PRIVACY POLICY
Last updated: 16 August 2026
This Privacy Policy explains how ILLIAN Photography collects, uses, stores and protects personal information when you visit www.illian.co.uk, contact me, make an enquiry, book photography services, purchase a gift card or otherwise interact with my services.
I am committed to handling personal information responsibly and in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. WHO I AM
ILLIAN Photography is an independent photography business providing photography services primarily in Surrey and London, United Kingdom.
Website: www.illian.co.uk
For the purposes of UK data protection law, I am the data controller responsible for the personal information described in this Privacy Policy.
2. PERSONAL DATA I MAY COLLECT
Depending on how you interact with my website or services, I may collect the following information.
Contact and enquiry information
This may include:
• your name;
• email address;
• telephone or WhatsApp number;
• preferred photoshoot date;
• preferred location;
• type of photography service requested;
• information you choose to include in messages, enquiries or contact forms.
Booking and service information
If you arrange or purchase photography services, I may process information necessary to organise and provide those services, including:
• booking details;
• date, time and location of the photoshoot;
• photography package or service selected;
• communications relating to your booking;
• payment and transaction information;
• information necessary to fulfil your photography service.
Payment information
Payments may be processed through Wix or third-party payment providers.
I do not normally receive or store complete payment card details. Payment providers process payment information according to their own privacy and security policies.
Gift card information
If you purchase or use a gift card, information relating to the transaction may be processed, including purchaser or recipient details where applicable, gift card value, payment information and redemption information.
Photographs and other media
When I provide photography services, photographs and potentially video or other visual material may be created as part of the service.
Photographs created for a client are not automatically used for advertising, my portfolio, social media or other promotional purposes merely because I photographed the client.
Where separate permission is required for promotional use, I will seek appropriate permission.
Website and technical information
When you visit the website, certain technical information may be collected automatically, including:
• IP address;
• browser and device information;
• approximate location derived from technical information;
• pages visited;
• referral information;
• interaction with the website;
• cookie and analytics information.
The exact information collected depends on the cookies, analytics services and other technologies enabled on the website and on the choices you make through the cookie consent system.
3. HOW I USE PERSONAL DATA
I may use personal information to:
• respond to enquiries;
• communicate with potential and existing clients;
• arrange and manage photography bookings;
• provide photography services;
• deliver photographs or galleries;
• process payments and gift cards;
• maintain business and transaction records;
• provide customer support;
• operate, maintain and improve the website;
• understand how visitors use the website;
• protect the website and business against fraud, misuse or security threats;
• comply with accounting, tax and other legal obligations;
• establish, exercise or defend legal claims where necessary.
4. LAWFUL BASES FOR PROCESSING
Under UK GDPR, personal information must be processed using an appropriate lawful basis.
Depending on the circumstances, I may rely on the following lawful bases.
Contract
Processing may be necessary to take steps at your request before entering into a contract or to perform a contract with you.
For example, this may apply when you enquire about a photoshoot, make a booking or purchase a service.
Legitimate interests
I may process certain information where necessary for legitimate business interests, provided those interests are not overridden by your rights and interests.
This may include responding to enquiries, managing client relationships, maintaining website security and improving my services.
Legal obligation
Certain information may need to be retained or processed to comply with legal obligations, including accounting, taxation and other applicable legal requirements.
Consent
Where processing requires your consent, I will rely on consent.
This may apply, for example, to certain non-essential cookies or particular uses of photographs for promotional purposes.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
5. COOKIES AND ANALYTICS
The website may use cookies and similar technologies necessary for the website to function and, where permitted, for analytics, functionality and marketing purposes.
Where legally required, non-essential cookies will not be used until you have provided the appropriate consent.
The website uses a cookie consent management system that allows visitors to manage their cookie preferences.
You can change or withdraw your cookie choices through the consent controls available on the website.
Some services used by the website may place their own cookies or process technical information according to their respective privacy policies.
6. THIRD-PARTY SERVICE PROVIDERS
I may use third-party service providers to operate the website and provide my services.
