Introduction

I am Danielle Fowler, a freelance photographer trading as Bee Focused Photography.

ICO Registration Number: ZB439397

We are committed to protecting your privacy and only using your personal information in accordance with relevant UK legislation including the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communication Regulations.

This Privacy Statement tells you what we do with your personal information including where we collect information from, how we use it and how long we store it for. It also explains your rights in relation to this.

Contact Information

Bee Focused Photography is the Data Controller for all data collected, stored and used in relation to the business interests and activities of the company.

We can be contacted in relation to the use of personal data using the details below:

Danielle Fowler

07817553331

beefocusedphotographydf@gmail.com

Your Personal Information

Personal information is data which can be used to identify you. This can include your name, address, email address, telephone number. The information we collect and where it comes from can vary depending on your relationship with the company.

Prospective Clients

When you first make contact with us (via our website, WhatsApp, Email, telephone, social media platforms, booking forms, in person or via other electronic means), we collect or receive information from you to help us to understand your query and provide a quote for products or services, if applicable.

Initially the information we collect and use will be limited to:

• Names and contact details (generally telephone number and email address)
• Occupation and/or type of business (if you are contacting us as a business)
• Records of meetings, conversations and decisions
• Personal information so I can contact you
• And any other information that you choose to share with me

We collect or receive this information from you directly or from publicly available sources such as your website or social media channels.

Clients

When you accept a quote, commission work or purchase a service from the company you will be known by us as a “client”. 

We collect and use information about clients and their businesses (if applicable) to enable us to provide you with products and/or services.

We will also use the information we collect to:

• improve our products and services
• manage client accounts
• fulfil our legal obligations such as taxation
• market the business

We will collect and use the following information relating to clients:

• Names
• Contact details such as telephone numbers, address, email address, social media handles
• Occupation and/or type of business
• Records of meetings, conversations and decisions
• Purchase or service history
• Transaction data (including details about payments to and from you and details of products and services you have purchased)
• Information relating to compliments or complaints
• Marketing preferences
• Correspondence
• Images / photographs 
• Video footage of sessions (when specific consent is given)
• Subset of images stored on a secure online platform 
• Majority of photos are stored on my own secure infrastructure

We collect or receive this information from you directly or from publicly available sources such as your website or social media channels.

In some situations we could receive this data from a third party – for example if someone purchases a gift voucher for you, I may collect name and contact details to deliver the voucher or arrange a photoshoot.

Photography Data

By attending a photoshoot, you agree to your photograph being taken for your own personal use. 

If you agree to your photograph being taken, or take part in a video or audio recording for any purpose other than your own personal use (such as publishing, republishing, transmitting or broadcasting across a range of print, online, broadcast and social media channels to promote the organisation), we will first seek your consent.

When you become a client, we store your images for 1 year from the date of your session. Periodically these images will be deleted from our systems. Some images will be kept for longer for archive and marketing purposes. You can withdraw your consent at any time. 

You can withdraw consent for us to store or use these images by contacting us using the contact details at the top of this privacy notice.

Sensitive or Special Category Data

In some situations we may collect or process special category data. This is personal data which needs more protection due to its sensitive nature such as data concerning your health. We collect or process this data in order to:

• make services accessible and inclusive.

We sometimes collect or process special category data about you. This is personal data which needs more protection due to its sensitive nature. We process the following special category data:

• Race or ethnic origin
• Religious or philosophical beliefs
• Health information
• Information relating to your sexual orientation

We get this information from you (if you choose to share it with us)

Lawful basis

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal data.

Consent – Sometimes we will ask for your consent to process your personal data. Before doing so we will provide you with the necessary information to make an informed decision. Once given, you can withdraw your consent at any time.

We use consent when:

• Collecting health information in order to make events accessible and inclusive.

Legitimate Interest – At times we will rely on the legitimate interest as the lawful basis for processing your personal data. This can only be used where we believe there is a legitimate interest to either you or the company and it must be balanced with your rights and freedoms in relation to your personal information. We may use legitimate interest when:

• using your personal data in order to send you an email about a new service.

