GDPR Privacy Policy
PRIVACY POLICY
Early Years Photography
Who we are
Early Years Photography is a professional nursery and preschool photography service based in Milton Keynes, UK. We are registered with the Information Commissioner’s Office (ICO).
ICO Registration Number: ZC158960
For any data protection queries, contact us at
: 📧 info@earlyyearsphotography.comÂ
📞 0203 693 3949
What personal data we collect and why
We collect and process the following personal data solely to provide our photography service:
- Children’s photographs — taken during nursery photo days to fulfil parent orders
- Parent contact details — name, email address, telephone number and delivery address, collected via our online ordering platform to process and deliver orders
- Order and payment information — processed securely via Stripe
We do not collect any data beyond what is necessary to provide our service.
Lawful basis for processing
We process personal data on the basis of contract — to fulfil the photography service and orders requested by parents. For children’s photographs, we rely on consent obtained by your nursery setting prior to photo day.
Children’s data
We take the privacy of children seriously. Photographs of children are personal data and are handled with the highest level of care. Each parent or guardian receives a unique access code giving them access only to their own child’s images. No child’s photos are accessible to other parents.
Who else handles your data
We use the following trusted third parties to deliver our service:
- Got Photo — our secure online gallery and ordering platform. They store and process photo galleries and order data on our behalf
- Stripe — secure payment processing
- Our print supplier — receives order details solely to fulfil print orders
All third parties are bound by data processing agreements and are required to handle your data securely and in line with UK GDPR.
How long we keep your data
Children’s photo galleries are retained for 12 months from the date of your child’s photo day. After this period all images are permanently deleted. You will receive an email reminder before your gallery expires.
Order and contact information is retained for up to 2 years for accounting and legal purposes, then securely deleted.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict how we process your data
- Withdraw consent at any time
To exercise any of these rights, contact us at info@earlyyearsphotography.com. We will respond within 30 days.
Complaints
If you are unhappy with how we have handled your data, you have the right to complain to the ICO at ico.org.uk/concerns
Changes to this policy
We may update this policy from time to time. The current version will always be available on our website.