Legal
Privacy Policy
Your privacy matters to me as much as my own. This page sets out what I collect, why, and what you can ask me to do about it.
Last updated: 30 August 2026.
This policy covers francescadb.com and the photography services provided by Francesca DB Photography, Papworth Everard, Cambridge.
I collect information from you when you fill in the contact form on this site, and again when you book a session. Below is what I collect, why, the lawful basis for it, and your rights under the UK General Data Protection Regulation.
What I collect, and why
When you enquire. Your name and email address, which I need in order to reply. Your phone number if you choose to give it, and whatever you tell me in your message. Your consent to be contacted is recorded with the enquiry.
When you book a session. Further details needed to plan and deliver the session — dates of birth, the names and ages of the family members taking part, and anything else you choose to tell me.
The photographs themselves. In providing my services I create photographs which identify you, your family and other participants, and those photographs are personal data. They may exist in print and in digital form.
If other people take part in your session, you are responsible for making sure they have seen this policy.
How I use it
- To provide the service. To answer your enquiry, plan the session, and create and deliver the photographs you have asked for. This is necessary for the contract between us.
- For legitimate business interests. Dealing with enquiries, keeping the minimum record needed to honour a request to be removed from my lists, responding to competent authorities, and protecting or defending legal rights.
- With your consent, to show my work. I may use your photographs to promote my business — in the studio, in printed materials, on this website, and on social media such as Instagram, Pinterest and Facebook. This is optional and it is your choice. You can withdraw that consent at any time.
- To tell you about sessions and offers, by email, only if you have agreed to it.
Where I rely on legitimate interests, I weigh my interest in running my business against the effect on you, and your interests do not automatically come second. You can object at any time.
Who else sees your data
Sending the contact form. When you submit an enquiry it is emailed to me, and at the same time a record is created in Sprout Studio, the booking and client management system I use. Sprout Studio processes that data on my behalf.
Suppliers. For some work I use trusted third parties — retouching, printers, framers, book binders and client galleries. They may see your data only in order to do the job I have asked them to do.
Business transfer. If I ever sell the business, customer data may be one of the assets transferred.
Legal reasons. If I am legally required to disclose data — a court order, a regulatory process, or protecting against loss or damage.
I do not sell your data to anyone, and I never will.
Cookies and measurement
This site uses Google Analytics to count visits and see which pages are read. It sets cookies in your browser and sends Google your IP address and information about your visit. It is used for statistics about the site as a whole, not to identify you.
Two other things are worth knowing:
- Fonts are loaded from Google's servers, which means your IP address reaches Google when a page loads. I am in the process of moving the fonts onto this site's own server so this no longer happens.
- Videos on the Heart Fusion page are hosted by Vimeo, but nothing is loaded from Vimeo until you press play. If you do not play a video, Vimeo receives nothing about your visit. When you do, Vimeo is asked not to track you.
If you would rather not be counted at all, most browsers offer a "do not track" setting, and browser extensions that block analytics work normally on this site.
How long I keep it
- Enquiries that do not become bookings: kept while there is a reasonable prospect of a reply being useful, then deleted.
- Booking and client records: kept for as long as the law requires records of a transaction to be kept, currently six years for tax purposes.
- Photographs: kept in my archive so that you can order prints again later. If you would rather I did not, say so and I will delete them.
Your rights
Under the UK GDPR you have the following rights over your personal data.
Access. You may ask what data I hold about you and receive a copy.
Rectification. If your data is wrong or incomplete you may ask me to correct or complete it. If I have shared it, I will tell those parties where I can.
Erasure. You may ask me to delete your data — for example where I relied on your consent and you have withdrawn it. Some data may need to be kept where there is a legal obligation or a legitimate interest in doing so, and I will tell you if that applies.
Restriction. You may ask me to restrict processing in certain circumstances, such as while a dispute about accuracy is resolved. I will tell you before lifting any restriction.
Withdrawing consent. Where I rely on your consent you may withdraw it at any time. That does not make anything done before then unlawful.
Complaint. If you are unhappy with how I have handled your data you can complain to the UK data protection authority, the Information Commissioner's Office, or to the authority in your own country.
To use any of these rights, write to me at the address below. I may need to ask you for something to confirm your identity first.
Contact
Questions, comments or requests about this policy should go to info@francescadb.com, or by post to Francesca DB Photography, Papworth Everard, Cambridge, UK, CB23 3AQ.