Privacy & GDPR

This page explains how your personal information is collected, used and protected when you get in touch with, or book, AndreapennA Photography.
I take privacy seriously and only collect what is genuinely needed to provide my services, communicate with you and run the business properly.

Who I am
Andrea Penna trading under the branding AndreapennA Photography
I’m a wedding and event photography based in Salisbury, Wiltshire, UK
If you have any questions about this page or how your data is handled, you can contact me directly using the details at the end of this page.

What information I collect
Depending on how you interact with me, I may collect:
Enquiries and communication
Your name
Email address
Telephone or mobile number
Details you choose to share about your wedding or event
Enquiry forms on the website send information directly to my email inbox and are not stored in a website database.
Bookings, contracts and planning
Names of the couple or individuals booking
Email addresses and telephone numbers
Event details such as date, location and coverage
Questionnaires and signed contracts
These are managed through Unscripted.com, my booking and contract platform.
Photography and galleries
Photographs taken during your wedding or event
Online galleries hosted on Pic-Time.com
Clients have control over gallery privacy and visibility. You can choose whether images are public, private, hidden or shared with friends and family.
Gallery shop orders
If friends or family order prints through Pic-Time, they may be asked to provide:
Email address
Billing and delivery address
This information is used only to fulfil print orders and is handled directly by Pic-Time and its professional print labs.
Payments
Payments are processed securely via Stripe.com, through my booking platform.
I do not see or store card details or bank information at any point.

How your information is used
Your information is used only to:
Reply to enquiries
Prepare quotes, contracts and invoices
Plan and deliver photography services
Create and manage online galleries
Communicate with you before and after your wedding
Maintain business and legal records
Select images for portfolio, website and blog use, where this is covered by your contract
Your data is never sold or used for unrelated purposes.

Legal basis for processing your data
Your information is processed under the following lawful bases:
Taking steps before entering a contract (enquiries and quotes)
Performance of a contract (once you book)
Legal and accounting obligations
Legitimate business administration
The use of images for portfolio and marketing purposes is governed by the terms agreed in your signed contract.

How long information is kept
Enquiry emails
Enquiries that do not result in a booking are deleted.
Enquiries that lead to a confirmed booking are retained.
Contracts and invoices
Retained as part of normal business and legal records.
Photographs and galleries
Only selected and delivered images are retained.
Images not chosen during the culling process are permanently deleted.
Online galleries remain available for a minimum of one year.
Backups
Backups reflect the current state of my working system.
If data is deleted, it remains recoverable from backup for up to one year, after which it is permanently removed.

Who your information is shared with
Your data is shared only with highly trusted platforms required to deliver my services:
Email provider (Microsoft Outlook) for communication
Unscripted.com for contracts and questionnaires
Pic-Time.com for galleries and print fulfilment
Stripe.com for secure payment processing
Backblaze.com for encrypted cloud backup (images only)
Showit.com / WordPress.com for website display only (no enquiry storage)
These providers operate their own security and data protection measures.

How your data is protected
Access to all systems is password protected
Only I have access to client information
My computer and accounts are private and secured
Professional platforms are used rather than manual storage
Backups are encrypted, and the backup provider cannot access my files
Payment information is handled entirely by Stripe

Your rights
Under UK GDPR, you have the right to:
Request access to your personal data
Ask for corrections to inaccurate information
Request deletion of your data, where legally possible – please note that this will permanently remove access to your online gallery
Restrict or object to certain uses of your data
Requests can be made by contacting me directly. I will always respond clearly and reasonably.

Cookies and analytics
This website may use standard analytics tools to understand general website usage.
No personal enquiry data is stored via cookies.

Contact
If you have any questions about privacy or data protection, please contact:

AndreapennA Photography
Email: info@andreapenna.co.uk