Privacy Policy

Joachim Kahn Photography
https://www.joachimkahnphotography.com/

Effective date: 25/09/26

Introduction

This Privacy Policy explains how Joachim Kahn Photography collects, uses, stores and protects personal data when you visit my website, contact me or use my photography and related services.

I am committed to handling personal data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who I am

Joachim Kahn Photography is the data controller responsible for personal data processed in connection with my business.

You can contact me at:

Email: info@joachimkahnphotography.com

Whose personal data do I process?

I may process personal data relating to:

  • current and potential clients

  • people making enquiries

  • people attending events or weddings I photograph

  • people who appear in photographs or video I create

  • people who communicate with me in connection with a booking or enquiry

  • suppliers and other business contacts

Where another organisation provides me with personal data for a specific project, the way I process that information may also be governed by my agreement with that organisation.

What information do I collect?

The personal data I process may include:

Information you provide directly

  • name

  • email address

  • telephone number

  • address

  • details about your enquiry or booking

  • billing and payment information

  • communications and correspondence with me

  • preferences or other information you choose to provide

Information collected when you use my website

My website may collect information such as:

  • IP address

  • browser and device information

  • pages visited

  • how you found the website

  • approximate location information derived from your IP address

  • information about how you interact with the website

  • timestamps and similar technical information

This information may be collected through cookies and analytics services.

Content created as part of my work

As part of providing photography and video services, I may create and retain:

  • photographs

  • video

  • audio where relevant

  • associated metadata, such as date, time and location

How I use your information

I may use personal data to:

  • respond to enquiries

  • communicate with clients and potential clients

  • provide photography and video services

  • manage bookings and client relationships

  • prepare contracts, invoices and other administrative records

  • process payments

  • deliver photographs and galleries through Pic-Time

  • provide print sales and related services

  • communicate information relating to your booking

  • maintain records of previous clients and enquiries

  • improve my website and services

  • understand how visitors use my website

  • carry out marketing and promotional activity where permitted

  • comply with legal, accounting and regulatory obligations

Legal basis for processing

Where I process personal data as a data controller, I rely on the lawful bases available under the UK GDPR.

These may include:

  • Contract: where processing is necessary to provide agreed services, manage a booking or take steps at your request before entering into a contract.

  • Legitimate interests: where processing is necessary for the operation and development of my business, including communicating with clients and prospective clients, maintaining appropriate business records and improving my services.

  • Consent: where consent is required, including certain marketing activities, non-essential cookies and particular uses of photographs or other content.

  • Legal obligation: where processing is necessary to comply with legal or regulatory requirements, such as tax and accounting obligations.

Where consent is the legal basis for processing, you can withdraw that consent at any time.

Website, analytics and cookies

My website uses cookies and similar technologies to make the website function, understand how visitors use it and, where applicable, support marketing.

I may use services including Google Analytics to understand website traffic and how visitors interact with the site.

The information collected may include:

  • browser, network and device information

  • IP address

  • pages visited

  • links clicked

  • timestamps

  • how visitors arrived at the website

  • interactions with pages and content

Where required by law, non-essential cookies will only be used where you have provided consent.

You can also control cookies through your browser settings.

Sharing your data

I only share personal data where necessary for the purposes described in this policy or where I am legally required to do so.

Depending on the service being provided, this may include sharing information with:

  • Pic-Time, for online gallery delivery and print sales

  • payment providers

  • accounting and invoicing providers

  • website hosting providers

  • cloud storage and file-sharing providers

  • email and communication providers

  • analytics providers, such as Google

  • advertising and marketing platforms, such as Meta, where applicable

  • professional advisers or other service providers where necessary to operate my business

Where I use third-party service providers, I take reasonable steps to ensure that personal data is handled securely and in accordance with applicable data protection requirements.

I do not sell your personal data.

Data processed on behalf of clients

In some circumstances, I may receive personal data from a client or organisation in order to carry out an agreed service.

Where I process personal data solely on a client's instructions, the relevant contract or agreement will determine how that information may be used and my role may be that of a data processor under the UK GDPR.

Where I determine how and why personal data is processed for my own business purposes, I may act as a data controller.

International transfers

Some of the third-party services I use may process or store personal data outside the UK.

Where personal data is transferred outside the UK, I will take reasonable steps to ensure that appropriate safeguards are in place in accordance with UK data protection law.

These safeguards may include transfers to countries recognised as providing an adequate level of protection or the use of appropriate contractual safeguards.

How long I keep information

I retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including legal, accounting and business requirements.

As a general guide:

  • Enquiry information: normally retained for up to 3 years

  • Contracts, invoices and financial records: normally retained for up to 6 years where required for accounting, tax or legal purposes

  • Client photographs and video: may be retained indefinitely as part of my business records and portfolio, subject to any applicable agreement or request concerning their use

  • Marketing information: retained until you unsubscribe or otherwise request that your information is no longer used for marketing, subject to any information I am required to retain for other purposes

Where a longer or shorter retention period is required by a specific contract or legal obligation, that requirement will take precedence.

Your rights

Under the UK GDPR, you may have the right to:

  • be informed about how your personal data is used

  • request access to your personal data

  • request correction of inaccurate or incomplete data

  • request deletion of your personal data

  • request restriction of processing

  • object to certain processing

  • request data portability

  • withdraw consent where processing is based on consent

You are generally not required to pay a fee to exercise these rights.

If you wish to exercise your rights, please contact me using the details in this policy. I will normally respond within one month of receiving your request, subject to the circumstances and requirements of UK GDPR.

Use of photographs and video

Photography and video created as part of my services may contain identifiable individuals.

The primary purpose of creating this content is to provide the agreed photography or video service.

I may also wish to use selected photographs or video for my portfolio, website, social media, advertising or other promotional purposes.

Where consent is required for a particular use, I will obtain that consent before using the relevant content.

If you have previously given consent for the use of identifiable content and wish to withdraw that consent or request that particular content is no longer used for promotional purposes, please contact me.

Removing content from my own platforms does not necessarily mean that copies held by third parties or people who have previously viewed or shared the content can be removed.

Data security

I take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include:

  • password-protected devices and accounts

  • secure cloud storage

  • access controls

  • appropriate account security measures

  • limiting access to personal data where reasonably necessary

  • using reputable third-party service providers

No method of storing or transmitting information online can be guaranteed to be completely secure.

Third-party websites

My website may contain links to third-party websites or services.

Those websites have their own privacy policies and terms. I am not responsible for the privacy practices, security or content of third-party websites.

Marketing

I may use contact information to send information about my services, work or relevant updates where permitted by law.

Where consent is required, I will only send marketing communications where you have provided the necessary consent.

You can unsubscribe from marketing communications at any time by contacting me or using the unsubscribe mechanism provided in the communication.

Complaints

If you have concerns about how I have handled your personal data, please contact me first so that I can try to resolve the issue.

You also have the right to complain to the Information Commissioner's Office (ICO) if you believe that your personal data has been handled inappropriately.

Changes to this policy

I may update this Privacy Policy from time to time to reflect changes to my business, the services I use or applicable data protection requirements.

The latest version will always be made available on this page, together with its effective date.

Contact

If you have any questions about this Privacy Policy or how I handle your personal data, please contact:

Joachim Kahn Photography
Email: info@joachimkahnphotography.com