GDPR Policy

Last Updated: January 2024

Introduction

John Hunt Photography Limited is committed to protecting the privacy and security of personal information. This GDPR Policy explains how we collect, use, and protect personal data in compliance with the General Data Protection Regulation (GDPR).

Data Controller

John Hunt Photography Limited
55 Stand Lane, Radcliffe
Manchester M26 1LQ
Email: kerry@jhpschools.com
Phone: 0161 723 5170

What Data We Collect

We collect and process the following types of personal data:

• Student Information: Names, class, year group, and photographs
• Parent/Guardian Information: Names, email addresses, postal addresses, and phone numbers
• School Information: School name, contact details, and staff contacts
• Payment Information: Payment card details (processed securely by our payment provider)

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: Parents/guardians provide explicit consent for their child to be photographed and for the processing of their data
• Legitimate Interests: Processing necessary for the purposes of our business operations
• Contract: Processing necessary to fulfill contracts with schools and parents

How We Use Your Data

We use personal data for the following purposes:

• Providing school photography services
• Processing and fulfilling photo orders
• Communicating with parents about their orders
• Managing school accounts and commission payments
• Improving our services
• Complying with legal obligations

Data Sharing

We may share personal data with:

• Schools: To coordinate photography sessions and manage accounts
• Payment Processors: To process secure payments
• Delivery Services: To deliver photo orders to homes
• Print Suppliers: To fulfill photo orders

We do not sell personal data to third parties.

Data Retention

We retain personal data for the following periods:

• Photographs: Stored securely for one academic year to allow for late orders
• Order Information: Retained for 7 years for accounting and legal purposes
• Marketing Consent: Until consent is withdrawn

Your Rights

Under GDPR, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restrict Processing: Request limitation of processing in certain circumstances
• Right to Data Portability: Request transfer of your data to another provider
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent at any time

Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

• Secure encrypted storage systems
• Access controls and authentication
• Regular security assessments
• Staff training on data protection
• Secure payment processing

Children's Privacy

We take extra care when processing children's data. Parental consent is obtained before photographing children, and photographs are only accessible to authorized parents/guardians through secure login credentials.

Contact Us

For any questions about this GDPR Policy or to exercise your rights, please contact us:

Email: kerry@jhpschools.com
Phone: 0161 723 5170
Post: John Hunt Photography Limited, 55 Stand Lane, Radcliffe, Manchester M26 1LQ

Complaints

If you have concerns about how we process your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Phone: 0303 123 1113