These may include providers involved in:
• website hosting and website functionality;
• contact forms and booking functionality;
• payment processing;
• gift cards;
• analytics;
• cookie consent management;
• email and communications;
• cloud storage;
• delivery of online photography galleries or digital files.
My website is built and operated using Wix services. Wix may process information in connection with hosting, website functionality, forms, transactions and other services used on the website.
Where third parties process personal information on my behalf, I aim to use appropriate service providers and safeguards consistent with applicable data protection requirements.
7. INTERNATIONAL DATA TRANSFERS
Some service providers may process or store information outside the United Kingdom.
Where personal information is transferred internationally, appropriate safeguards should be used where required by UK data protection law.
Depending on the circumstances, these safeguards may include adequacy regulations, approved contractual protections or other legally recognised transfer mechanisms.
8. HOW LONG PERSONAL DATA IS KEPT
Personal information is kept only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting or business requirements.
The appropriate retention period depends on the type of information and the reason it is held.
For example, transaction and accounting records may need to be retained for longer periods to comply with legal and tax requirements.
Enquiry information that does not result in a booking will generally not be retained longer than reasonably necessary.
Photographs and completed client work may be retained for backup, service delivery, record-keeping or archival purposes where appropriate.
9. HOW PERSONAL DATA IS PROTECTED
Reasonable technical and organisational measures are used to protect personal information against accidental loss, unauthorised access, alteration, disclosure or misuse.
However, no internet-based service or electronic storage system can guarantee absolute security.
10. YOUR DATA PROTECTION RIGHTS
Depending on the circumstances and the applicable law, you may have rights including:
• the right to be informed about how your personal information is used;
• the right to request access to your personal information;
• the right to request correction of inaccurate or incomplete information;
• the right to request deletion of your personal information in certain circumstances;
• the right to request restriction of processing in certain circumstances;
• the right to object to certain processing;
• the right to data portability in certain circumstances;
• the right to withdraw consent where processing is based on consent.
Some rights are subject to legal conditions and exceptions and therefore may not apply in every situation.
If you wish to exercise a data protection right, please contact me using the contact details provided below.
11. PHOTOGRAPHS AND PORTFOLIO USE
Photographs created during a paid or arranged photography session may constitute personal data where an individual can be identified.
Providing photography services does not automatically mean that I may use identifiable client photographs for advertising or promotional purposes.
Where appropriate, permission for portfolio, website, social media, advertising, exhibition or other promotional use will be obtained separately.
Where such use is based on consent, you may contact me regarding withdrawal of that consent. Withdrawal will apply to future use where reasonably possible and will not necessarily affect material that was lawfully used or published before consent was withdrawn.
12. CHILDREN'S INFORMATION AND PHOTOGRAPHS
Photography services may sometimes involve children.
Where appropriate, bookings, communications and permissions relating to children should be handled through a parent, guardian or other person with appropriate authority.
I take additional care when handling identifiable photographs or personal information relating to children.
Images of children will not be intentionally used for promotional purposes where appropriate permission has not been obtained.
13. LINKS TO OTHER WEBSITES
The website may contain links to third-party websites or services.
I am not responsible for the privacy practices, security or content of third-party websites. You should review the privacy information provided by those services when using them.
14. COMPLAINTS
If you have concerns about how your personal information has been handled, please contact me first so that I have an opportunity to address the issue.
You also have the right to raise a complaint with the UK Information Commissioner's Office (ICO), the UK's independent data protection regulator.
15. CHANGES TO THIS PRIVACY POLICY
This Privacy Policy may be updated from time to time to reflect changes to the website, services, technologies used or applicable legal requirements.
The latest version will be published on this page and the “Last updated” date will be changed accordingly.
16. CONTACT
If you have questions about this Privacy Policy, how your personal information is handled, or wish to exercise your data protection rights, please contact:
ILLIAN Photography
Website: www.illian.co.uk
Contact: via the contact form available on the website