Privacy Policy

Last updated: 16 July 2026

Anna McGrath Photography ("I", "me", "my") is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what information I collect, why I collect it, how it is used, who it is shared with, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using this website, contacting me or booking my services, you agree to the practices described in this Privacy Policy.

1. Who is responsible for your data?

Data Controller

Anna McGrath Photography

Website: www.annamcgrathphotography.co.uk

Email: anna@annamcgrathphotography.co.uk

If you have any questions about this Privacy Policy or how your personal information is handled, please contact me using the email address above.

2. What information I collect

Depending on how you interact with my business, I may collect:

Your name
Email address
Telephone number
Postal address (where required)
Wedding or session details (such as date, venue or location)
Information you provide through contact forms or website chat
Messages exchanged by email or WhatsApp
Booking information
Contracts and questionnaires
Invoices and payment records
Photographs created during your photography session
Any other information you choose to provide.

3. How I collect your information

I collect personal information when you:

Complete a contact form on my website
Contact me through the website chat feature
Email me
Contact me via WhatsApp
Book a photography session
Complete questionnaires or contracts
Use my online booking system
Purchase photography services.

4. Why I collect your information

I use your information to:

Respond to enquiries
Communicate with you about your booking
Prepare quotations
Arrange photography sessions
Send contracts and invoices
Deliver your photographs
Provide online galleries
Manage bookings
Meet legal and accounting obligations
Protect my business against fraud or misuse
Improve my services.

I do not sell your personal information to third parties.

5. My lawful basis for processing

Under UK GDPR, I process your personal information using one or more of the following lawful bases:

Legitimate Interests

To respond to enquiries, communicate with prospective clients and operate my photography business efficiently.

Contract

To provide photography services you have booked, including preparing contracts, invoices, questionnaires and delivering your images.

Legal Obligation

To comply with tax, accounting and legal record-keeping requirements.

Consent

Where you have given permission for your photographs to be used in my portfolio, website, social media or other promotional materials.

You may withdraw your consent for promotional use at any time.

6. Third-party services I use

To provide my services, I use trusted third-party providers who process personal information on my behalf.

These include:

Wix

My website is hosted by Wix. Information submitted through my website, including contact forms and chat, is processed by Wix.

Google Workspace (Gmail)

I use Gmail to communicate with clients and securely store email correspondence.

If you choose to communicate with me through WhatsApp, your messages and contact information are processed by WhatsApp (Meta) in accordance with their Privacy Policy.

Pixieset

Pixieset is used for:

Client galleries
Contracts
Invoices
Questionnaires
Image delivery

Use Session

I use Use Session to manage bookings for family photography sessions.

Each of these providers has its own privacy policy explaining how your information is processed.

7. International transfers

Some of the third-party providers I use may process personal information outside the United Kingdom.

Where this happens, they use appropriate safeguards to protect your information in accordance with UK data protection law.

8. How long I keep your information

I only keep personal information for as long as necessary.

Typical retention periods include:

Enquiries that do not become bookings: up to 12 months.
Contracts, invoices and financial records: up to 6 years to comply with UK tax and accounting requirements.
Client photographs and galleries: retained while necessary to provide services and archive client work, unless you request deletion where legally possible.

9. Client galleries

Your photographs are delivered through secure online galleries hosted by Pixieset.

Access may require your email address and, where applicable, a password chosen by you or provided by me.

10. Wedding guests and photographs

Wedding photography naturally includes guests attending the event.

Photographs are taken as part of documenting the day and are processed under the lawful basis of legitimate interests, allowing me to fulfil my contract with my clients and provide a complete photographic record of their wedding.

Where practical, couples are encouraged to make guests aware that professional photography will take place.

If you have concerns about a photograph in which you appear, please contact me and I will consider your request carefully.

11. Promotional use of photographs

I respect every client's privacy.

I will only use photographs for my website, portfolio, social media, printed materials or other promotional purposes where you have given permission, usually through your photography contract or a separate agreement.

If you later change your mind, please contact me and I will remove your images from future promotional use wherever reasonably possible. Please note that it may not be possible to remove images that have already been printed or published by third parties.

12. Keeping your information secure

I take appropriate technical and organisational measures to protect your personal information.

These include:

Password-protected devices
Secure cloud services
Encrypted backups where appropriate
Restricted access to client information
Secure online galleries.

While no online system can be guaranteed completely secure, I take reasonable steps to protect the information entrusted to me.

13. Cookies

My website uses cookies provided by Wix and, where applicable, other trusted services.

Cookies help the website function correctly and may also collect anonymous information about how visitors use the site.

You can manage or disable cookies through your browser settings.

14. Your rights

Under UK GDPR, you have the right to:

Request access to your personal information.
Request correction of inaccurate information.
Request deletion of your personal information where appropriate.
Request restriction of processing.
Object to certain types of processing.
Request a copy of your personal information in a portable format where applicable.
Withdraw consent where processing relies on your consent.

To exercise any of these rights, please email:

anna@annamcgrathphotography.co.uk

15. Complaints

If you are unhappy with how I have handled your personal information, please contact me first so I can try to resolve your concerns.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

16. Changes to this Privacy Policy

I may update this Privacy Policy from time to time to reflect changes to my business or legal requirements.

The latest version will always be available on this website.