Privacy notice

What Axis Photography does with personal information, written plainly. Last reviewed September 2026.

This covers this website. If you have booked a shoot, your contract and any separate agreement about how your photographs may be used sit alongside this and are not replaced by it.

Who is responsible

Axis Photography, Tamworth, Staffordshire, is the data controller. Contact: hello at axisphotography dot co dot uk or 0333 335 5336.

To confirm: your registered business name and address, whether you are registered with the ICO as a data controller (most photography businesses handling client galleries need to be — it is currently £40 a year), and your registration number if so. A solicitor should look over this page before you rely on it.

What we collect, and why

When you send an enquiry

The contact form asks for your name, email address, and whatever you choose to tell us about the day. We use it to reply to you and to quote for the work. The lawful basis is taking steps at your request before entering into a contract.

The form also records the time it was submitted and runs it past Google reCAPTCHA, purely to tell people from bots. That is our legitimate interest in not being buried in spam.

If you become a client

We hold your name, contact details, the details of your booking, and the photographs themselves. Client galleries are private, password-protected, and not indexed by search engines. The lawful basis is performing our contract with you.

Client accounts have a password, which is stored only as a one-way hash — we cannot see it, and nor can anyone who obtains a copy of the database.

If you agree to visitor statistics

Google Analytics counts visits and shows which work people look at. It runs only if you agree, and the lawful basis is your consent, which you can withdraw at any time from Cookie settings at the foot of any page. Advertising features are switched off. The cookie policy sets out exactly what this involves.

What the web server records anyway

Like every website, the server keeps a log of requests, including IP addresses, for security and troubleshooting. We do not use these to identify individuals.

To confirm: how long your host keeps server logs. Ask them, and put the number here.

Photographs of you

Photographs of identifiable people are personal data. Where we photograph a wedding, an event or a school, we do so under our contract with whoever commissioned the work. Whether any photograph may be shown publicly — on this site, in the portfolio, or on social media — is a separate question, and one we ask rather than assume. If you appear in a photograph on this site and would rather you did not, tell us and we will take it down.

To confirm: school and event work usually needs a written agreement with the school or organiser covering who holds consent for the children or attendees photographed, and how long images may be kept. If you do not have that in writing, it is the most important gap on this page.

Who else sees it

• Our web host, who stores the site and its database.
• Our email provider, who carries enquiry notifications and any reply.
• Google, for reCAPTCHA on the contact form, and for Analytics if you agreed to it.

We do not sell personal information, and we do not share it for anyone else's marketing.

To confirm: name your host and email provider here, and check each has a data processing agreement in place. If any of them stores data outside the UK or EEA, that transfer needs to be covered — this is the point most small-business privacy notices skip.

How long we keep it

• Enquiries that do not become bookings — deleted once they are clearly going nowhere.
• Client records and photographs — kept while the gallery is live and for as long as you may reasonably want the work again.
• Records needed for tax — six years, as HMRC requires.

To confirm: put real periods on the first two. "As long as necessary" is not an answer a regulator accepts. Something like "enquiries: 12 months; client galleries: 3 years after delivery, then archived offline" is the kind of thing that is wanted.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, object to how we are using it, or ask for it in a portable form. Where we rely on your consent — visitor statistics — you can withdraw it at any time without giving a reason and without any effect on what came before.

Ask by emailing hello at axisphotography dot co dot uk. We will respond within one month. If you are not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes

If this notice changes in a way that affects you, the change will be reflected here and the review date above will be updated. Where a change affects what you have consented to, you will be asked again rather than opted in quietly.