PRIVACY POLICY
Last updated: 19 July 2026
1. About this Privacy Policy
This Privacy Policy explains how Carmen Sherred Photography ("I", "me", "my" or "Carmen Sherred Photography") collects, uses, stores and protects your personal information when you:
visit or use this website;
contact me about my photography services;
submit an enquiry through this website;
contact me through Facebook, Instagram or other social media platforms;
submit information through a Meta (Facebook or Instagram) lead form; or
book or use my photography services.
I take your privacy seriously and aim to handle your personal information responsibly and transparently.
For the purposes of applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the person responsible for your personal information is:
Carmen Sherred Photography
Email: carmensherred_photography@hotmail.com
Address: Manchester, United Kingdom
2. Information I may collect
Depending on how you interact with me, I may collect the following information:
Information you provide directly
This may include:
your name;
email address;
telephone number;
wedding date;
wedding venue and location;
details about your wedding or photography requirements;
information provided when completing an enquiry form;
information provided when booking my services;
correspondence and communications between us; and
any other information you choose to provide.
Information collected automatically
When you visit my website, certain information may be collected automatically, such as:
your IP address;
browser type and device information;
general location information;
information about how you use and interact with my website; and
information collected through cookies and similar technologies.
Please see the Cookies section below for more information.
Information received from third parties
I may receive information about you from platforms through which you contact me, including Facebook, Instagram or Meta lead-generation forms.
3. How I use your personal information
I may use your personal information to:
respond to enquiries;
check availability for your wedding date;
provide information about my photography services;
prepare quotations and proposals;
manage bookings and contracts;
communicate with you about your photography requirements;
provide and deliver photography services;
process payments where applicable;
maintain appropriate business and financial records;
improve my website, services and customer experience;
comply with legal and regulatory obligations; and
protect my business, website and systems against fraud, misuse or security threats.
I will only use your personal information where I have a lawful basis to do so.
4. Lawful basis for processing
Under UK data protection law, I must have a lawful basis for using your personal information.
Depending on the circumstances, I may rely on:
Contract
Where processing your information is necessary to take steps at your request before entering into a contract, or to perform a contract with you.
For example, when you enquire about my availability or book my photography services.
Legitimate interests
Where processing is necessary for my legitimate business interests, provided that those interests do not override your fundamental rights and freedoms.
For example, responding to genuine business enquiries, managing my business and improving my services.
Legal obligation
Where I need to process your information to comply with a legal or regulatory obligation.
Consent
Where you have given me consent to use your information for a specific purpose.
Where I rely on consent, you may withdraw that consent at any time.
5. Marketing communications
I will not send you marketing communications where I am not legally permitted to do so.
If I send marketing communications based on your consent, you can withdraw your consent at any time.
You can also contact me to ask me to stop sending marketing communications.
6. Sharing your personal information
I do not sell your personal information.
I may share your information with trusted third parties where necessary to operate my business and provide my services.
These may include:
website hosting and website providers;
email and communication providers;
Meta, including Facebook and Instagram;
online enquiry and lead-generation platforms;
payment providers;
accounting or bookkeeping providers;
cloud storage and business software providers;
professional advisers; and
government, regulatory or law-enforcement authorities where legally required.
Where third parties process personal information on my behalf, I take reasonable steps to ensure that appropriate safeguards are in place.
7. International transfers
Some of the service providers I use may process personal information outside the United Kingdom.
Where personal information is transferred outside the UK, I will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection law.
This may include relying on an adequacy decision or appropriate safeguards such as approved contractual protections.
8. How long I keep your information
I will retain personal information only for as long as reasonably necessary for the purposes for which it was collected.
If you make an enquiry but do not book my services, I may retain relevant information for a reasonable period in order to manage the enquiry and maintain appropriate business records.
If you book my services, I will retain information for as long as necessary to manage your booking, provide my services and comply with legal, accounting and tax obligations.
The exact retention period may vary depending on the type of information and the reason it is being retained.
9. Your rights
Under applicable data protection law, you may have the right to:
request access to the personal information I hold about you;
request correction of inaccurate or incomplete information;
request deletion of your personal information in certain circumstances;
request restriction of processing in certain circumstances;
object to certain processing;
request the transfer of certain personal information to you or another organisation; and
withdraw consent where processing is based on consent.
These rights are not absolute and may be subject to legal exceptions.
To exercise your rights, please contact me using the details below.
10. Cookies
My website may use cookies and similar technologies.
Cookies are small text files stored on your device that can help websites function, remember preferences and understand how visitors use a website.
Some cookies may be necessary for the website to function. Other cookies may be used for analytics, performance or other purposes.
Where required by law, I will ask for your consent before placing non-essential cookies on your device.
You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect how the website functions.
11. Website links
My website may contain links to third-party websites, including social media platforms and other websites.
I am not responsible for the privacy practices, content or security of third-party websites. You should review the privacy policies of those websites before providing them with personal information.
12. Data security
I take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, misuse, alteration or disclosure.
However, no method of transmitting or storing information online can be guaranteed to be completely secure.
13. Children's privacy
My services are intended for adults and I do not knowingly collect personal information from children through my website.
If you believe that a child has provided personal information to me, please contact me so that I can take appropriate steps.
14. Changes to this Privacy Policy
I may update this Privacy Policy from time to time to reflect changes in my business, the services I use or applicable legal requirements.
The latest version will always be published on this page, with the date of the latest update shown at the top.
15. Contact
If you have any questions about this Privacy Policy or how I use your personal information, please contact:
Carmen Sherred Photography
Email: carmensherred_photography@hotmail.com
Address: Manchester, United Kingdom
16. Complaints
If you have concerns about how I have handled your personal information, please contact me first so that I have the opportunity to address your concerns.
You also have the right to complain to the Information Commissioner's Office (ICO), which is the UK's data protection regulator.
Further information about the ICO and how to make a complaint is available on the ICO's website.