Privacy Policy

1. The short version

Boudoir photographs are very personal, and we treat them that way. We collect only what we need to look after you, take your booking, create and deliver your images, and run our business. We never use your images for marketing unless you give us separate written permission. We do not sell your information, and we do not use your images to train artificial intelligence models.

This notice explains what we collect, why, who we share it with, how long we keep it, and your rights.

2. Who we are

The "controller" of your personal information (the organisation responsible for it) is:

Photography by Liz Ltd, trading as Rebelliously Sensual Registered in England and Wales, company number 07586361. Registered office: Low Barn, Llancayo Court, Usk. NP15 1HY Studio: The Cowshed, Llancayo Court, Usk, Monmouthshire, NP15 1HY Email: liz@rebelliously-sensual.co.uk ICO registration number: C2049587

You can contact us about anything in this notice using the details above. We do not have a Data Protection Officer, as we are not required to appoint one, and your queries will be handled by Liz Harris

3. What information we collect

Information you give us

• Contact details: your name, email address, phone number or WhatsApp number, and address if we post anything to you.

• Booking and payment details: the package you choose, dates, payments and instalments. We do not store your full card details. Payments are handled by [payment provider].

• Your consultation: your preferences, outfits, styling ideas, any areas you would like us to treat with extra care, and anything else you choose to tell us so that we can look after you.

• Health information you choose to share: for example allergies or skin sensitivities for make-up, or an injury that affects posing. We only ask for what we need to keep you safe and comfortable.

• Messages: emails, WhatsApp or social media messages, and anything you tell us at your viewing.

• Age check: we may ask to see photo ID to confirm you are 18 or over. [We look at it but do not keep a copy or record any ID number.]

• Gift purchases: if you buy a voucher or package for someone else, the name and contact details of the recipient.

• Friend mini sessions: your friend's name and contact details, which we will ask for directly from them.

• Marketing choices: whether you would like to hear from us, and your image consent choices.

• Reviews and testimonials, if you choose to give them.

Information we create

• Photographs and videos taken during your session, including the edited images, galleries and slideshows we create for you.

• Your selections and orders: the images you choose and the albums, prints or wall art you order.

• Business records: invoices, receipts and accounting records.

Information collected through our website

• Technical information such as your IP address, device and browser type, and pages visited, collected through cookies or similar technologies. See clause 10.

Boudoir photographs are intimate. Although they are not automatically "special category" data under the law, we handle them with the highest level of care, as if they were.

4. Why we use your information, and our legal reasons

Under UK data protection law we must have a "lawful basis" for using your information. Ours are:

What we do: Take your booking, manage payments, run your consultation and session, edit and deliver your images, process orders to provide the experience you booked.

Keep accounting and tax records, deal with HMRC and Companies House, handle legal claims to meet our legal duties.

Legal obligation: Check you are 18 or over. To make sure we only photograph adults. Legitimate interests (protecting our business and clients) and legal obligation.

Where relevant we back up your images, keep our systems secure, respond to enquiries, improve our service, deal with complaints. To run our business safely and well. Legitimate interests, which we have balanced against your rights.

Collect and use health information (for example allergies) to keep you safe during hair, make-up and the session.

Explicit consent (you can withdraw this at any time) Use your images for marketing: our website, social media, portfolio, adverts, competitions, workshops or print. To promote our work Consent, given separately on our Image Consent Form.

Send you marketing emails or messages. To tell you about offers and news. Consent, or legitimate interests for our own past clients about similar services (you can always opt out).

Publish your review or testimonialTo show others what the experience is likeConsent

You can withdraw any consent at any time (see clause 9). Withdrawing does not affect anything we did before.

5. Who we share your information with

We never sell your information. We share it only with people who help us provide the Experience, and only what they need:

• Our hair and make-up artist(s), who ware independent, for your session.

• Print and album suppliers who make your products, such as SIM Imaging, Graphistudio, Loxley and Saal Digital

• Technology providers, such as our website host (Hostinger), online gallery provider (Pixieset), email and booking software (Hosting and Pixieset), and payment provider (Stripe/ Paypal).

• WhatsApp (Meta) if you message us there, in line with their own privacy practices.

• Our accountant and professional advisers, and our insurers, if needed.

