Glavind Strachan Photography - Privacy Policy

Privacy Policy

Last updated: February 2026

(operated by Paul Harris, sole trader trading as Glavind Strachan Photography)

This Privacy Policy explains how Glavind Strachan Photography (“I”, “we”, “us”, “our”) collects, uses, and protects your personal information when you visit this website or contact us.

We are committed to protecting your privacy and handling your data transparently and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Glavind Strachan Photography (Paul Harris)
Devon, England, United Kingdom

Email: photography@glavindstrachan.com

For the purposes of data protection law, we are the data controller responsible for your personal data.

2. Information We Collect

We may collect and process the following types of personal information:

Information you provide directly

  • name

  • email address

  • contact details submitted via forms

  • booking or enquiry information

  • purchase details when ordering prints or services

Information collected automatically

When you visit the website, certain technical information may be collected automatically, including:

  • IP address

  • browser type and version

  • device information

  • pages visited and time spent on the site

  • referring website addresses

This information helps us understand how visitors use the website and improve user experience.

3. How We Use Your Information

We use personal information to:

  • respond to enquiries and messages;

  • process orders and deliver products or services;

  • manage bookings and workshops;

  • improve website performance and content;

  • comply with legal obligations;

  • prevent fraud or misuse of the website.

We only collect information that is necessary for these purposes.

4. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

  • Contract – to fulfil orders or provide requested services.

  • Legitimate interests – to operate and improve the website and communicate with visitors.

  • Consent – where you opt in to marketing communications.

  • Legal obligation – where processing is required by law.

You may withdraw consent at any time.

5. Payments

Payments are processed securely by third-party payment providers (such as Stripe, PayPal, or similar services).

We do not store or have access to your full payment card details.

These providers process your data according to their own privacy policies.

6. Website Hosting and Third-Party Services

This website is hosted by Squarespace (or equivalent platform), which may process data on our behalf to provide hosting and website functionality.

We may also use trusted third-party services for:

  • website analytics;

  • email communication;

  • ecommerce fulfilment;

  • spam protection and security.

These providers only process data as necessary to deliver their services.

7. Analytics and Cookies

We may use analytics tools to understand website usage and improve performance.

Cookies are small files stored on your device that help websites function effectively.

Cookies may include:

  • essential website functionality cookies;

  • analytics cookies measuring anonymous visitor behaviour.

You can control or delete cookies through your browser settings.

Where required, cookie consent tools allow you to manage preferences when visiting the site.

8. Marketing Communications

We will only send marketing emails if you have:

  • explicitly subscribed, or

  • requested information about services.

You can unsubscribe at any time using the link provided in emails or by contacting us directly.

We do not sell or rent personal data to third parties.

9. International Visitors

This website may be accessed worldwide.

Where personal data is transferred outside the UK, we take reasonable steps to ensure appropriate safeguards are in place through reputable service providers operating under recognised data protection standards.

10. Data Retention

We keep personal data only for as long as necessary:

  • enquiry emails: typically up to 24 months;

  • customer transaction records: retained as required for accounting and legal obligations;

  • marketing subscriptions: until you unsubscribe.

Data is securely deleted when no longer required.

11. Your Data Protection Rights

Under UK GDPR, you have the right to:

  • access your personal data;

  • request correction of inaccurate data;

  • request deletion of your data;

  • restrict or object to processing;

  • request transfer of your data where applicable;

  • withdraw consent at any time.

To exercise these rights, contact us at photography@glavindstrachan.com

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

https://www.ico.org.uk

12. Data Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or misuse.

However, no internet transmission can be guaranteed completely secure.

13. Links to Other Websites

This website may contain links to external websites. We are not responsible for the privacy practices or content of those websites.

Please review their policies separately.

14. Children’s Privacy

This website is not intended for children under 13, and we do not knowingly collect personal data from children.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal or operational changes.

The latest version will always appear on this page with the updated date shown above.

16. Contact

If you have questions about this Privacy Policy or how your data is handled, please use my Contact Page

Return to Terms & Conditions