Privacy Policy — Gary Wallage Photography

Version 3.0 — September 2026 Gary Wallage Photography is committed to protecting your personal data, privacy, and photographic rights. This policy explains how we handle your personal information, consultation records, and digital imagery, in line with UK GDPR and the Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025).

1. Who We Are

Gary Wallage Photography (trading as Photos to Treasure) is a sole trader operated by Gary David Wallage, of 63 Twinehame Road, Swindon SN25 2AG. We are the data controller for the personal information we collect. Contact: photographer@garywallage.uk.

2. Information We Collect

When you book a session, request details, or schedule a consultation, we collect your name, email address, phone number, session date, and shoot preferences. For boudoir and intimate sessions we additionally collect date of birth for age verification. Payment details are handled by our payment processor and are not stored by us.

3. How We Use Your Information

We use your data to process and manage your booking, communicate with you before, during, and after your session, deliver your Images via a private gallery, send administrative and contractual information, and meet our legal obligations. We do not use your data for marketing without your explicit consent.

4. Photographic Privacy & Image Rights

Unless you object, we may use a selection of your Images in our portfolio, on our website, and on social media, on the basis of our legitimate business interest in promoting our photography (see Section 5). You can object at any time, before or after your session, by contacting photographer@garywallage.uk, and we will stop using your Images for this purpose going forward — though material already published may not always be retractable. Your gallery itself remains password-protected and gallery links are never shared with any third party. This default does not apply to boudoir and other intimate sessions, which remain strictly private unless you separately and explicitly opt in in writing.

5. Legal Basis for Processing

We process personal data under: performance of a contract (your booking); compliance with legal obligations; our legitimate interests in promoting our photography business through portfolio and marketing use of Images, balanced against your right to object at any time (see Section 4); and, where applicable, your explicit consent (for example, for boudoir and intimate session imagery).

6. Data Retention

Booking and client records are kept for 6 years from your session, in line with standard UK tax and commercial record-keeping requirements, after which they are securely deleted. Galleries remain accessible for 12 months from delivery (24 months for weddings); we encourage you to download your Images within that window.

7. Your Rights

Under UK GDPR you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion (subject to legal retention requirements), object to processing, and withdraw consent at any time. To exercise any of these, contact photographer@garywallage.uk.

8. Data Security

We take appropriate technical and organisational measures to protect your data, including encrypted storage, secure cloud backup, and SSL-encrypted, password-protected galleries.

9. Third Parties

We use third-party processors in delivering our service — private gallery software, payment processing, and email communication tools — each bound by GDPR-compliant data processing agreements.

10. Cookies

Our website uses cookies to ensure it functions correctly and to deliver a seamless client experience. See our Cookie Policy for full details.

11. Complaints

If you’re unhappy with how we’ve handled your personal data, please contact us first at photographer@garywallage.uk — we’ll acknowledge your complaint within 30 days, as required under the Data (Use and Access) Act 2025. If you remain unsatisfied, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or 0303 123 1113.

12. Changes to This Policy

We may update this Privacy Policy from time to time; the current version is always published on our website. Last updated: September 2026.