GDPR PRIVACY POLICY — MAGPIE TOMMY PHOTOGRAPHEr. Last updated: 20/08/26
1.INTRODUCTION
This privacy policy explains how Magpie Tommy Photographer ("I", "we", "us", "our") collects, uses, stores, shares and protects personal data, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection law.
Magpie Tommy Photographer is operated by Thomas Haskew, trading as Magpie Tommy Photographer, a sole trader based in Norwich, UK. For the purposes of this policy, we are the "data controller" of the personal data described below, including photographs of identifiable individuals.
2.THE PERSONAL DATA WE COLLECT
We may collect and process the following:
- Communications: emails, telephone calls, website enquiries, social media messages, WhatsApp messages, and other communications you send to us.
- Payment data: billing details for invoicing (we do not store full card details ourselves — this is handled by our payment provider).
- Photographs and video: images and footage of you, your property, family, guests, or event, taken during a shoot you book, or images taken of members of the public (see Section 4).
- Website usage data: standard technical information such as IP address, browser type and pages visited may be collected automatically by our website provider. We do not use the website for advertising or behavioural tracking.
3. USE OF CLIENT PHOTOGRAPHS — WEBSITE AND SOCIAL MEDIA
As a professional photographer, producing and sharing photographs is core to how we run our business and promote our work.
Delivery of your shoot. We process, edit, and deliver your photographs to you as agreed in your booking. This is necessary to perform our contract with you (Article 6(1)(b) UK GDPR).
Portfolio and marketing use. Unless otherwise aggreged as part of running and promoting our photography business, we may select and use images from your shoot for:
- Our website (magpietommy.com) as part of our portfolio;
- Our social media accounts, including Instagram (@magpietommyphotographer) and Facebook;
- Printed or digital marketing materials.
Our legal basis for this is legitimate interests (Article 6(1)(f) UK GDPR) — promoting our photography business — balanced against your right to opt out at any time. This will be made clear to you at the time of booking (for example, in your contract or booking confirmation), so you have the opportunity to opt out before, during, or after your shoot.
3.1 OPTING OUT
If you would prefer your images not to be used for portfolio or marketing purposes — in full or in part — please let us know. We will consider your objection in accordance with your rights under data protection law and, where appropriate, remove or stop using the relevant images for future portfolio or marketing purposes.
3.2 RETENTION OF IMAGESPHOTOGRAPHS OF MINORS
We may retain original RAW files, edited photographs and delivered images for an extended or indefinite period for archival, backup, contractual and business purposes. Different types of personal information, such as accounting records and client correspondence, may be retained for different periods where required for legal or business purposes. Images used in our portfolio may be retained for as long as they serve a legitimate business or artistic purpose, subject to your rights and any valid objection.
3.3
Where children appear incidentally as guests at a commissioned event, their images may be processed as part of documenting the event for our client. We take particular care when considering the use of identifiable images of children for portfolio, social media or other public purposes. If a parent or guardian wishes for an image of their child to be removed from our website or social media, we will respect this right and delete it upon request.
4. STREET AND PUBLIC PLACE PHOTOGRAPHY
Alongside commissioned client work, we also practise street and documentary photography — photographing members of the public in public places (streets, events, public spaces across Norfolk, Suffolk and elsewhere) who are not our clients and whom we may not know personally.
These photographs are taken candidly, or occasionally with a brief acknowledgement to the person if they notice, but generally without seeking prior written consent, consistent with long-established photographic and journalistic practice in public spaces.
Legal basis. We rely on legitimate interests (Article 6(1)(f) UK GDPR) as our basis for taking and using these images, reflecting their artistic and documentary value, weighed against the individual's right to privacy. We take care not to photograph people in a way that is intrusive, that causes distress, or that is otherwise unfair or unlawful.
Possible uses. Images from our street and documentary photography may appear on our website and social media as portfolio or artistic work, and may be submitted for exhibition, publication, competition, licensing or sale.
Your rights. If you recognise yourself in one of our street photographs and would prefer it not to be displayed, sold, or exhibited, you can contact us (see Section 8) and we will consider your request and remove or restrict the image as appropriate, except where we have an overriding legitimate interest in continuing to use it (for example, established exhibition or publication use).
5. LEGAL BASES FOR PROCESSING (SUMMARY)
Purpose — Legal basis
Fulfilling a booking / delivering your photos — Performance of a contract.
Displaying client photos on our website/social media (opt-out model) — Legitimate interests.
Street/public place photography — Legitimate interests.
Invoicing and accounting records — Legal obligation.
Responding to enquiries and communicating with prospective clients — Legitimate interests.
6. SHARING YOUR DATA
WE do not sell personal data. Photographic works, including street or documentary photographs, may occasionally be offered for sale or licensed as described in Section 4. This is separate from selling personal data.
- trusted third-party services we use to run our business (e.g. website hosting, cloud storage, payment processing, email/CRM tools);
- We use secure cloud storage and transmission services to deliver finished image galleries to our clients. We may use cloud storage and file-delivery services such as Dropbox and Google Drive, as well as email, to store, transfer and deliver photographs to clients. We may use cloud storage and file-delivery services such as Dropbox and Google Drive, as well as email, to store, transfer and deliver photographs to clients.
- printing or album labs, solely to produce your ordered products;
- social media platforms (Instagram/Facebook), where images are posted — note these platforms have their own privacy policies governing content once posted.
7. INTERNATIONAL TRANSFERS
Some third-party service providers we use may process or store personal data outside the UK. Where personal data is transferred internationally, we will take appropriate steps to ensure that the transfer is made in accordance with applicable UK data protection law and that appropriate safeguards are in place.
8. YOUR RIGHT TO OBJECT ⚠️
Because we rely on "Legitimate Interests" to handle your images (such as for our website portfolio, social media, and public street photography). You have the right to object to certain processing, where we rely on legitimate interests as our lawful basis. You have the right to object to certain processing where we rely on legitimate interests as our lawful basis. We will consider your objection in accordance with applicable data protection law.
8.1 Under UK GDPR, you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request erasure of personal data in circumstances where the right applies, including photographs where applicable (see Sections 3 and 4);
- object to or restrict certain processing;
- withdraw consent at any time, where consent is our basis;
- data portability, where applicable;
- Complain to the Information Commissioner's Office (ICO) at https://ico.org.uk/ or by calling their helpline on 0303 123 1113 if you believe we have not handled your data properly. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first using our Contact Form.
9. CONTACT US
Use the Contact Form or details on my contact page. Or write to me at Magpie Tommy Photographer 8 Vicarage road, Norwich, NR3 2HB.
10. CHANGES TO THIS POLICY
We may update this policy from time to time. Any changes will be posted on this page with an updated "last updated" date.
---