Privacy Policy

1. Introduction

This Privacy Policy explains how Dawid Dobosz (referred to as “I”, “me”, or “the Photographer”) processes personal data collected through the website www.dawiddobosz.co.uk.

I am committed to protecting your privacy and handling your data in accordance with the UK GDPR and the Data Protection Act 2018.

If you have any questions, please contact:
Email: info@dawiddobosz.co.uk


—

2. Data Controller

The data controller responsible for your personal data is:

Dawid Dobosz
Email: info@dawiddobosz.co.uk


—

3. Personal Data I Collect

I may collect and process the following categories of personal data:

A. Data you provide directly

  • Name and surname
  • Email address
  • Phone number
  • Event details (e.g., wedding date, location, type of session)
  • Messages and information submitted through the contact form
  • Contract and booking information

B. Data related to photography services

  • Photographs and video recordings taken during sessions or events
  • Consent forms and model releases (if applicable)
  • Delivery details for galleries, albums, prints or digital files

C. Automatically collected data

  • IP address
  • Browser type and device information
  • Cookies and usage data (e.g., pages visited, time spent on the site)

—

4. How I Use Your Data

Your personal data may be used for the following purposes:

  • Service-Related Purposes
  • Responding to enquiries
  • Preparing quotes and contracts
  • Performing photography services
  • Delivering online galleries, prints, and digital files
  • Managing bookings, payments, and communication
  • Legal & Safety Purposes
  • Maintaining business records
  • Protecting copyright and preventing misuse of images
  • Managing consent for image publication
  • Marketing (only with consent)
  • Using selected images for portfolio, website, social media, and promotional materials (Images are never published without explicit consent when required, e.g., private events, children, sensitive circumstances.)
  • Website & Analytics
  • Improving website functionality
  • Analysing visitor behaviour through cookies and analytics tools

—

5. Legal Basis for Processing

I process your personal data under the following legal bases:

  • Contractual necessity (Article 6(1)(b) UK GDPR):
    To provide photography services, manage bookings, and deliver images.
  • Consent (Article 6(1)(a)):
    For marketing use of your images or subscribing to newsletters.
  • Legitimate interests (Article 6(1)(f)):
    For business operations, portfolio development, website analytics, and protection of my rights.
  • Legal obligations (Article 6(1)(c)):
    For tax and accounting purposes.

—

6. Sharing Your Data

I only share data when necessary for business operations, such as:

  • Website hosting providers
  • Online gallery platforms (e.g., Pixieset, Shootproof, Zenfolio — if used)
  • Cloud storage services
  • Payment processors
  • Professional print labs
  • Accountants or legal advisors
  • All third parties only receive data essential to their services and must comply with UK GDPR standards.
  • I never sell your personal data.

—

7. Photography, Image Rights & Consent

  • Photographs taken during sessions may include identifiable individuals.
  • Images are stored securely and used only for the purposes agreed in your contract.
  • Images are never shared publicly without your permission when legally required.
  • You may withdraw consent for marketing use at any time.

—

8. Data Retention

I retain personal data only as long as necessary:

  • Contact and booking information: up to 7 years (for legal/accounting reasons)
  • Client galleries and photographs: typically 3–10 years, depending on storage policies
  • Marketing consent records: until consent is withdrawn
  • Website analytics data: according to the tools’ retention policies

—

9. Your Rights

Under UK GDPR, you have the right to:

  • Access your data
  • Correct inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Obtain a copy of your data (data portability)
  • Withdraw consent at any time
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

More info: www.ico.org.uk

—

10. Cookies

This website may use cookies for:

  • Essential website functionality
  • Analytics (e.g., Google Analytics)
  • Performance and security

You can control cookies through your browser settings.

—

11. Data Security

I implement appropriate technical and organisational measures to keep your data secure, including encrypted storage, password protection, and restricted access.

—

12. Changes to This Privacy Policy

This Privacy Policy may be updated periodically.
The latest version will always be available on the website.

—

13. Contact

For any privacy-related enquiries, please contact:

Dawid Dobosz
Email: info@dawiddobosz.co.uk