LEGALS

IMAGE WORKS is committed to safeguarding and preserving the privacy of our customers. This Privacy Policy explains what happens to any personal data that you provide to us in the operation of our business or that we collect from you. IMAGE WORKS is owned and operated by Paul Rubery from 15 School Walk, Yate, Bristol BS37 5PS. We provide photographic services to meet a range of clients, primarily in the areas of sports and events.

Contact Information

You can reach us at:

• Phone: 07811226655

• Email: paul@image-works.co.uk

• Website: www.image-works.co.uk

Scope

This Privacy Policy applies to the website www.image-works.co.uk and governs the privacy of its visitors as well as IMAGE WORKS' business. It explains how we comply with the EU's GDPR legislation and the DPA.

Collecting Your Data

IMAGE WORKS will only collect data that is given to us by you or agents acting on your behalf. IMAGE WORKS may collect your data in several ways, for example:

• When you contact us through the website, by telephone, post, email, or through any other means.

• When you use our services.

Data collected through this website is via the contact page. The form collects names, email addresses, and messages. Enquiries sent using the form are sent to info@blowfish.photo which is hosted by Google. The account is secured using two-factor authentication and by using the contact form you agree that IMAGE WORKS can contact you about your enquiry.

This website is hosted by Wix, and their privacy policy can be found HERE.

Our Use of Your Data

Any or all of the above data may be required by us from time to time to provide you with the best possible service and experience when using our website. Specifically, data may be used for the following reasons:

• Internal record keeping

• Improvement of our products and services

• Transmission by email of marketing materials that may be of interest to you

• Contact for market research purposes

We may use your data for the above purposes if we deem it necessary for our legitimate interests. If you are not satisfied with this, you have the right to object in certain circumstances (see the section headed “Your rights” below).

Business Data

We hold the minimum business data necessary to operate the business and ensure this data is treated securely. All data is stored electronically and may include:

• Emails and contact information: stored electronically across password-protected devices and hosted by Google.

• Accounting information: invoices, estimates, and statements secured electronically and password protected.

• Media: content shot during commissions is stored and catalogued by filename, on a password-protected desktop computer, laptop, and external drive. Clients may receive a link to file sharing services such as Dropbox or WeTransfer if required. Media, with consent, may be listed on www.image-works.co.uk for sale. All media galleries can be protected by a password upon client request.

• Media Deletion: Upon client request, data (images) will be deleted within the requested time limit from all storage systems.

• Metadata: Images are stored with embedded information such as a generic caption describing the occasion. Names of the subjects are included in the metadata where relevant and consent is agreed upon.

• Consent Forms: Provided by the client or by IMAGE WORKS on request, describing the intent for the image’s use. Forms are passed to the commissioning agent or digitally scanned and shared with the agent's digital controller before being shredded.

Events and Legitimate Interest

Guests at events may appear in images taken by IMAGE WORKS as part of the event recording. Attendees are photographed within GDPR 'legitimate interests' guidelines. The taking of photographs is necessary for the legitimate interest of the photography business unless there is a good reason to protect an individual's data which supersedes this claim. Clients are requested to make it clear that photography will be taking place, allowing attendees to opt-out.

Third Parties

IMAGE WORKS may use third-party services such as:

• Dropbox:GDPR policy

• WeTransfer:GDPR policy

Your Rights

The GDPR provides the following rights for individuals:

• The right to be informed

• The right of access

• The right to rectification

• The right to erasure

• The right to restrict processing

• The right to data portability

• The right to object

• Rights about automated decision-making and profiling

To exercise your rights, email me at paul@blowfish.photo.

Information Commissioner's Office (ICO)

You have the right to complain about our handling of your data to the supervisory authority, which in the UK is the Information Commissioner's Office. Contact the ICO at 0303 1231113.

Safeguarding

• Consent and Permission: IMAGE WORKS will seek consent before photographing children or young people.

• Reason and Purpose: Photographs are taken by authorized photographers only and are not posted online or passed to others unconnected with the child unless specified.

• Appropriateness of Images: No images will be taken that capture children in non-public activities.

• Identification of Subjects: Clients are responsible for notifying the photographer of any restrictions in photographing designated children.

• Photography for Public Display: Clients indicate if publicity photographs are required.

• Use of Mobile Phones: IMAGE WORKS will never use mobile phones to take or record images.

• Legal Position: Photographs and video images constitute data and are subject to IMAGE WORKS GDPR policy.

IMAGE WORKS follows the guidance given byNSPCC Child Protection in Sport andNSPCC.