Lyn Hopegood Photography
Last updated: September 2026
Last updated: September 2026
Introduction
Lyn Hopegood Photography respects your privacy and is committed to protecting your personal information.
This Privacy Notice explains how I collect, use, store and protect your personal information when you visit my website, contact me about photography services, or work with me on a photography project.
I process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable UK data protection legislation.
Data Controller
Lyn Hopegood Photography is the data controller responsible for your personal information.
If you have any questions about how I collect or use your personal information, please contact me at:
Information I Collect
When you contact me through my website, email, telephone or social media, I may collect personal information including:
Your name
Your email address
Your telephone number, if provided
Your business name, where applicable
Any information you provide about your photography requirements, project or collaboration
If you become a client, I may also collect information needed to manage your booking, including contracts, invoices, payment records and project details.
Photographs created as part of a photography project may also contain identifiable individuals.
I only collect personal information that is necessary for the purposes described in this Privacy Notice.
How I Use Your Information
Your personal information may be used to:
Respond to enquiries and discuss photography projects
Prepare quotations and proposals
Manage bookings and photography sessions
Communicate with you before and after your shoot
Deliver photographs and related services
Issue invoices and maintain financial records
Manage and administer my photography business
Improve my services and website
Where photographs are used for my portfolio, website, social media or promotional purposes, this will be subject to the relevant client, model or other agreement or consent where required.
Your personal information will not be sold, rented or shared with third parties for their own marketing purposes.
Under the UK GDPR, I process your personal information using one or more of the following lawful bases:
Legitimate Interests – to respond to enquiries, communicate with potential and existing clients, administer my photography business and improve my services, where this is reasonably expected and does not override your rights and interests.
Contract – where processing is necessary to provide photography services you have requested or to take steps at your request before entering into a contract.
Legal Obligation – where processing is necessary to comply with legal, tax, accounting or other regulatory requirements.
Consent – where consent is required for a particular use of your personal information.
I may share personal information with trusted third-party service providers where this is necessary to operate my business and provide my services.
These may include providers of:
Website hosting and website services
Email and communication services
Online forms, booking or contract services
Payment and accounting services
Cloud storage and file delivery services
Professional or legal services where necessary
I only share information where there is a legitimate reason to do so and, where appropriate, require service providers to handle personal information securely and in accordance with applicable data protection law.
I may also disclose personal information where required to do so by law or to comply with legal or regulatory obligations.
How Long I Keep Your Personal Information
I keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including managing enquiries, providing photography services, maintaining business and financial records, and dealing with legal or contractual requirements.
Financial and business records will be retained for the periods required by applicable UK law.
When personal information is no longer required, it will be securely deleted or disposed of where reasonably practicable.
I take reasonable steps to protect your personal information from loss, misuse, unauthorised access, alteration or disclosure.
I use appropriate technical and organisational measures to protect information held electronically and take reasonable care when handling physical records.
Your Rights
Depending on the circumstances, you have rights under UK data protection law including the right to:
Request access to the personal information I hold about you
Ask for inaccurate or incomplete information to be corrected
Request deletion of your personal information where there is no lawful reason for me to continue processing it
Request restriction of processing in certain circumstances
Object to certain processing, including direct marketing
Withdraw your consent where I am relying on consent to process your personal information
To exercise any of these rights, please contact me using the contact details provided above.
Information about cookies and similar technologies used on this website is explained separately in my Cookies Policy.
If you have concerns about how I have handled your personal information, please contact me first so that I can try to resolve the matter.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection supervisory authority.
Further information about making a complaint is available from the ICO.
I may update this Privacy Notice from time to time to reflect changes to my business, the services I use or applicable data protection requirements.
The latest version will always be made available on this website.
Last updated: September 2026