Privacy Policy

Who is responsible for your information?

The data controller is Connor Ballard-Pateman Photography. For privacy questions or requests, email hi@connorballard.com.

Information collected

• Contact details such as your name, email address, telephone number and business name.
• The contents and date of general enquiries and subsequent correspondence.
• Booking details, including property and billing addresses, property size, requested shoot date, how you made contact and how you heard about the business.
• Quotes, invoices, discounts, travel mileage, booking status and the dates deposits or final payments are recorded as received.
• Referral information where a customer, booking or enquiry arrives through a referral partner, including who introduced the customer, the partner's referral code, any private commission attached to a booking and records of commission paid by BACS.
• Commissioned photographs and information needed to deliver them through Flickr.
• Limited technical and security information, including a one-way identifier derived from an IP address to prevent form and login abuse. The website does not use advertising or behavioural analytics.

How and why the information is used

• To respond to enquiries and take steps towards a contract, including preparing quotes and checking availability.
• To perform a contract, including managing bookings, invoicing, communicating with clients and delivering photographs.
• For legitimate business interests, including maintaining a customer history, recognising repeat clients, understanding how clients find the business, administering referral-partner relationships, securing the website and managing disputes.
• To meet legal obligations, including keeping business, invoice, payment and tax records.

Information is not sold and is not used for automated decisions that have legal or similarly significant effects. Quotes are reviewed by Connor before they are sent.

Who information is shared with

Information is shared only when needed with service providers that support the business, including the website and database hosting provider, Resend for transactional email and Flickr for photograph delivery. When a tax mileage export is requested, a property postcode is sent to Postcodes.io and routing coordinates are sent to the OSRM routing service to calculate driving distance from Rochester.

Information may also be shared with professional advisers, accountants, insurers, payment or banking providers, or public authorities where necessary or legally required. Payment is handled manually; this website does not collect payment-card details.

Some service providers may process information outside the UK. Where that happens, the provider's applicable international-transfer safeguards are relied upon.

How long information is kept

• General enquiries that do not become bookings are normally kept for up to 24 months after the last contact.
• Booking, customer, invoice and payment records are kept for the period needed to provide the service and meet tax and legal record-keeping requirements, normally at least five years after the relevant 31 January tax-return deadline.
• Photographs and delivery galleries are kept for the period agreed with the client or while reasonably needed for delivery, backup, portfolio use or legal claims.

Information may be kept longer where a dispute, legal claim or regulatory requirement makes that necessary. Records that are no longer needed are deleted or anonymised.

Cookies, referral links and security

The public portfolio does not set advertising or analytics cookies. If you arrive through a referral-partner link, its referral code is held in your browser's session storage for that tab so an enquiry or booking can be attributed correctly. It is not carried into a separate browser session. A strictly necessary, secure session cookie is used only when the site owner signs in to the private booking system. Reasonable technical and organisational measures are used to protect stored information, although no internet service can guarantee absolute security.

Your rights

Depending on the circumstances, you may have rights to access, correct, erase or restrict your personal information, object to certain uses, and receive a portable copy. Where processing relies on consent, you can withdraw it. These rights can be subject to legal exceptions, including the need to retain accounting records.

To exercise a right, email hi@connorballard.com. You can also complain to the Information Commissioner's Office.

Changes to this policy

This policy will be reviewed when the website or the way client information is used changes. The latest version and update date will always appear on this page.