Definitions and Scope

• “You” or “User” refers to anyone visiting this website.
• “Data” includes all personal information you provide or that is collected automatically.
• “Website” means https://kirstybowen.com and any sub-domains, unless excluded by their own terms.
• I am the data controller under applicable data protection laws, including the UK Data Protection Act and GDPR.
• Third parties may access the website only to provide services, under strict security and legal obligations.

Information I Collect
Data you provide:

• Identity: Name, title, gender.
• Contact: Email, phone, billing/delivery address.
• Financial/Transaction: Payment card or bank details (if purchasing).
• Profile: Account username/password, preferences, survey responses, feedback.

Data collected automatically:

• Technical: IP address, browser type, device type, operating system, location, platform.
• Usage: Pages visited, time spent, interactions with content.
• Cookies and tracking: Used only to improve functionality and experience; no advertising tracking without consent.

Sensitive Data: I do not collect data such as race, ethnicity, religious beliefs, sexual orientation, health, genetic or biometric data.

How I Use Your Data I may use your data to:

• Respond to inquiries and requests.
• Send newsletters or marketing communications (only with consent).
• Improve website functionality, content, and user experience.

• Analyse website traffic.
• Comply with legal or regulatory obligations.
• For legitimate business interests, provided your rights do not override these interests.

How I Share Your Data I may share your data with:

• Service providers for website operation (hosting, email, IT services).
• Professional advisors (lawyers, accountants, insurers).
• Regulatory authorities if required by law.

All third parties must protect your data and only use it for specified purposes. Current third-party tools:

• Client Management System (Dubsado)
• Client Photo Galleries (PicTime)
• Schools’ Photo Galleries (GotPhoto)
  
  

Storage and Security

• Stored on secure, password-protected systems.
• Access limited to authorised personnel.
• Retained only as long as necessary for the purpose or legal requirements.
• After retention, data is securely deleted or anonymised.
• Measures are in place to detect and address any data breach.

Your Rights You have the right to:

• Access, correct, update, or request deletion of your data.
• Restrict or object to processing, including for legitimate interests.
• Withdraw consent where processing is based on consent.
• Data portability.
• Opt-out of marketing communications anytime via email: hello@kirstybowen.com.

For complaints, you may contact the UK Information Commissioner’s Office (ICO): https://ico.org.uk/.

International Transfers

• Your data may be processed outside the EEA.
• I ensure adequate safeguards, such as EU-approved contracts, codes of conduct, or explicit consent if necessary.
• You may withdraw consent for such transfers at any time by contacting hello@kirstybowen.com.

Links to Other Websites
This website may contain links to external websites. I am not responsible for their privacy practices. You are advised to read their privacy policies.

Changes to This Policy
I may update this policy from time to time. Updates are posted on this website. Your continued use of the website constitutes acceptance of any changes.

Contact Kirsty Bowen Photography Email: hello@kirstybowen.com 

This policy is reviewed annually.

Policy last reviewed: January 2025
Signed: Kirsty Bowen