PRIVACY POLICY

Last updated: [22 APRIL 2026]

This Privacy Policy explains how I collect, use, store, and share your personal data when you visit my website, enquire, book, or work with me.

1) Who I am

Data Controller: Sara Kurp Rushton trading as Sara Kurp Rushton | Wedding Photography (“I”, “me”, “my”).
Email: sarakurpphotography@gmail.com
Website: www.sarakurp.com
Instagram: @sarakurprushton
Location: United Kingdom

I am responsible for your personal data under UK data protection law (UK GDPR and the Data Protection Act 2018).

2) What information I collect

Depending on how you interact with me, I may collect:

a) Information you provide

Name(s), email address, phone number
Wedding/event details (date, venue, location(s), timings, guest count)
Messages you send (website forms, email, Instagram/Facebook)
Questionnaire answers (e.g., family groupings/names, priorities, logistics)
Billing details (billing address, invoice details)
Payment records (amounts paid, dates paid, bank transfer reference)

b) Information I collect automatically (website analytics)

IP address (often shortened/processed by analytics tools)
Device/browser information
Pages you view, time on page, clicks, referral source (e.g., Google/Pinterest/Instagram)
Cookie identifiers and similar tracking data

3) How I use your information (and lawful basis)

UK GDPR requires a lawful basis for processing personal data. I use your data for the purposes below:

a) To respond to enquiries and provide quotes

Purpose: replying to messages, checking availability, preparing quotes/options.
Lawful basis: Legitimate Interests (running my business and responding to enquiries) and/or Contract (where you request booking steps).

b) To provide photography services and deliver your gallery

Purpose: planning, photographing, editing, delivering your gallery, and customer support.
Lawful basis: Contract (to perform the agreement with you).

c) Administration, invoices and record-keeping

Purpose: invoicing, payments, accounting, and business records.
Lawful basis: Legal Obligation (where applicable) and/or Legitimate Interests.

d) Marketing and showcasing my work (portfolio / website / social media)

Purpose: sharing selected images to promote my services.
Lawful basis: handled via your contract/model release choice (e.g., standard permission, limited, or full privacy). I respect your privacy selection fully.

e) Website analytics and improving performance

Purpose: understanding which pages/content help visitors and improving the site (e.g., Google Analytics).
Lawful basis: Legitimate Interests and/or Consent where required for cookies/tracking.

f) Advertising and retargeting (where enabled)

If I run ads, I may use tools such as the Pinterest Tag and Meta tools to understand ad performance and show relevant ads to people who visited my site.
Lawful basis: typically Consent for non-essential cookies/advertising technology.

4) Who I share your information with

I only share your data when needed to run my business and deliver services. For example:

Website hosting / website tools: Wix
CRM / quoting / contracts / invoicing: Studio Ninja (or other CRM I use from time to time)
Online galleries / print sales: Pic-Time
Email and communications: my email provider (e.g., Gmail/Google), and platforms you contact me on (Instagram/Meta)
Analytics: Google Analytics 4
Advertising tools: Pinterest / Meta (only where enabled and where cookie preferences allow)
Professional services: accountant/bookkeeping support if required
Legal/regulatory: if required by law or to protect my rights (e.g., fraud prevention)

These services act as processors/service providers, handling data on my behalf under their own terms.

5) International transfers

Some services I use may process data outside the UK (for example, in the US or EU). Where that happens, providers use recognised safeguards to protect your data (such as contractual protections).

6) How long I keep your data (retention)

I keep personal data only as long as necessary for the purposes described in this policy and to meet legal/accounting obligations.

Typical retention periods:

Enquiry data (if you don’t book): up to 12 months
Client job records (quotes, contracts, invoices, payment records): typically up to 6 years (for accounting and business records)
Online gallery access: your gallery is available for 8 months from delivery
Edited image archive: I archive your edited images for 8 months from delivery. After this period, files may be permanently deleted.

I strongly recommend downloading and backing up your images as soon as you receive your gallery.

7) Your rights

You have rights over your personal data, including:

Access to your data
Correction of inaccurate data
Deletion (in certain circumstances)
Restriction of processing (in certain circumstances)
Objection to processing (in certain circumstances)
Data portability (where applicable)
Withdrawal of consent (where consent is the lawful basis)

To exercise your rights, email: sarakurpphotography@gmail.com.

8) Complaints

If you have a concern, please contact me first and I’ll do my best to resolve it quickly.

You also have the right to complain to the UK regulator, the Information Commissioner’s Office (ICO):
www.ico.org.uk

9) Cookies and tracking

My website uses cookies and similar technologies for:

essential site functions
analytics (understanding traffic and content performance)
advertising/retargeting (only where enabled and with the appropriate cookie preferences)

You can manage cookies via the cookie banner (where available) and your browser settings.

10) Links to other websites

My website may contain links to third-party websites (e.g., Instagram, Pic-Time galleries). Their privacy practices are governed by their own policies.

11) Updates to this policy

I may update this Privacy Policy occasionally. The latest version will always be posted on my website with the “Last updated” date.