• Authorities and the law: HMRC, the police or a court, where we are legally required to.

• A buyer of our business, if the business is ever sold, so long as your information stays protected.

These providers act on our instructions and are bound by contracts to keep your information secure. If you give us written permission, we may also share selected images on our website, social media or in print.

6. International transfers

Some of our providers (for example website hosting, cloud storage and email) may store or process information outside the UK. When this happens, we make sure appropriate protection is in place, such as the UK's recognised adequacy arrangements, the UK Extension to the EU-US Data Privacy Framework, or the International Data Transfer Agreement or Addendum. You can ask us for details.

7. How long we keep your information

We keep your information only as long as we need it. Our current periods are:

Information: How long. Unselected and unedited images 12 months after your viewing, then deleted. Your edited gallery (online)[12 months] from delivery. Archived edited images and your selections[2 years], so we can supply reprints or replacements, unless you ask us to delete them sooner. We do keep a selection for marketing purposes if you have given your permission for us to use them.

Consultation notes and any health information[12 months] after your session, then deleted. Booking, payment and accounting records 6 years from the end of the financial year, for tax and company law. Enquiries that did not become a booking [12 months]. Marketing list - umtil you unsubscribe or ask us to stop. Image consent records: For as long as we use the images, plus 6 years. Photo ID (if viewed) not kept

If you ask us to delete your images, we will do so unless the law requires us to keep something. Please download and back up your own copy of your digital images, as we cannot guarantee we will hold them indefinitely.

8. How we protect your information

We use measures such as password-protected, private galleries; encrypted storage on hard-drives; registered e-mail authentication with password protected galleries; and restricted access to your images. We do not put your images on public galleries, and we do not share galleries without your say-so.

We do not knowingly use your images to train artificial intelligence models. We do not make decisions about you using fully automated processes.

If there is ever a data breach that is likely to put you at risk, we will tell you and the Information Commissioner's Office without undue delay, as the law requires.

9. Your rights

You have the right to:

1. be told how we use your information (this notice);

2. access a copy of the personal information we hold about you;

3. correct anything that is wrong or incomplete;

4. have it erased in certain circumstances;

5. restrict how we use it in certain circumstances;

6. object to our use of it where we rely on legitimate interests, and to direct marketing at any time;

7. receive it in a portable form, where we process it by automated means with your consent or to perform a contract; and

8. withdraw your consent at any time, including image consent and marketing.

To use any of these rights, contact us at liz@rebelliously-sensual.co.uk. We will normally reply within one month (this can be extended by up to two further months for complex requests, and we will tell you if so). We may ask you to confirm your identity first. There is normally no charge.

If you are unhappy about how we have handled your information, you have the right to complain to us first.Please tell us at liz@rebelliously-sensual.co.uk or by post at the address above. You can complain in any way you like, including by email, message, phone or social media. We will acknowledge your complaint within 30 days, look into it without undue delay, keep you updated, and tell you the outcome.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first, but you do not have to complain to us before contacting the ICO.

10. Our website, cookies and marketing

Our website is built and hosted with Hostinger. We use cookies or similar technologies [for essential site functions and, with your consent, for analytics and marketing]. You can manage your choices through our cookie banner [and in our Cookie Policy – link] or in your browser settings.

If you receive our marketing emails or messages, you can unsubscribe at any time using the link in them, or by telling us. We will never send marketing by text or WhatsApp unless you have agreed.

11. Adults only

We only photograph and work with people aged 18 or over. We do not knowingly collect information about anyone under 18. If we find that we have, we will delete it.

12. Links and social media

Our website may link to other sites, such as Instagram, Facebook and WhatsApp. We are not responsible for their privacy practices, so please check their notices.

13. Changes to this notice

We may update this notice from time to time. The latest version will always be on our website, with the date at the top. If we make an important change, we will tell you.

Contact: liz@rebelliously-sensual.co.uk · The Cowshed, Llancayo Court, Usk, Monmouthshire, NP15 1HY

If you would like to contact us to understand more about this Policy or wish to contact us concerning any matter relating to individual rights and your Personal Information, you may send an email to liz@photographybyliz.co.uk. The Cowshed, Llancayo Court, Usk, Monmouthshire, NP15 1HY

ICO number: C2049587