Privacy Policy

At Amarsi & Co Photography, I am committed to protecting your privacy and ensuring that all personal information is handled securely, respectfully, and in accordance with UK GDPR and the Data Protection Act 2018.

This Privacy Policy explains how I collect, use, store, and protect your data when you enquire, book a session, or visit my website.

1. Who I Am

Amarsi & Co Photography
Owner: Jalil Amarsi-Jiwa
Website: www.amarsiandco.uk
Email: Hello@AmarsiandCo.uk
Location: Bolsover, Derbyshire, UK

I am the sole data controller for all personal data collected through this website, questionnaires, contracts, email, and social media.

2. Information I Collect

I may collect the following types of personal data:

a) Information you provide directly

  • Name

  • Address

  • Email

  • Phone number

  • Session details (date, location, requirements)

  • Information needed for newborn, family, pet or event questionnaires

  • Contract signatures

  • Payment details (processed through third parties – I do not store card numbers)

b) Images

  • Photographs taken during your session

  • Behind-the-scenes images (if applicable)

c) Technical data collected via website

  • IP address

  • Device type

  • Browser information

  • Pages viewed

  • Cookies (where applicable)

3. How I Collect Your Data

Your data may be collected through:

  • The enquiry form or questionnaire (Microsoft Forms)

  • Email communication

  • Square invoices and payment system

  • Contracts (digital signature)

  • Social media messages

  • Cookies and analytics on the website

  • Photo sessions themselves

4. How Your Data Is Used

Your information is used for:

Contractual purposes

  • Responding to your enquiry

  • Preparing your booking and contract

  • Managing your session

  • Delivering your images

Legitimate interest

  • Improving services

  • Internal record-keeping

With consent

  • Using your images for portfolio, website or social media (only if model release is granted)

  • Sending marketing emails (you must opt in)

I do not sell or share your data with third parties for marketing.

5. Photo Usage & Model Release

Your photographs will only be used publicly (portfolio, website, social media) if:

  • You have signed a model release, OR

  • You have provided written consent

You may decline image use at any time. This will never affect your service.

For minors, the parent or legal guardian must provide explicit consent.

6. How Your Data Is Stored

Your data may be stored in:

  • Microsoft Forms (questionnaires)

  • OneDrive (galleries and image backups)

  • Squarespace (website enquiries)

  • Square (invoices & payments)

  • Email inbox

  • Local storage (encrypted hard drive)

Security measures:

  • Password-protected accounts

  • Encrypted cloud storage

  • Limited access (only me)

  • Devices protected by passcodes and encryption

7. How Long Data Is Kept

  • Client details: up to 6 years (for legal and accounting purposes)

  • Contracts: indefinitely, unless requested otherwise

  • Gallery images: typically 12 months after delivery (not guaranteed)

  • Email enquiries: 12–24 months

  • Marketing opt-ins: until you unsubscribe

You can request deletion at any time.

8. Sharing Your Data

Your data is shared only with:

  • Square (payment processing)

  • Pixieset / OneDrive / delivery platform (image delivery)

  • Contract system (digital signature software, if used)

All providers comply with GDPR or equivalent safeguards.

9. Your Rights

Under UK GDPR, you have the right to:

  • Access your data

  • Correct your data

  • Request deletion

  • Restrict processing

  • Object to data use

  • Withdraw consent (for marketing or image use)

  • Request a copy of your data

To exercise these rights, contact:
📧 [your email]

10. Cookies & Website Analytics

The website may use cookies and analytics to track:

  • Website traffic

  • Visitor behaviour

  • User experience

You can disable cookies through your browser settings.

11. Children’s Data

For newborn, family and children’s sessions:

  • Parent/legal guardian must provide information

  • Parent/legal guardian must sign the contract

  • Parent/legal guardian must approve image usage

  • No child’s data is stored without necessity for the session

12. Changes to This Policy

This policy may be updated periodically.
The latest version will always be available at:
www.amarsiandco.uk/privacy