Visitors to my website and archive/client proofing galleries:
My clients and suppliers
In order to operate my business and supply the services I provide, I maintain electronic records of clients and suppliers - though these records are not collected through the websites and currently ONLY via direct agreement, contracts, and networks. This can include but is not limited to, name, organization, address, telephone numbers, and email addresses. I may keep copies of correspondence. I WILL NOT disclose this information to any third parties unless I have received consent to do so.
People I photograph
A photo that directly or indirectly identifies a person constitutes personal information under the General Data Protection Regulation. I share photos with the client that commissioned me to take the photo and any other person or organization as instructed by them. Personal information of the person or people in a photo is either embedded within the image or accompanies the photo as text. The purpose of this is to identify them to the commissioning client and any subsequent publication. This is commonly known as a caption. Details such as name, age, and the area in which the person or people live may be included in the caption. This information is usually obtained directly from the individual when they have been photographed and/or via model release or other similar agreements. I do not use this data for any other purpose and it is not shared with any third party.
Exemption from GDPR
When I produce photos and associated personal data for the purpose of academic artistic expression I am exempt from the GDPR under Article 85 'Processing and freedom of expression and information'.
Keeping data secure
The data I obtain is held in ways that prevent unauthorized access. Data held as photos and the corresponding captions are retained indefinitely. This is part of the service I provide to clients for the purpose of providing them with copies of the photos should they be required in the future.
Under the Data Protection Act 1998, individuals have rights that they can exercise in relation to the information I hold. You can read more about these rights here: https://ico.org.uk/for-the-public/is-my-information-being-handled-correctly/