magpie tommy photographer

 GDPR PRIVACY POLICY — MAGPIE TOMMY PHOTOGRAPHEr. Last updated: 18/08/26 

1.INTRODUCTION
This privacy policy explains how Magpie Tommy Photographer ("I", "we", "us", "our") collects, uses, stores, shares and protects personal data, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection law.
Magpie Tommy Photographer is operated by Thomas Haskew, trading as Magpie Tommy Photographer, a sole trader based in Norwich, UK. For the purposes of this policy, we are the "data controller" of the personal data described below, including photographs of identifiable individuals. 

2.THE PERSONAL DATA WE COLLECT
We may collect and process the following:
- Contact and booking data: name, email address, phone number, postal address, and event details, when you enquire about or book a shoot.
- Payment data: billing details for invoicing (we do not store full card details ourselves — this is handled by our payment provider).
- Photographs and video: images and footage of you, your property, family, guests, or event, taken during a shoot you book, or images taken of members of the public (see Section 4).
- Website usage data: standard technical data (IP address, browser type, pages visited) collected automatically via our website host and any cookies or analytics tools.
- Communications: emails, messages, or enquiry form submissions you send us.

3. USE OF CLIENT PHOTOGRAPHS — WEBSITE AND SOCIAL MEDIA
As a professional photographer, producing and sharing photographs is core to how we run our business and promote our work.
Delivery of your shoot. We process, edit, and deliver your photographs to you as agreed in your booking. This is necessary to perform our contract with you (Article 6(1)(b) UK GDPR).
Portfolio and marketing use. Unless you tell us otherwise, we will treat it as standard practice — agreed as part of your booking — that we may select and use images from your shoot for:
- Our website (magpietommy.com) as part of our portfolio;
- Our social media accounts, including Instagram (@magpietommyphotographer) and Facebook;
- Printed or digital marketing materials.
Our legal basis for this is legitimate interests (Article 6(1)(f) UK GDPR) — promoting our photography business — balanced against your right to opt out at any time. This will be made clear to you at the time of booking (for example, in your contract or booking confirmation), so you have the opportunity to opt out before, during, or after your shoot.

3.1 OPTING OUT
If you would prefer your images are not used for portfolio or marketing purposes — in full or in part — just let us know at any point, including after images have already been posted, and we will remove them and note your preference for future bookings.

3.2 RETENTION OF IMAGES
We retain finished photographs and raw files for up to 24 months, after your shoot for backup and reprint purposes, after which they may be archived or deleted. Images used in our portfolio are retained until you request removal or until they no longer serve a business purpose.

3.3 Photographs of Children
We sometimes photograph children when they are guests at a commissioned event, such as a wedding. We process these images under our legitimate interest to fully document the event for our client. We apply extra care when displaying images of children online. We will never publish a child's name alongside an image. If a parent or guardian wishes for an image of their child to be removed from our website or social media, we will respect this right and delete it upon request."

4. STREET AND PUBLIC PLACE PHOTOGRAPHY
Alongside commissioned client work, we also practise street and documentary photography — photographing members of the public in public places (streets, events, public spaces across Norfolk, Suffolk and elsewhere) who are not our clients and whom we may not know personally.
These photographs are taken candidly, or occasionally with a brief acknowledgement to the person if they notice, but generally without seeking prior written consent, consistent with long-established photographic and journalistic practice in public spaces.
Legal basis. We rely on legitimate interests (Article 6(1)(f) UK GDPR) as our basis for taking and using these images, reflecting their artistic and documentary value, weighed against the individual's right to privacy. We take care not to photograph people in a way that is intrusive, that causes distress, or that is otherwise unfair or unlawful.
Possible uses. Images from our street photography may appear on our website and social media as portfolio work, and may occasionally be offered for sale, exhibition, or publication.
Your rights. If you recognise yourself in one of our street photographs and would prefer it not to be displayed, sold, or exhibited, you can contact us (see Section 8) and we will consider your request and remove or restrict the image as appropriate, except where we have an overriding legitimate interest in continuing to use it (for example, established exhibition or publication use).

5. LEGAL BASES FOR PROCESSING (SUMMARY)
Purpose — Legal basis
Fulfilling a booking / delivering your photos — Performance of a contract
Displaying client photos on our website/social media (opt-out model) — Legitimate interests
Street/public place photography — Legitimate interests
Invoicing and accounting records — Legal obligation
Responding to enquiries — Legitimate interests / consent

6. SHARING YOUR DATA
I do not sell personal data (other than the occasional sale of a street/documentary print or licence, as described in Section 4). We may share data with:
- trusted third-party services we use to run our business (e.g. website hosting, cloud storage, payment processing, email/CRM tools);
- We use secure cloud storage and transmission services to deliver finished image galleries to our clients. This includes use of providers like Dropbox, Google Drive, and as direct attachments through our email provider."
- printing or album labs, solely to produce your ordered products;
- social media platforms (Instagram/Facebook), where images are posted — note these platforms have their own privacy policies governing content once posted.

7. INTERNATIONAL TRANSFERS
Some third-party tools we use (e.g. cloud storage, social media platforms) may store data outside the UK/EEA. Where this happens, we rely on their standard contractual clauses or equivalent safeguards.

8. YOUR RIGHTS
Under UK GDPR, you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request erasure of your data, including removal of photographs from public use (see Sections 3 and 4);
- object to or restrict certain processing;
- withdraw consent at any time, where consent is our basis;
- data portability, where applicable;
- complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling their helpline on 0303 123 1113 if you believe we have not handled your data properly. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first using our Contact Form.

9. WEBSITE USAGE DATA Standard technical data (IP address, browser type, pages visited) collected automatically via our website host, using only cookies that are strictly necessary for the site to function. We do not use non-essential analytics or tracking cookies.

10. CONTACT US
Use the Contact Form or details on my contact page. Or write to me at Magpie Tommy Photographer 8 Vicarage road, Norwich, NR3 2HB.  

11. CHANGES TO THIS POLICY
We may update this policy from time to time. Any changes will be posted on this page with an updated "last updated" date.

---