XF Photography – Privacy Policy

Last updated: 21st march 2026

XF Photography (“I”, “me”, “my”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what information I collect, how I use it, how it is stored, and your rights under UK GDPR. By booking a session, completing a form, or accessing my website or client galleries, you agree to the practices described in this policy.

1. Who I Am

Business Name: XF Photography

Owner: Xavier

Location: Swindon, United Kingdom

Email: xf_photography@outlook.com

I operate as a sole trader providing motorbike photography services.

2. What Personal Data I Collect

Information you provide directly:

• Name

• Email address

• Phone number

• Location or home town

• Motorbike details

• Booking information

• Waiver/consent form responses

• Payment information (processed securely by Stripe)

• Messages or enquiries you send

Information collected automatically:

• IP address

• Device information

• Browser type

• Cookies and analytics data

Images and media:

• Photographs taken during your session

• Images you upload (if applicable)

3. How I Use Your Data

• Manage bookings and communicate with you

• Provide photography services

• Deliver galleries and digital files

• Process payments securely

• Maintain tax and accounting records

• Improve my website and services

• Enforce my contract and waiver terms

• Protect my business from fraud or misuse

I do not sell or share your data with third‑party marketers.

4. Legal Basis for Processing

• Contract: to provide the services you have booked

• Consent: for promotional use of images

• Legal obligation: tax and accounting requirements

• Legitimate interest: to operate and protect my business

5. How Your Data Is Stored

Your data may be stored in:

• Pixieset (galleries, website, forms)

• Stripe (payments)

• Email (Outlook)

• Local encrypted storage

• Cloud backup services

All third‑party services used comply with GDPR.

6. How Long I Keep Your Data

• Client information: up to 6 years

• Emails and enquiries: up to 2 years

• Photos: indefinitely unless you request deletion

• Waivers/consent forms: indefinitely

You may request deletion unless I am legally required to retain certain information.

7. Sharing Your Data

Your data may be shared with trusted service providers:

• Pixieset

• Stripe

• Email providers

• Cloud storage

These providers process your data only on my behalf. I do not share your data with advertisers or unrelated third parties.

8. Your Rights Under UK GDPR

You have the right to:

• Access your data

• Correct inaccurate information

• Request deletion

• Restrict processing

• Object to processing

• Request a copy of your data

• Withdraw consent for promotional use

To exercise your rights, email: xf_photography@outlook.com

9. Cookies

My website and Pixieset galleries use cookies for functionality, analytics, and security. You can disable cookies in your browser settings, but some features may not work correctly.

10. Payments

All payments are processed securely through Stripe. I do not store or have access to your full card details. Stripe is PCI‑compliant and GDPR‑compliant.

11. Image Rights & Usage

• You retain personal rights to your images

• I retain copyright as the photographer

• Promotional use requires your consent via waiver

• You may request removal of images from social media or my website

• A post‑publication privacy fee may apply as outlined in your contract

12. Contact

If you have any questions about this Privacy Policy or your data, contact:

xf_photography@outlook.com