Privacy Policy — Louise Murnane Photography

Effective date: July 2026
Business name: Louise Murnane Photography
ICO Registration Number: ZB716504
Email: info@louisemurnanephotography.co.uk
Website: www.louisemurnanephotography.co.uk

1. Who I am

Louise Murnane Photography is the Data Controller responsible for your personal data.

I am registered with the Information Commissioner’s Office (ICO) in accordance with UK data protection law.

This Privacy Policy explains how I collect, use and protect your personal information when you use my website, contact me, or book photography services.

2. What information I collect

I may collect and process the following personal data:

  • Name

  • Address

  • Email address

  • Telephone number

  • Booking and enquiry details

  • Information provided in questionnaires or contracts

  • Payment and invoice information

  • Client communication records

  • Photographs and digital images (including images of children and families)

  • Marketing preferences (if you opt in)

I do not store full payment card details.

3. How I collect your data

I collect personal data when you:

  • Contact me via my website, email or social media

  • Make an enquiry

  • Book a photography session

  • Complete contracts or questionnaires via my booking system

  • Attend a photography session

  • Purchase images or products

  • Subscribe to marketing emails

  • Use my website (cookies and analytics where applicable)

4. How I use your information

I use your personal data to:

  • Respond to enquiries

  • Manage bookings and contracts

  • Provide photography services

  • Deliver online galleries and images

  • Process payments and invoices

  • Communicate with you about your booking

  • Send marketing emails (only where you have opted in)

  • Maintain business and financial records

  • Improve my services and website

5. Lawful basis for processing

I rely on the following lawful bases under UK GDPR:

Contract – to provide photography services you have booked.

Legal obligation – to meet tax, accounting and legal requirements.

Legitimate interests – to run and grow my business, respond to enquiries, and maintain records.

Consent – where required, for example:

  • sending marketing emails

  • using your images for portfolio, website or social media (where consent is used as the lawful basis)

You may withdraw consent at any time.

6. Children’s data

Many photography sessions involve babies and children, including newborn, family and Cake Smash sessions.

Where personal data relates to children, it is collected only where necessary for the provision of services and always with the consent or authority of a parent or legal guardian.

7. Photography and image use

Photographs may contain personal data.

Images are used to provide photography services you have booked.

Where I wish to use images for marketing or portfolio purposes (such as website, social media or promotional materials), I will only do so where appropriate consent has been given or another lawful basis applies.

Consent for marketing use of images is optional and separate from your booking.

You may withdraw consent for future use at any time by contacting me. This will not affect any use already made while consent was valid.

8. Booking system

I use uSession to manage:

  • bookings

  • contracts

  • questionnaires

  • invoices

  • client galleries

uSession processes personal data on my behalf to enable me to deliver photography services.

uSession Privacy Policy: https://usesession.com/privacy

9. Payments

I use secure third-party payment providers:

I do not store or have access to full payment card details.

These providers handle payment data securely in accordance with their own privacy policies.

10. Sharing your data

I do not sell your personal data.

I may share your data with trusted third-party service providers where necessary, including:

  • uSession (booking and gallery system)

  • Stripe and LoPay (payment processing)

  • Website hosting provider

  • Email service providers

  • Cloud storage providers

  • Accounting software

  • Analytics tools (if used)

All third parties are required to process your data securely and only for the services they provide.

11. International transfers

Some service providers (including Stripe and uSession) may process data outside the UK.

Where this occurs, appropriate safeguards are used, such as UK adequacy regulations or approved international transfer mechanisms (including the UK IDTA).

12. How long I keep your data

I retain personal data only for as long as necessary:

  • Enquiries not resulting in booking: up to 12 months

  • Booking and invoice records: 6 years (tax/legal requirement)

  • Client images: retained for a reasonable period to allow delivery and client access (clients are responsible for downloading and backing up images)

  • Marketing data: until you unsubscribe or withdraw consent

Data is securely deleted or anonymised when no longer required.

13. Marketing

I only send marketing emails to individuals who have explicitly opted in.

You can unsubscribe at any time using the link in any email or by contacting me directly.

I do not send unsolicited marketing.

14. Cookies

My website uses cookies and similar technologies to:

  • ensure the website functions correctly

  • improve user experience

  • analyse website traffic

  • support embedded content or third-party services

Where required, consent will be requested before non-essential cookies are used.

You can manage cookies through your browser settings or cookie preferences on the website.

15. Your rights

Under UK GDPR, you have the right to:

  • access your personal data

  • correct inaccurate data

  • request deletion of your data (where applicable)

  • restrict processing

  • object to processing

  • request data portability

  • withdraw consent where applicable

To exercise any of these rights, contact:

info@louisemurnanephotography.co.uk

16. Data protection complaints

If you have concerns about how I handle your personal data, please contact me first so I can resolve the issue.

I will:

  • acknowledge your complaint within 30 days

  • investigate it promptly and fairly

  • respond with an outcome and any action taken

If you are not satisfied with my response, you may contact the Information Commissioner’s Office (ICO):

https://www.ico.org.uk

17. Changes to this policy

I may update this Privacy Policy from time to time.

The latest version will always be available on my website.

18. Contact

If you have any questions about this Privacy Policy or your data, please contact:

Louise Murnane Photography
Email: info@louisemurnanephotography.co.uk
Website: www.louisemurnanephotography.co.uk

Last updated: July 2026