Last updated: 2026.03.08
M&S Foto respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, contact us, make a booking, or use our photography services.
1. Who we are
M&S Foto is a photography business based in Cambridge, England, and working across England for selected sessions, events, and special occasions.
For any privacy-related questions, or to exercise your data protection rights, please contact us at:
Email:
M&S Foto is the data controller for the personal data covered by this policy.
2. What information we collect
We may collect and process the following types of personal data:
- your name and contact details (email, phone)
- booking and enquiry information
- messages you send us
- technical data such as IP address and website usage
- photographs created during your session
3. How we use your information
We use your information to:
- respond to enquiries
- manage bookings and provide our services
- communicate with you about your session
- deliver images and related products
- meet legal and accounting requirements
- improve our website and services
We do not sell your data.
4. Our lawful bases for processing
Under UK data protection law, we rely on one or more of the following lawful bases:
- Contract — where processing is necessary to provide services you have requested or booked
- Legitimate interests — where processing is reasonably necessary for running and improving our business, provided your rights are not overridden
- Legal obligation — where we are required to keep certain records for legal, tax, or regulatory purposes
- Consent — where you have given clear permission, for example for certain marketing communications or, where applicable, the public use of images
5. Photography, image use, and portfolio sharing
As part of our services, we create and store photographic images.
Images from sessions, events, or shoots will not be used on our website, portfolio, blog, or social media for promotional purposes without your permission.
If you are happy for selected images to be shared in our portfolio, on social media, or in other promotional materials, this will be agreed separately.
6. Who we share your data with
We do not sell your personal data.
We may share your data only where necessary with trusted third parties such as:
- booking platform providers
- website hosting providers
- email providers
- payment processors
- gallery delivery platforms
- printing labs or album suppliers
- accountants, legal advisers, or insurers where necessary
These third parties will only process your personal data where necessary and under appropriate privacy and security obligations.
7. Online booking and third-party services
Our website and business may use third-party tools to manage bookings, scheduling, enquiries, payments, galleries, or communications.
Where you use a third-party platform linked from our website, your information may also be processed under that provider’s own privacy policy. We encourage you to review those policies where relevant.
8. Data retention
We keep personal data only for as long as reasonably necessary for the purposes set out in this policy, including to fulfil our services and meet legal, accounting, or tax requirements.
As a general guide:
- enquiry data may be kept for up to 12 months
- client and booking records may be kept for up to 6 years after the service is completed, to meet legal and accounting obligations
- image files may be retained for up to 12 months after delivery, unless a longer period is agreed or required
- marketing data will be kept until you withdraw consent or ask us to stop
We may retain certain information for longer where required by law or where there is a legitimate business need to do so.
9. Cookies and website analytics
Our website may use cookies and similar technologies to help it function properly, understand website traffic, and improve user experience.
You can control or disable cookies through your browser settings. Where required, we will ask for your consent before using non-essential cookies.
10. Data security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration, or disclosure.
However, no internet transmission or storage system can ever be guaranteed completely secure, so we cannot guarantee absolute security.
11. Your rights
Under UK GDPR, you may have the right to:
- be informed about how your personal data is used
- request access to the personal data we hold about you
- request correction of inaccurate or incomplete data
- request erasure of your personal data in certain circumstances
- request restriction of processing in certain circumstances
- object to processing based on legitimate interests
- withdraw consent where processing is based on consent
- lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise any of these rights, please contact us at
12. Third-party links
Our website may contain links to other websites - Instagram, Facebook and others. We are not responsible for the privacy practices or content of external sites. Please review their privacy policies separately.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Any updates will be posted on this page together with the revised “Last updated” date.
14. Contact
If you have any questions about this Privacy Policy or how we handle your personal data, please contact:
M&S Foto
Email:
