Last updated: October 2026
Caroline Michael Photography respects your privacy and is committed to protecting your personal information.
This notice explains what information may be collected when you visit this website, contact me or use my photography services, how that information is used, and your rights in relation to it.
Who I am
Caroline Michael Photography is an independent photography business based in the United Kingdom.
For the purposes of UK data protection law, Caroline Michael is the data controller for personal information processed in connection with this website and photography services.
If you have a question about your personal information or this privacy notice, you can contact me through the Contact page on this website.
Information I may collect
The information I collect depends on how you interact with me and may include:
- your name and contact details, such as your email address and telephone number;
- information you provide when making an enquiry or arranging photography services;
- correspondence between us;
- information needed to administer a booking, contract, payment or invoice;
- photographs and associated information created as part of commissioned photography work; and
- limited technical information generated when you visit this website.
I only collect information that is reasonably necessary for the purposes described in this notice.
How I use your information
I may use your personal information to respond to enquiries, discuss or arrange photography assignments, provide photography services, communicate with clients, administer bookings and payments, maintain appropriate business and financial records, and meet my legal or regulatory obligations.
Where appropriate, photographs may also be used to showcase my professional work, including in my portfolio, on this website or in other promotional material. Where this involves identifiable individuals, the circumstances in which the photographs were taken and the appropriate legal basis for their use will be considered.
I will not sell your personal information.
My lawful basis for processing
Under UK data protection law, I must have a lawful basis for processing personal information.
Depending upon the circumstances, I may process your information because:
Contract – it is necessary in order to take steps at your request before entering into a contract, or to provide photography services that you have commissioned.
Legitimate interests – it is reasonably necessary for running and promoting my photography business, responding to enquiries, communicating with clients and protecting my business interests, provided those interests do not override your rights and interests.
Legal obligation – I need to retain or process certain information to meet legal, accounting or tax requirements.
Consent – in circumstances where consent is the appropriate legal basis, I will ask for it. Where processing is based upon consent, you can withdraw that consent at any time.
Photographs and identifiable individuals
Photography can itself involve personal data where an individual can be identified from an image.
Photographs may be created and retained as part of commissioned work and, where appropriate, selected images may form part of my professional portfolio.
The appropriate basis for taking, retaining or publishing an image will depend upon the circumstances in which it was created. In particular, I will take additional care when considering the use of photographs involving children or other circumstances in which greater privacy considerations may apply.
If you have a concern about an identifiable photograph of you displayed by Caroline Michael Photography, please contact me and I will consider the request promptly and in accordance with applicable data protection law.
Sharing your information
I do not sell or trade personal information.
I may use trusted third-party providers where reasonably necessary to operate my website or photography business. These may include website hosting, email, secure storage, professional gallery or image-delivery services, accounting or payment services.
Where a provider processes personal information on my behalf, I take reasonable steps to use appropriate and reputable services and to ensure that personal information is handled securely.
I may also disclose information where required to do so by law.
International transfers
Some technology or service providers may process or store information outside the United Kingdom.
Where personal information is transferred internationally, I will take reasonable steps to ensure that appropriate protections are in place in accordance with UK data protection law.
How long I keep information
I retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including where information needs to be retained for legal, accounting, contractual or legitimate business purposes.
The appropriate retention period will vary depending on the type of information concerned.
Photography files may be retained for longer periods as part of my professional archive where there is an appropriate reason for doing so.
Security
I take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.
No internet-based system can be guaranteed to be completely secure, but I take appropriate steps to protect the information entrusted to me.
Cookies and website technologies
This website may use cookies or similar technologies that are necessary for the website to operate correctly and securely.
Cookies are small pieces of information stored on or accessed from your device when you visit a website.
Where cookies or similar technologies are strictly necessary or otherwise exempt from the requirement for consent under applicable UK law, they may operate without asking you to accept them. Information about their use will still be made available where required.
If this website uses optional technologies that require your consent — for example certain analytics, advertising or tracking technologies — these will not be activated until the appropriate choice has been provided to you.
You can also control or delete cookies through your browser settings, although disabling essential technologies may affect how some websites function.
This notice will be updated if the technologies used by this website change.
Third-party websites
This website may contain links to other websites or online services.
If you follow an external link, the privacy practices of that website will apply. Caroline Michael Photography is not responsible for the privacy practices or content of third-party websites.
Your rights
Under UK data protection law, depending upon the circumstances, you may have rights relating to your personal information, including the right to:
- request access to the personal information I hold about you;
- ask for inaccurate information to be corrected;
- request deletion of your information in certain circumstances;
- request that processing is restricted;
- object to certain processing;
- request transfer of certain information; and
- withdraw consent where processing is based upon consent.
Not all of these rights apply in every situation.
If you would like to exercise one of these rights, please contact me through the Contact page.
You also have the right to raise a concern with the UK Information Commissioner’s Office (ICO). Information about your data protection rights and how to contact the ICO is available from the Information Commissioner’s Office.
Changes to this notice
I may update this Privacy & Cookies notice from time to time, for example if the services I use or the way this website operates changes.
The latest version will always be published on this page.