Privacy Policy

1. Introduction

Hossain Studios ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at hossainstudiosco.uk or engage our photography services.

We are the data controller for the personal data we process. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have any questions about this policy, please contact us at [email protected].

2. Data We Collect

We may collect and process the following categories of personal data:

• —Identity data: your name, and in some cases, photographs taken during a commissioned shoot.
• —Contact data: your email address, telephone number, and postal address.
• —Enquiry data: information you provide when submitting a contact form, including the nature of your enquiry and preferred dates.
• —Transaction data: details of services you have purchased and payments made.
• —Technical data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, and other technology on the devices you use to access our website.
• —Usage data: information about how you use our website and services.

3. How We Use Your Data

We use your personal data for the following purposes:

• —To respond to your enquiries and provide quotations for our services.
• —To fulfil contracts for photography services you have engaged us for.
• —To process payments and manage your account.
• —To deliver your final photography gallery and associated products.
• —To send you service-related communications, including booking confirmations and delivery notifications.
• —To improve our website and services based on usage data.
• —To comply with legal obligations.

Our lawful basis for processing your data is: contract performance (where processing is necessary to fulfil a booking), legitimate interests (for website analytics and service improvement), and consent (where you have explicitly opted in to marketing communications).

4. Cookies

Our website uses cookies to distinguish you from other users and to improve your experience. Cookies are small text files placed on your device. We use the following types of cookies:

• —Strictly necessary cookies: required for the website to function. These cannot be disabled.
• —Analytics cookies: help us understand how visitors interact with our website. These are only set with your consent.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.

5. Third Parties

We may share your personal data with the following categories of third parties:

• —Payment processors: to securely process payments for our services.
• —Online gallery platforms: to host and deliver your photography gallery.
• —IT and website service providers: who assist in the operation of our website and business systems.
• —Professional advisors: including accountants and legal advisors, where necessary.

We do not sell your personal data to third parties. We require all third parties to respect the security of your data and to treat it in accordance with the law.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Client data relating to photography bookings is typically retained for 7 years following the completion of the service. Enquiry data from individuals who did not proceed to book is retained for up to 12 months.

7. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• —Right of access: to request a copy of the personal data we hold about you.
• —Right to rectification: to request correction of inaccurate or incomplete data.
• —Right to erasure: to request deletion of your personal data in certain circumstances.
• —Right to restrict processing: to request that we limit how we use your data.
• —Right to data portability: to receive your data in a structured, machine-readable format.
• —Right to object: to object to processing based on legitimate interests.
• —Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Contact for Data Requests

To exercise any of your rights, or if you have any questions about this Privacy Policy, please contact us:

We will respond to all legitimate requests within one month. Occasionally it may take longer if your request is particularly complex or you have made a number of requests.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.