GDPR

 

At Cotton Socks Photography Ltd, we are committed to protecting and respecting your privacy. This GDPR policy outlines how we collect, store, and use personal data in accordance with the General Data Protection Regulation (GDPR). This policy applies to all personal data collected from schools, nurseries, parents, guardians, and other individuals involved in our photography services.

1. Data Controller

Cotton Socks Photography Ltd is the data controller for the purposes of the GDPR. Our registered office is located at:

Unit 1, The Old Coop Buildings, Burnopfield, Tyne and Wear, NE16 6LX
Company Registration Number: 14358965

Email: info@cottonsocksphotography.co.uk
Phone: 07359591145

2. Data Collection and Purpose

We collect personal data in the course of providing photography services to schools and nurseries, including but not limited to:

  • Personal information of children, parents, guardians, and staff (e.g., names, contact details, and student or child group or year).
  • Photographs and images of students, children, and staff.

The purposes for which we collect and process personal data include:

  • Taking photographs for school and nursery portraits.
  • Processing and delivering orders for photographs.
  • Communicating with parents, guardians, and schools regarding photography sessions, orders, and other relevant information.
  • Meeting legal or contractual obligations.

3. Legal Basis for Processing Data

Under the GDPR, we are required to have a legal basis for processing personal data. We rely on the following legal bases:

  • Consent: Nurseries, schools and educational settings are required to obtain consent from parents/guardians regarding photographic consent for children.
  • Contractual necessity: For processing orders for photography products and services.
  • Legal obligations: Where required by law (e.g., responding to legal requests).

4. Data Retention

We will retain personal data only for as long as is necessary for the purposes outlined in this policy. Typically, personal data, including photographs, will be retained for a period of 6 months after photography session. Once this retention period has passed, personal data will be securely deleted or anonymized.

5. Data Sharing

We do not share your personal data with third parties, except as necessary to provide the services and meet legal requirements. Third parties with whom we may share data include:

  • Print and production partners for the printing and delivery of photographs.
  • IT service providers for cloud storage or system hosting. 
  • Online sales platform for the viewing and selecting of photographs to parents/guardians.

All third parties are required to comply with data protection laws and ensure the confidentiality and security of your personal data.

6. Data Security

We take the security of your personal data seriously. We use appropriate technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure storage, and limited access controls to personal data.

7. Rights of Data Subjects

Under the GDPR, individuals have the following rights in relation to their personal data:

  • Right to access: You have the right to request a copy of the personal data we hold about you or your child.
  • Right to rectification: You have the right to request correction of inaccurate or incomplete personal data.
  • Right to erasure: You have the right to request the deletion of personal data in certain circumstances (e.g., if it is no longer necessary for the purposes for which it was collected).
  • Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
  • Right to object: You have the right to object to certain types of processing, including profiling.

To exercise these rights, please contact us at the details provided below.

8. Consent

For photography sessions involving children where we are using for social media, we obtain explicit consent from parents or legal guardians. This will most likely be completed out of nursery/school premises and at a designated studio. Consent for school/nursery photoshoots will be obtained by the nursery or school.

9. Cookies

Our website may use cookies to enhance the user experience. These cookies do not collect personal data unless explicitly stated. You can manage your cookie preferences through your browser settings.

10. Contact Us

If you have any questions, concerns, or requests regarding our GDPR policy or your personal data, please contact us using the following details:

Cotton Socks Photography Ltd
Unit 1, The Old Coop Buildings, Burnopfield, Tyne and Wear, NE16 6LX
Email: info@cottonsocksphotography.co.uk
Phone: 07359591145

We will respond to your inquiry promptly and in accordance with the GDPR.

11. Changes to This Policy

We may update this policy from time to time. Any changes will be communicated on our website or via email. We encourage you to review this policy regularly.