JR Photography Privacy Policy for Photography

JR Photography respects the privacy of individuals and is committed to protecting their personal information. As required by the Guernsey General Data Protection Regulation 2017, we follow strict security procedures in the storage and disclosure of information which you have given us, to prevent unauthorised access. The Company's policy on the collection and use of personal information is outlined below and states what data we collect, why we collect the data, how it is used, the lawful basis on which your personal data is processed and what your rights are under the Data Protection Laws.

Who Are We

We are JR Photography (also known as John-Ross Photography). We are the data controller responsible for your personal data.

What Information Do We Collect

• Personal Information: This includes your name, address, e-mail address, phone number, as well as the names and other details about other participants in a photography session, together with other information that you elect to provide to us.
• Other Information: Personal details you choose to give when corresponding with us by phone, email or in person.

In providing our services, we create photographs which may identify you and other participants and that may be considered personal data. Our photographs may be produced in digital and print format. You (as the client) are responsible for ensuring that all participants in a photograph session are aware of how to access this privacy policy.

How We Use Your Personal Information

We use your personal information in the following ways:

• To provide you with our services, to create and deliver the products you have ordered and to contact you regarding your use of the services. Such use is necessary to respond to or implement your request and for the performance of the contract between you and us.
• As necessary for certain legitimate business interests, which include the following:
•  Where we are asked to deal with any enquires or complaints you make.
•  To provide communications which we think will be of interest to you.
•  To a) comply with legal obligations, b) respond to requests from competent authorities; c) protect our operations, d) protect our rights, safety or property, and/or that of our affiliated businesses, you or others and e) enforce or defend legal rights or prevent damage.
• With your consent, we may use your photographs to promote and advertise our business, including in our studio, printed publications, promotional materials, on our website and other digital advertising of our services and in social media forums such as Facebook. 
• We will not supply your personal information to any other party for marketing purposes. We may use your contact details to advise you of any changes to our services, prices and terms.
• We may use your personal data for other purposes which you have consented to at the time of providing your data.

As used in the Privacy Policy, “legitimate interests” means our interests in conducting and managing our business. When we process your personal data for our legitimate interests, we make sure to consider and balance any potential impact on you and your rights under data protection laws. Our legitimate interests do not automatically override your interests. We will not use your personal data for activities are overridden by the impact on you, unless we have your consent or those activities are otherwise required or permitted to by law. You have the right to object at any time to processing your personal data that is based on our legitimate interests on grounds relating to your particular situation.

Disclosure of Your Information

Third Party: In order to take advantage of some of our services, you may need to supply us with the personal details of a third party, for example, their name and address if you wish us to send them prints. We will not use this information for anything other than providing the service for which the information was supplied.

Legal Responsibility: We will not disclose any personally identifiable information without your permission unless we are legally required to do so for example, pursuant to a court order or for the purposes of prevention of crime or fraud.

Non- personal Information

We may automatically collect non-personal information about your visit to our website, such as the type of browser used or the web site from which links to us are made. This information will only be used to assist us in providing an effective service on this web site. We do not supply the owners and operators of third party web sites which have a link to our site with information about the number of users linking to our site from their web site.

Data Retention

We will keep your personal data only for as long as is reasonably necessary for the purposes outlined in this Privacy Policy, or for the duration required by any legal, regulatory, accounting or reporting requirements whichever is the longer. In particular, we retain your personal data for 7 years after your last contact with us and we retail digital files of your photographs for a minimum period of 10 years. Please note, information and digital files may be deleted within those timescales depending upon system 

Cookies

We may temporarily store some information on your computer when you use our website. These pieces of information are called 'Cookies' and they make possible your use of our web site, which requires 'Cookies' to be enabled. You can set your browser to notify you when you receive a cookie, which allows you to choose whether or not to accept it. If you decide not to accept, you may not be able to use the JR Photography services.

Links

• Payment: Payment for orders from the JR Photography website is by secure on-line credit card payment. To make this possible this site contains a link to other sites, who are our chosen Credit Card Authorisation Bureaus. If you wish to review their Privacy Policies, you can see this at their websites.
• Secure Server: When you have placed your order and are required to make payment, you are transferred to the payment site, which means we do not process your financial information and therefore are not able to store it. Your payment, using the Zenfolio or PayPal system, is transacted through Secure Server Software, which encrypts all information so that it cannot be intercepted.
• Third Party: You will have linked to the Payment System from our web site. We cannot be held responsible for the privacy policies and practices of these third parties, so we recommend that you check their privacy policy. You must contact its owner or operator if you have any concerns or questions that are specific to their site.

Changes to Privacy Policy

If we change our privacy policy, we will post the new policy on our website www.johnrossphotography.co.uk Please visit this Privacy Policy statement on a regular basis to make sure you have read the latest version and you understand what we do with your personal information.

Contact us

If you have any queries or problems with regard to this Privacy Policy or the uses to which we put your personal information please e-mail us at [email protected]