Privacy Notice
How I look after your personal data, in line with UK GDPR and the Data Protection Act 2018.
Last updated:
1. Who I am
I’m Mike Lister, a one-person photography business trading as Mike Lister Photography. I photograph weddings, families, businesses and properties (including by drone) across Devon and Cornwall.
I’m the “controller” of your personal data, which means I decide how it’s used and I’m responsible for looking after it. If you have any questions about this notice or your data, please get in touch:
Email: hello@mikelisterphotography.co.uk
Phone: 07815 141 779
Post: Mike Lister Photography, 9 Winsbury Court, Crownhill, Plymouth, Devon, PL6 5JU
ICO registration: ZC284402
2. What I collect
| Type of data | Examples |
|---|---|
| Contact details | Your name, email address, phone number and postal or billing address. |
| Enquiry and booking details | What you’re interested in, your date, venue, timings, budget and anything you tell me in your message or on the booking form. |
| Event details | Names of family members and key guests, group photo lists, schedules and special requests. |
| Photographs | Images of you, your family and guests, your business, staff or property, and aerial images. |
| Payment details | Invoices, payment dates and amounts. I don’t see or store card details. |
| Website data | Pages visited and device type, collected by Google Analytics only if you accept analytics cookies. |
| Communications | Emails, messages and notes from our calls. |
Sensitive information
Wedding and family photographs can sometimes show things the law treats as sensitive, such as religious beliefs (for example, a religious ceremony) or health (for example, a pregnancy in a maternity session). I only capture and use these images because you have booked me to do so, and I treat them with extra care.
3. How I use it, and why
The law requires me to have a valid reason (a “lawful basis”) for each way I use your data:
| What I use it for | Lawful basis |
|---|---|
| Replying to your enquiry and sending you a quote | Steps you’ve asked me to take before a contract |
| Planning and photographing your booking, editing and delivering your images | Performing our contract |
| Invoicing, accounts and tax records | Legal obligation |
| Using a selection of images on my website, social media and sample albums | Legitimate interests (showing my work). You can opt out at any time, see section 6. |
| Photographing your guests at a wedding or event | Legitimate interests (delivering the coverage you booked) |
| Occasional emails about offers or news | Consent. You can unsubscribe at any time. |
| Understanding how people use my website | Consent, through the cookie banner |
| Drone flights, where people may appear in the background | Legitimate interests. I plan flights to avoid identifying people who aren’t part of the job. |
4. Who I share it with
I only share your data with trusted services that help me run my business, and only what they need:
| Who | Why |
|---|---|
| Microsoft (Microsoft 365 and Dynamics 365) | Email, file storage and managing enquiries and bookings. |
| Xero | Quotes, invoices and accounts. |
| My online gallery provider | Hosting your private online gallery. |
| WeTransfer or OneDrive | Sending large image files to commercial and drone clients. |
| Album and print suppliers | Producing your album and prints. |
| Second photographers | Only if you book one. They work under a written agreement and pass all images to me. |
| Google Analytics | Website statistics, only if you accept analytics cookies. |
| Drone job platforms | Where a drone job comes to me through a platform such as FairFleet, they share the job details with me. |
| My accountant and HMRC | Keeping accounts and meeting tax rules. |
I may also share data if I’m required to by law.
Data stored outside the UK
Some of these services store data outside the UK, for example in the USA or the EU. When that happens, I only use providers that protect your data with legally approved safeguards, such as the UK International Data Transfer Agreement or the UK–US data bridge.
I never sell your data.
5. How long I keep it
| Data | How long |
|---|---|
| Enquiries that don’t lead to a booking | 12 months from our last contact |
| Your online gallery | 60 days from delivery (longer if we agree) |
| Archived images (edited and original files) | 1 year after the online gallery period ends |
| Online drone inspection reports | 12 months from the flight, then deleted (the full-resolution images follow the archive period above) |
| Booking records, contracts and invoices | 6 years after the end of the tax year, as HMRC requires |
| Images used on my website or social media | Until you ask me to remove them |
| Marketing email list | Until you unsubscribe |
| Website analytics | Up to 14 months |
After these periods, I securely delete your data.
6. Your photographs and my portfolio
- After your 60-day exclusivity period, I may share a small selection of your images on my website, social media or in sample albums.
- If you’d rather I didn’t, just tick the opt-out box on your booking form or email me at any time. If images are already online, I’ll remove them from my website and social media.
- I won’t use images where a child is the main subject without written permission from their parent or guardian.
- If you’re a guest at a wedding or event and would like an image of you removed from my website or social media, email me and I’ll take it down.
7. Your rights
You have the right to:
- ask for a copy of the personal data I hold about you;
- ask me to correct anything that’s wrong;
- ask me to delete your data (unless I need to keep it, for example for tax records);
- ask me to stop or limit how I use it, or object to me using it;
- ask for your data in a format you can take elsewhere;
- withdraw your consent at any time, where I rely on it.
Email hello@mikelisterphotography.co.uk to use any of these rights. There’s no charge, and I’ll reply within one month.
Complaints
If you’re unhappy with how I’ve handled your data, please tell me first so I can put it right. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
8. Keeping your data safe
I keep your data in secure, password-protected systems with two-step sign-in, on encrypted devices, with encrypted backups. Only I have access, plus a second photographer for a job they work on.
9. Cookies
My website only uses analytics cookies if you agree to them. You can change your choice at any time. See my Cookie Policy.
10. Changes to this notice
I review this notice every year and whenever I change how I handle your data. The date at the top shows when it was last updated.
Ready to Start Your Story?
Whether you're planning a wedding, need professional business photography, or want breathtaking aerial shots - I'm here to help bring your vision to life.
Get in Touch
I usually reply the same day, and always within 24 hours.
Please try again or email me directly.