Data protection (GDPR) policy

This policy communicates detailed information about how Drabble and Co collects, stores and uses personal data throughout the process of you using this website, enquiring about a shoot, booking a shoot, carrying out a shoot, editing and delivering a shoot, and adding data (image and written details) to Drabble and Co online and print portfolios (website, blog, newsletter, social media, printed brochures, price lists etc) and through journalism.

In commissioned work, after your shoot I may have collected written details (via email or contact form) that may include your name and contact information, and digital photographs/ images of you (that may be identified as you) from your shoot with me. Your identifiable details come under data protection. When engaged in journalism, some exemptions from the UK Data Protection Act (DPA) apply.
 

Data controller & processor details:

Emma Drabble
Drabble and Co, Bridges Centre, Drybridge Park, Monmouth, NP25 5AS

+44(0)7805059707

emmaphotodrabble@gmail.com

The data I process
Your contact details, details about your shoot, images from your shoot, images that may be identifiable as you, images that may be identifiable as your company, images that may be identifiable as your clients/ guests (if event photography).

Why I process/ collect your data.
In commissioned work:

To be able to contact you regarding your shoot and to be able to consult with you regarding your shoot, pre-shoot or post-shoot services, to offer you the best service, to edit your images, to retouch your images and to deliver your images. To create products like prints and albums after your shoot. To add to my ongoing online and printed portfolios.

I also keep your images to ensure I have your photos should you lose your images or require another copy.

You have the right to withdraw your consent at any time
You have the right to know what data I hold at any time
You have the right to have the information I hold deleted at any time

In journalism, some exemptions apply as defined in UK legistlation.

You have a right to complain to the ICO if you are concerned about how I, Emma Drabble, (on behalf of Drabble and Co) handle your data

Find out more at: https://ico.org.uk

‘Informed consent’ is crucial and a key part of the new GDPR (data protection) legislation. Consent must be freely given, specific, informed and unambiguous. Legitimate interest may also apply in some instances.


Please read below how in commercial work I may use your data with your consent.

CONTACT FORM
During our first communication via this site's contact form I will collect the details you give me in my email software in order to communicate with you.

EMAIL
During our communication and in setting up your shoot I create a folder in my email software with your name and the date of your shoot. In setting up your session I will most likely receive your name, email address, phone number and other details – these email correspondences are kept in your folder in my email software so I can find you and communicate with you easily.

After your shoot I may send follow up email/s in relation to your shoot, online gallery, receiving your photos, and any further products you may purchase from me.

After your shoot I keep your email folder & emails connected with your shoot in my archives. I clear client details (if I haven't worked with you for some time) from my email archives every 6 years.

PHONE
Your contact details may also be kept in my phone so I can contact you during the time we are working together.
I don't have a formal delete date but I am mindful to delete clients that I haven't worked with for some time after a year.

PHOTOS / DIGITAL IMAGE STORAGE
Once you've booked your shoot I create a folder on an external hard drive that is named with your name and the date of your shoot. I keep all of the digital images from your shoot in this folder. The external hard drives are stored in my home office and are only accessed by me.

IMAGE GALLERY
I may upload a wide selection of your digital images to a password protected online gallery using Shootproof for you to view and download your images. All of the images in this gallery are private (unless you choose to share your password).

PORTFOLIO - ONLINE & PRINT
In running my photography business I may use photographs taken during your shoot that may be identified as you as part of my online and print portfolios. This includes my website, social media accounts and print brochures, leaflets, business card and other printed products. I may store photos from your shoot that may be identifiable as you as an example to show to potential clients.

I currently print images within my own office or through NPhoto or Loxley Colour – both in the EEA and compliant with GDPR.

WEBSITE AND/OR BLOG 
I may use images that may be identifiable as you, and details that may identify you, on the Drabble and Co website and/or blog

https://www.drabbleandco.com

My website is hosted via Square Space/ Eek Design on UK servers compliant with GDPR

SOCIAL MEDIA
I may use photos from your shoot that may be identifiable as you in my social media portfolios.
 

TWITTER   https://twitter.com/emmadrabblepics   
Twitter's privacy policy

FACEBOOK  www.facebook.com/drabbleandco 
Facebook's privacy policy 

INSTAGRAM www.instagram.com/drabbleandco Instagram's privacy policy

FRAMEIO
I may store videos from your video shoot that may be identifiable as you in a non-public folder on Frameio if uploading them to use on my website, blog, social media or as part of my portfolio. Frameio is GDPR compliant.

PHONE/ iPAD
I may store photos from your shoot that may be identifiable as you in my phone/ iPad 'photos' folder if uploading them to use on my website, blog, social media or as part of my portfolio.

ARCHIVES
I may keep your email correspondence (and data contained) connected with your shoot in my electronic archives which are stored in my email software, phone and/ or on external hard drives for no less than one year. I empty my email archives every 8 years, unless clients request a longer archive.

I may keep your portrait photos/ digital images connected with your shoot in my electronic archives which are stored on an external hard drive, and in my online and printed portfolios.
I don't have a formal delete date but can provide one if required.

FURTHER USE

For any use unlisted here I will seek your permission in addition to this form, and will not proceed without express agreement in writing/ by email from you. I will never sell photos from your shoot that may be identifiable as you.
 

THIRD PARTY DATA

Information Sharing
I may provide the information that I collect and the data generated by website cookies to third parties. Such third parties may use the information to maintain various databases for Drabble and Co to enable me to fulfil photographic services for you and to provide you with information about products and services that may be of interest to you.
 

Links to Third Party Sites (see below).

Emma Drabble endeavours to work with suppliers and bodies that are committed to good privacy practices and who are GDPR compliant. Emma Drabble is not responsible for the privacy practices or the content of those other web sites, please click on supplier names to see individual privacy policies below:

GOOGLE
Hosting & archiving Drabble and Co emails including contact details

Backing up my phone (contacts, apps, not photos), hosting and archiving lucywilliams@mac.com emails and storing contacts from my phone and my hard drive.

Storing contact details, including phone numbers and emails
Storing 'behind the scenes' images taken on my phone
Storing images ready to upload to social media
Accessing apps like Dropbox, VSCO, Pic Tap Go, social media apps etc

Eek Design/ Square Space
Hosting and archiving the 'backend' of Drabble and Co website and blog

Contact details are stored on my desktop and not online. My desktop operates behind a firewall. Emails and contact details are backed up to external hard drive using time machine. My desktop is protected by a password and external hard drives are only used by me.


WE TRANSFER

Occasionally delivering an image or sets of images to clients
 

SHOOTPROOF

Hosting clients' online galleries
Storing and archiving images as part of clients' online image gallery

VARIOUS RETOUCHERS

I sometimes outsource my image retouching work to various retouchers. I will ensure that I confirm the services I use as GDPR compliant before moving ahead with outsourcing. I will ensure that the retouchers do not use mages identifiable as you. If they should want to use these images for portfolio use I will ensure they contact you for permission.

LOXLEY COLOUR

Printing company.  Images and contact/ delivery details are temporarily stored by Loxley Colour whilst preparing them for print and delivery.
 

NPHOTO

Printing company. Images and contact/ delivery details are temporarily stored by NPhoto whilst preparing them for print and delivery.
 

If you purchase an album images and data will be uploaded to the NPhoto servers to enable them to work on images and add them to albums (along with any accompanying text/ captions/ titles)