| Privacy Policy Last updated: October 2026 This policy explains what personal information I collect when you visit my website, buy from my shop, contact me or commission my services, and how I use and protect it. I am the data controller, which means I decide how your information is used. I follow UK data protection law (the UK GDPR and the Data Protection Act 2018). 1. Who I am Neil Kenyon, trading as Neil Kenyon Photography, London, UK. Contact: neil@njkcreative.com 2. What information I collect When you contact me or commission work your name, company, email address, phone number and any details you include in emails or messages project details, site addresses and access information needed to carry out a shoot When you buy from the shop your name, delivery and billing address, email address and order details, collected through WooCommerce payment is processed by PayPal. I do not see or store your full card or bank details. PayPal handles your payment information under its own privacy policy. When you visit the website technical information such as IP address, browser type, device and pages visited, which is recorded in server logs by my hosting provider and used for security and to keep the site working I do not currently use analytics or advertising trackers For accounting and invoicing client names, company contact details, invoice and payment records, kept in my accounting software, WP Ledger, which runs within my own WordPress installation 3. How and why I use your information Responding to enquiries and providing quotes: legitimate interests, and steps taken before entering a contract. Carrying out photography commissions and licensing images: performance of a contract. Fulfilling shop orders and delivery: performance of a contract. Invoicing, chasing payment and keeping accounts: performance of a contract, and legal obligation. Keeping tax and accounting records for HMRC: legal obligation. Keeping the website secure and working: legitimate interests. 4. Who I share your information with I only share information where needed to run my business, with: my website hosting provider, 123 Reg my email provider, [email provider] PayPal, to process shop payments print or delivery partners, where needed to fulfil a shop order my accountant, where applicable HMRC or other authorities, where the law requires it These providers only act on my instructions or under their own data protection obligations. Where any of them process data outside the UK, this is done with appropriate safeguards in place. 5. How long I keep it Accounting and invoice records: 6 years from the end of the relevant financial year, as required for tax purposes. Shop orders: 6 years, for accounting and legal reasons. Enquiries and project emails: up to 3 years after the last contact, then deleted. Website server logs: as set by my hosting provider. 6. Cookies My website uses only essential cookies, such as those that make the shop basket and checkout work. These are necessary for the site to function and do not require consent. I do not use analytics, advertising or tracking cookies. If this changes, I will update this policy and ask for your consent first. You can block or delete cookies in your browser settings, but parts of the shop may not work as a result. 7. Your rights You have the right to: ask for a copy of the information I hold about you ask me to correct anything that is wrong ask me to delete your information (where I am not required to keep it) ask me to restrict or stop using it in certain cases object to my use of it based on legitimate interests ask for your information to be provided in a portable format To use any of these rights, email neil@njkcreative.com. I will reply within one month. 8. Security I take reasonable steps to protect your information, including secure hosting, password-protected accounts and keeping my software up to date. No online system is completely secure, but I will deal promptly with any breach and notify you and the ICO where required. 9. Complaints If you are unhappy with how I have handled your information, please contact me first at neil@njkcreative.com. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113. 10. Changes to this policy I may update this policy from time to time. The latest version will always be on this page, with the date it was last changed. |
