PRIVACY POLICY

Sally Mason Photography is committed to protecting your personal information and being transparent about how it is used. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to your personal data.

Who We Are
Sally Mason Photography is a UK-based sole trader photography business.

Email: sally.mason@zen.co.uk

Business correspondence address: Available upon request.
For the purposes of UK data protection law, Sally Mason Photography is the data controller responsible for your personal data.


Information We Collect
We may collect and process personal information when you place an order, contact us, or interact with the website.

When you place an order, this may include your name, billing address, delivery address, email address, telephone number (if provided), order details and payment confirmation. We do not store full debit or credit card details.

When you contact us, we may collect your name, email address and any information you include in your message.

When you visit our website, certain technical information may be collected automatically by our hosting provider, Squarespace, including IP address, browser type, device information and pages visited. This information is used for website security, performance monitoring and to understand general site usage.


How We Use Your Information
We use your personal data to process and fulfil print orders, deliver orders within the UK and internationally, communicate with you about your purchase, respond to enquiries, and comply with legal and tax obligations.

If you have purchased prints from us or requested information about our products, we may occasionally email you about similar photographic prints, collections or exhibitions, unless you have opted out of receiving such communications. You can opt out at any time by replying to any email with “unsubscribe” or by contacting sally.mason@zen.co.uk.


Lawful Basis for Processing
Under UK data protection law, we rely on the following lawful bases: contract (to process and deliver your order), legal obligation (to maintain accounting and tax records), and legitimate interests (to operate and manage the business).


Payments and Third-Party Services
Our website is hosted by Squarespace.

Payments are securely processed by PayPal, Stripe and Klarna. We do not receive or store your full payment card details. These providers process your personal data in accordance with their own privacy policies.

We may also share relevant information with delivery providers for the purpose of fulfilling your order.


International Transfers
As we ship internationally and use third-party service providers, your personal data may be processed outside the UK. Where this occurs, appropriate safeguards are in place in accordance with UK data protection law.


Data Retention
We retain personal data only for as long as necessary. Order and financial records are kept for six years for HMRC and legal purposes. Other personal data, including enquiries, is retained only for as long as reasonably required for business purposes and then securely deleted.


Cookies
Our website uses essential cookies to ensure it functions correctly, including secure checkout and shopping cart functionality. These cookies are necessary for the operation of the website and do not require prior consent.


Your Rights
Under UK data protection law, you have the right to request access to your personal data, request correction of inaccurate data, request deletion of your personal data where applicable, object to certain processing, request restriction of processing, and lodge a complaint with the Information Commissioner’s Office (ICO).

If you would like to exercise any of these rights, or if you would like to be removed from our records where possible, please contact sally.mason@zen.co.uk.
You also have the right to lodge a complaint with the ICO at www.ico.org.uk, although we would welcome the opportunity to address your concerns directly first.