update this Privacy Policy periodically. The most recent version will always be posted on this page with an updated “Effective Date”.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or how your data is handled, please contact us at:
Casartelli Photography
 Email: contact@casartelliphotography.co.uk
 Website: www.casartelliphotography.co.uk
