Privacy Policy

At Nurture You, I respect your personal information and take your privacy seriously. I will only ask for the information that’s truly necessary to provide you with the best possible service. I handle your data with the same care and security that I would expect for my own and only share it with trusted partners when it’s essential to deliver my service to you — for example, sharing your name and address with a professional printing lab to fulfill an order.

Rest assured, your information will never be sold or shared with anyone else for any other purpose. This privacy policy is designed to comply with the EU’s General Data Protection Regulation (GDPR) to ensure fairness and transparency in how your personal data is handled. By using Nurture You, you agree to the collection and use of your data as outlined here.

If you have any questions or concerns about your personal data, please contact Sarah Hoyle, the data controller, at sarah@nurtureyoubrandphotography.co.uk.

1. The Data I Collect

As a data controller, I collect a variety of data to deliver my services and will manage your personal data transparently, fairly, and securely.

I may ask you to provide the following personal data:

First and last name
Address and postcode
Telephone number(s)
Email address
Date of birth (for persons under the age of 13, parental or legal guardian consent is required)

Since I operate a photography business, I also create and manage images as per our contractual agreement(s).

I use the above data to deliver my services and personalise your experience. The lawful bases for collecting and processing your data are:

Consent – when you have given clear consent for me to process your personal data for a specific purpose.
Contract – when the processing is necessary to fulfil a contract with you or take steps at your request before entering into a contract.

2. Cookies

When you visit my website, I collect cookies. Cookies are small pieces of data that websites send to your computer and store on your web browser. They help improve your experience by remembering your preferences (such as items in a shopping cart).

The types of cookies I use include:

Functional cookies – Necessary for the website to function (e.g., login, shopping cart).
Analytical cookies – To understand how you use the website and improve performance.
Marketing cookies – To personalise the content and advertisements you see.

You can manage your cookie preferences via your browser settings or through the cookie consent banner on my website.

3. Which Third Parties Do I Share Personal Data With?

I only share personal data with trusted third parties when it’s necessary to deliver my services to you. These include:

Gmail – To manage email communication. Data is transferred outside of the European Economic Area (EEA) to the United States under Standard Contractual Clauses (SCCs) to ensure your data is protected.
My accountant – To comply with tax regulations. Data is not transferred outside of the EEA.
My website host – Data may be transferred outside of the EEA to the United States under Standard Contractual Clauses (SCCs).
Professional printing labs – To fulfill your order when products are posted directly to you. Data is not transferred outside of the EEA.

There are also certain situations in which I may share access to your personal data without your explicit consent, for example:

If required by law
To protect the life of an individual
To comply with any valid legal process, government request, rule, or regulation

4. Why Do I Share Your Personal Data With the Above?

I share your data only when it’s necessary to deliver my service to you or personalise your experience. If data is transferred to a country outside of the EEA, I will ensure that the transfer is legal and your data is secure by following the EU’s guidelines. Where applicable, I will rely on Standard Contractual Clauses (SCCs) to safeguard the transfer.

5. How Do I Keep Your Personal Data Secure?

I keep your data secure by following internal best practices, including:

Encryption
Secure Socket Layer (SSL) technology when information is submitted online
Access control measures

In the unlikely event of a security breach involving your personal data, I will notify the relevant regulatory body within 72 hours. If your personal data was involved, I will also inform you.

6. Retention of Personal Data

I do not hold personal data longer than necessary. The length of time I keep your data will depend on your relationship with me and whether it is ongoing.

Personal data needed for tax purposes will be retained for up to 7 years after our working contract ends to comply with tax legislation.

After this time, I may archive your photographs and related consent forms indefinitely to handle future requests for replacement images. However, you have the right to request that I delete your images and related data at any time.

7. Children’s Data

I take the protection of children’s data seriously. If I photograph a person under the age of 13, I will require the consent of a parent or legal guardian. Consent will be obtained in writing (electronically or physically) and stored securely alongside the relevant data.

8. Your Rights

You have the following rights under the GDPR:

The right to be informed about the collection and use of your personal data.
The right of access to your personal data and any supplementary information.
The right to have errors in your personal data corrected.
The right to have your personal data erased (except where retention is required by law).
The right to restrict or suppress the processing of your personal data.
The right to move, copy, or transfer your personal data from one IT environment to another.
The right to object to the processing of your personal data in certain circumstances.
Rights related to automated decision-making and profiling.

You can exercise these rights or manage your data by contacting me via:

Email: sarah@nurtureyoubrandphotography.co.uk
Telephone: 07746208663
Postal Address: 124 Peabody Road, GU14 6DZ

9. Changes to My Privacy Policy

I may update this privacy policy from time to time. When I do, I will update the date at the top of the policy and notify you of significant changes. By continuing to use my services after those changes become effective, you agree to be bound by the revised privacy policy.