Legal Obligation – We may need to collect, process, share or hold personal data in order to meet legal obligations. We use legal obligation:

• for the purposes of tax administration
• if ordered to process your data by a court.

Performance of a Contract – If you enter into a contract with the company such as commissioning work or purchasing a service from us. We will need to collect and process some personal data in order to meet the contractual obligations.

Vital Interest – In limited circumstances, we may process your personal data where it is necessary to protect someone’s vital interests. This means processing information in order to protect a person’s life or prevent serious harm.

We will only rely on this lawful basis where the processing is genuinely necessary to protect life or safety and where the individual is incapable of giving consent or it is not possible to obtain consent in time. Such as:

• Sharing information with healthcare professionals or emergency services where someone requires urgent medical treatment.
• Sharing health or contact information to ensure appropriate treatment can be provided.
• Disclosing information to protect an individual where there is an immediate risk of serious harm or death.
• Using stored emergency contact details where someone has been seriously injured or becomes unconscious.

Sharing your personal data

The organisation may disclose personal and sensitive information to a variety of recipients including:

• Government departments and agencies where we have a statutory obligation to provide information (e.g. HMRC, and the Home Office)
• Third parties who provide systems to help us perform business activities
• Debt collection and tracing agencies
• Courts and tribunals
• Survey organisations
• Reviews and testimonials
• Photographs on social media / website / marketing materials – with prior consent
• From time-to-time we may share your information with a virtual assistant on a contractual basis.

Any disclosures of personal data are always made on case-by-case basis, using the minimum personal data necessary for the specific purpose and circumstances and with the appropriate security controls in place. Information is only shared with those agencies and bodies who have a “need to know” or where you have consented to the disclosure of your personal data to such persons.

Where possible, we will always look to anonymise/pseudonymise your personal information so as to protect confidentiality, unless there is a legal basis that permits us to use it and we will only ever use/share the minimum information necessary.

There are a number of circumstances where we must or can share information about you to comply with or manage:

• disciplinary/investigation processes and serious incident management, including but not limited to referrals to professional bodies, and to seek advice from relevant professions for expert opinions
• legislative and/or statutory requirements
• court orders which may have been imposed on us
• requests for information from the police and other law enforcement agencies for the prevention and detection of crime, and/or fraud if the crime is of a serious nature

Your rights

Under UK data protection legislation you have certain rights in relation to the processing of your personal data.

Your right to be informed – You have the right to be informed about the collection and use of your personal data. This privacy notices aims to fulfil this right supported by information provided by me before we ask for consent to process your personal data (if applicable).

Your right of access – You have the right to ask us for access to or a copy of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for.

Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. In certain circumstances your request may be refused. 

Your right to erasure – You have the right to ask us to delete your personal information also known as the right to be forgotten. There are certain circumstances where this right doesn’t apply such as where legal obligation is the lawful basis for processing the data.

Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information in some situations.

Your right to object to processing – You have the right to object to the processing of your personal data in some cases. For example, you can object to the use of your data for direct marketing.

Your right to data portability – You have the right to ask that we transfer the personal information you gave me to another organisation, or to you.

Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

How long we keep information

We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including the purposes of satisfying any legal, accounting, or reporting requirements. Retention periods for personal data will vary according to the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. 

When you are a potential client we will store your data for one year from the date of your most recent contact with us. Periodically we will delete the data from our systems unless you have become a client.

When you become a client we will store your data for the lifetime of the business relationship plus 7 years from the date of the contract’s termination or last contact whichever is later.

If you have had a voucher purchased for you, we will hold your details until the voucher expires plus 6 months. Periodically we will delete the date from our systems. 

Queries, Concerns or Complaints

If you have any queries, concerns or complaints about our use of your personal data, you can contact us using the contact details at the top of this privacy notice.

If you have a complaint and remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:           

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Version 2
12/05/2026