Quick summary (plain English)
-
I’m Vishal Sharma. I run vishalsharma.co.uk and gallery.vishalsharma.co.uk.
-
I only collect what I need to respond to enquiries, deliver work, and keep the sites running.
-
I don’t sell your data and I don’t run a mailing list.
-
Analytics (Google Analytics) only runs with your consent via the cookie banner.
-
Gallery delivery is hosted by theimagefile.com (they act as my data processor).
-
You can ask me to access, correct, delete, or send you your data.
-
If something worries you, email me@vishalsharma.co.uk. You can also raise concerns with the Information Commissioner’s Office (ICO).
1. Who I am (Controller)
Controller: Vishal Sharma, Unit Stills Photographer
Email: me@vishalsharma.co.uk
Web: www.vishalsharma.co.uk | gallery.vishalsharma.co.uk
Postal address: available on request for privacy and security reasons.
I do not appoint a separate Data Protection Officer; all queries come directly to me.
Laws that apply: UK GDPR and the Data Protection Act 2018.
Scope: This policy covers personal data I process through my websites and in the course of my photography business.
2. What I collect and why (lawful bases)
| Activity | Data | Purpose | Lawful Basis |
|---|---|---|---|
| Enquiries (contact form/email/phone) | Name, email, phone, message content | To respond to you and handle pre-contract queries | Legitimate interests (to run my business) or Contract (pre-contract steps) |
| Booking & delivering services | Contact details, job details, schedules, invoicing data | To provide services and manage the job | Contract |
| Accounts & tax | Name, address, invoices, payments | To meet HMRC and accounting obligations | Legal obligation |
| Portfolio/website features | Selected images (non-personal or with consent) | To showcase work | Legitimate interests (balanced/minimal) or Consent |
| Website analytics (Google Analytics) | Aggregated usage data, anonymised IP | To improve site performance and content | Consent (via cookie banner) |
| Gallery delivery (theimagefile.com) | Files to deliver images; account/login if created | To provide secure delivery of images | Contract (with you) or Legitimate interests (secure delivery) |
I do not intentionally collect special category data.
3. Cookies and analytics
-
Essential cookies are used to make the sites function properly (security, preferences, performance). These do not require consent.
-
Analytics cookies (Google Analytics) only run if you consent via the cookie banner. You can withdraw or change consent at any time in your browser or the banner settings.
4. Where your data comes from
-
Directly from you (emails, calls, forms, job materials).
-
Automatically from your device when you browse (e.g. anonymised analytics data, basic server logs).
5. Who processes or receives your data
I don’t sell your data. I only share it when necessary to run my business, meet legal requirements, or with your consent.
Processors and service providers include:
-
theimagefile.com – hosts my gallery and manages image delivery.
-
Google Analytics – website analytics (only with consent).
-
Email, hosting and accounting providers – for correspondence and record keeping.
Each processor acts under contract to handle data securely and only on my instructions.
I may share data with legal or public authorities (e.g. HMRC) where required by law or to establish or defend legal claims.
6. International transfers
Some providers may process data outside the UK (for example, within the EEA or USA).
When this happens, I rely on adequacy decisions or appropriate safeguards such as the UK Addendum to the EU Standard Contractual Clauses.
7. How long I keep data
-
Enquiries (not becoming clients): up to 24 months for reference, then deleted.
-
Client/job records and contracts: usually 7 years to meet legal and accounting obligations.
-
Gallery files: normally 12 months after delivery (in line with my T&Cs archiving).
-
Server logs: retained up to 90 days for security.
-
Analytics data: stored in anonymised or aggregated form as per Google’s retention policy.
8. Your rights
You can:
-
Access your data and receive a copy.
-
Request correction (rectification) of inaccurate information.
-
Request deletion (erasure) where applicable.
-
Restrict or object to processing in certain circumstances.
-
Receive your data in a portable format (where processing is based on consent or contract and automated).
-
Withdraw consent at any time (without affecting past lawful processing).
To exercise these rights, email me@vishalsharma.co.uk. I may need to verify your identity.
If you’re unhappy with how your data has been handled, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or call 0303 123 1113. I’d appreciate the opportunity to resolve matters first.
9. Security
I use reasonable technical and organisational measures to protect data—secure hosting, encrypted connections, access controls, and regular maintenance. No system is 100 % secure, but I work to reduce risk appropriately.
10. Children
My websites and services are not directed at children. If you believe a child has provided personal data without consent, please contact me and I will delete it.
11. Third-party links and embeds
My sites may link to external sites or include embedded content (for example, social media). Their data practices are their own—please check their privacy policies before using those links or embeds.
12. Changes to this policy
I may update this policy occasionally. The latest version will always appear on this page, and I’ll update the date above. If major changes occur, I’ll note them clearly on the site.
13. Contact
For any privacy-related questions, please contact:
Vishal Sharma – Unit Stills Photographer
Email: me@vishalsharma.co.uk
Web: www.vishalsharma.co.uk | gallery.vishalsharma.co.uk