This Privacy Policy explains how I, Vishal Sharma, collect, use, store, and protect personal data in connection with my photography business, including through https://vishalsharma.co.uk and https://gallery.vishalsharma.co.uk.
Quick summary
I only collect the personal data I need to respond to enquiries, provide photographic services, deliver work, and run my websites securely.
I do not sell your personal data and I do not operate a mailing list.
I use theimagefile.com to host and deliver galleries.
You may have rights in relation to your personal data, including rights of access, correction, deletion, restriction, objection, and portability, subject to legal limitations.
If you have any privacy-related questions, please contact me at me@vishalsharma.co.uk.
You also have the right to complain to the Information Commissioner’s Office (ICO).
1. Who I am
Controller: Vishal Sharma
Email: me@vishalsharma.co.uk
Websites: https://vishalsharma.co.uk and https://gallery.vishalsharma.co.uk
Postal address: available on request for privacy and security reasons
For the purposes of UK data protection law, I am the controller of the personal data covered by this Privacy Policy.
I am not required to appoint a Data Protection Officer, and privacy queries should be sent to me directly.
This Privacy Policy explains how I process personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What personal data I collect and why
I may collect and process the following categories of personal data:
Enquiries and communications
Data: name, email address, phone number, and the content of your message
Purpose: to respond to enquiries, communicate with you, and deal with pre-contract discussions
Lawful basis:
- Legitimate interests, where you make a general enquiry or contact me about my services
- Contract, where you ask me to take steps at your request before entering into a contract
Booking and providing photographic services
Data: contact details, booking details, schedules, delivery details, and invoicing information
Purpose: to provide photographic services, manage bookings, deliver work, and administer the contract
Lawful basis: Contract
Accounts, legal, and tax records
Data: names, addresses, invoices, payment records, and related accounting information
Purpose: to comply with accounting, tax, and legal obligations
Lawful basis: Legal obligation
Portfolio and self-promotion
Data: selected images and limited related information where appropriate
Purpose: to showcase my work and promote my business
Lawful basis: Legitimate interests, where I have assessed that such use is proportionate and does not override the rights and freedoms of individuals concerned. In some cases, I may rely on consent or specific contractual arrangements where appropriate
Gallery delivery
Data: image files, delivery details, and account or login details where applicable
Purpose: to provide secure online image delivery and gallery access
Lawful basis: Contract, or legitimate interests where secure delivery systems are used in the normal operation of my business
Website security and administration
Data: technical data such as IP address, browser type, device information, server log data, and basic access information
Purpose: to maintain website security, detect misuse, troubleshoot technical issues, and administer the websites
Lawful basis: Legitimate interests
I do not intentionally collect special category data unless this is clearly necessary and lawful in the circumstances.
3. Cookies and website data
My websites may use essential cookies or similar technologies where necessary for core website operation, security, and basic functionality.
I do not use Google Analytics and I do not operate advertising or marketing cookies on my websites.
I may also process limited technical information automatically when you visit my websites, such as IP address, browser type, device information, and server log data, where necessary for security, troubleshooting, and site administration.
If this changes in future and I introduce non-essential cookies or analytics tools, I will update this Privacy Policy and, where required, introduce an appropriate consent mechanism.
4. Where your personal data comes from
I collect personal data:
- directly from you, for example when you email me, call me, complete a contact form, or book my services
- from information and materials you provide in connection with a job or booking
- automatically from your device or browser when you visit my websites, such as technical and server log data used for security and site administration
5. Who I share personal data with
I do not sell your personal data.
I only share personal data where necessary to operate my business, provide services, comply with legal obligations, or establish, exercise, or defend legal claims.
Where third parties process personal data on my behalf, they do so as processors or service providers acting in connection with the services they supply to me.
These may include:
- theimagefile.com, which hosts my gallery and assists with image delivery
- website hosting providers
- email providers
- cloud storage providers
- accounting or bookkeeping providers, where relevant
Some third parties I use may act as independent controllers in relation to the services they provide to you or to me, depending on the circumstances.
I may also disclose personal data to legal, regulatory, tax, or public authorities where required by law or where necessary in connection with legal rights or claims.
6. International transfers
Some of the providers I use may process personal data outside the UK.
Where this happens, I take steps to ensure that personal data is protected appropriately. Depending on the provider and destination, this may include reliance on:
- a UK adequacy regulation
- the UK Addendum to the EU Standard Contractual Clauses
- another transfer mechanism recognised under UK data protection law
7. How long I keep personal data
I keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, tax, accounting, contractual, and record-keeping obligations.
Typical retention periods are:
- General enquiries that do not become bookings: up to 24 months
- Contact form submissions: for as long as reasonably necessary to respond and manage any related follow-up
- Client and job records, invoices, and contracts: usually 7 years
- Gallery files: normally up to 12 months after delivery, in line with my Terms and Conditions
- Server logs and technical records: typically up to 90 days where relevant for security and administration
I may retain data for longer where necessary to comply with legal obligations or in connection with legal claims.
8. Your rights
Under data protection law, you may have the right to:
- request access to your personal data
- request rectification of inaccurate or incomplete personal data
- request erasure of your personal data
- request restriction of processing
- object to processing
- request portability of your personal data in certain circumstances
- withdraw consent at any time, where processing is based on consent
These rights are not absolute and may apply only in certain circumstances.
To exercise any of these rights, please contact me at me@vishalsharma.co.uk.
I may need to verify your identity before responding.
If you are unhappy with how I have handled your personal data, you have the right to complain to the Information Commissioner’s Office (ICO) via ico.org.uk or by telephone on 0303 123 1113. I would appreciate the opportunity to address any concerns first.
9. Security
I use reasonable technical and organisational measures to protect personal data, including secure hosting, encrypted connections where appropriate, access controls, and routine maintenance of the systems I use.
No system is completely secure, but I take appropriate steps to reduce risk and protect the personal data I hold.
10. Children
My websites and services are not directed at children.
If you believe that a child has provided personal data to me without appropriate consent, please contact me and I will take reasonable steps to delete it where appropriate.
11. Third-party links and embedded content
My websites may contain links to third-party websites or embedded content. Those third parties are responsible for their own privacy practices, and you should review their privacy policies before using their services.
12. Changes to this Privacy Policy
I may update this Privacy Policy from time to time.
The latest version will always be posted on this page, and I will update the effective date when changes are made.
13. Contact
For any privacy-related questions, please contact:
Vishal Sharma
Email: me@vishalsharma.co.uk
Websites: https://vishalsharma.co.uk and https://gallery.vishalsharma.co.uk
I’m Vishal Sharma. I run vishalsharma.co.uk and gallery.vishalsharma.co.uk.
I only collect the personal data I need to respond to enquiries, provide photographic services, deliver work, and keep my websites running.
I do not sell your personal data and I do not operate a mailing list.
My gallery delivery platform is hosted by theimagefile.com, which acts as a service provider for image delivery.
You can ask me to access, correct, delete, or send you a copy of your personal data.
If you have any concerns, please email me@vishalsharma.co.uk. You also have the right to complain to the Information Commissioner’s Office (ICO).