Privacy Notice

Barry Henderson Photography is the data controller responsible for the personal information described in this notice. This notice explains how information is handled when you enquire, book photography, appear in photographs, order products or use this website and its client galleries.

• Enquiries: your name, email, optional telephone number, session type, package interest, preferred date and time, town or location, enquiry message and privacy acknowledgement.
• Client galleries: display name, email or login identity, securely hashed password credentials, gallery assignments and access, favourites, image selections, final selection submissions and relevant account and session timestamps.
• Business records: booking details and correspondence, order and payment records where applicable, photographs created during commissioned work and relevant organiser or event information.

Information may come directly from you, from a client or event organiser arranging photography, from your gallery activity, or from photographs taken during a session or event. Please only include information about other people where it is relevant and appropriate to share it.

Where personal information is provided by an organiser or another person rather than directly by you, privacy information will be provided where required by data protection law.

Information is used to answer enquiries, discuss availability, arrange and deliver photography, manage bookings and correspondence, provide gallery access, record selections, fulfil orders and maintain business records. It is also used to protect accounts and services, resolve queries or disputes and meet legal obligations. Without information needed to respond, arrange a booking or provide secure access, the relevant service may not be possible.

• Contract: to take steps at your request before a booking and to provide the photography, gallery access and products you have ordered.
• Legitimate interests: to run the photography business, handle general enquiries, secure services, manage records and resolve disputes, and where appropriate to photograph and deliver event coverage. These interests must be balanced against your rights and reasonable expectations, particularly for children or sensitive circumstances.
• Legal obligation: to keep records required by law, including relevant accounting and tax records, and respond to lawful requirements.
• Consent: where appropriate for a particular use, such as agreed promotional use of identifiable images or marketing communications requiring consent. You can withdraw consent by contacting Barry; withdrawal does not affect the lawfulness of earlier use.

The basis depends on the purpose and circumstances. A privacy acknowledgement confirms that you have seen this notice; it is not blanket consent to photography, publication or marketing.

Photographs can be personal information where someone is identifiable. Images are created, edited and supplied for the agreed commission. Depending on the event arrangements, suitable images may be shared with the organiser. Where appropriate, an attendee event gallery may be provided. Where provided, it will normally remain available for 90 days after publication. The access arrangements for that gallery will depend on the event and will be explained where appropriate.

Any use of identifiable photographs for Barry Henderson Photography's portfolio, website, social media or other promotion requires an appropriate lawful basis and consideration of the people pictured. Booking a session or attending an event does not automatically give consent to every promotional use. Please raise any privacy, safeguarding or no-photography concerns before the session or event where possible. You can also contact Barry to object to a use or request removal of an image; requests will be considered in their circumstances and in accordance with data protection rights.

Client account information is used to authenticate you and control access to assigned galleries. Favourites, selections and final submissions help Barry manage your choices and prepare the agreed photographs or products. Barry can access this information to administer the gallery and fulfil your order.

Password credentials are stored as secure hashes, not in readable form. Keep your login details private and tell Barry if you believe someone else has accessed your account.

The website uses essential authentication and session cookies for signed-in clients and for administration access. These enable secure login and maintain the relevant session. These cookies are used only where necessary to provide the requested signed-in service and secure authentication. Where they meet the strictly necessary exemption under applicable cookie rules, consent is not required. Blocking or deleting them in your browser may prevent login or end your session.

The current website does not use analytics cookies, advertising pixels, marketing tracking, localStorage or sessionStorage.

Information may be shared as needed with providers of website hosting, databases, email, gallery or image storage, and, where applicable, professional print laboratories, delivery services and professional advisers. Information is shared with a payment provider only if one is used for the particular transaction. Providers receive information relevant to their role, with appropriate contractual and confidentiality arrangements where required. If a payment provider is used, it may act as an independent controller for its own legal responsibilities. Information may also be disclosed where required by law or necessary to establish, exercise or defend legal claims.

Service providers may store or process information outside the UK. Where this involves a restricted international transfer, appropriate safeguards must be used, such as UK adequacy regulations or approved contractual safeguards with any necessary additional measures. You can contact Barry for information about the safeguards relevant to your information and how to obtain a copy where applicable.

Information is kept only for as long as needed for its purpose. Retention depends on whether an enquiry leads to a booking, the time needed to deliver the work and resolve follow-up queries, applicable accounting and legal requirements, and any ongoing dispute or claim.

Gallery accounts, access and selection records are kept according to the needs of the client relationship and delivery of the work. Photographs may be archived for later enquiries or orders where there is a continuing lawful reason to do so. A gallery's online availability period is not necessarily the retention period for the underlying photographs or business records. Information that is no longer needed should be securely deleted or anonymised, with backup copies removed through the relevant backup lifecycle. Contact Barry for details about a particular record or image.

Reasonable technical and organisational measures are used to protect personal information, including restricted gallery access, authenticated administration and securely hashed passwords. Access is limited according to the work that needs to be carried out. No online service or method of storage can be guaranteed completely secure; please report suspected unauthorised access or a privacy concern promptly through the contact page.

Enquiry replies, booking updates and gallery or order messages are service communications. Making an enquiry, holding a gallery account or acknowledging this notice does not sign you up for marketing. If marketing communications are offered, they will only be sent where permitted by law, with consent where required and a clear way to opt out. You can object to direct marketing at any time by contacting Barry.

Children may appear in commissioned or event photographs. Their privacy and safeguarding interests require particular care. Arrangements should be made through a parent, guardian or responsible organiser, with relevant permissions and restrictions discussed before photography. Where consent is relied upon, appropriate consent must be obtained. Please avoid providing unnecessary personal details about children and contact Barry promptly with any concern about a child's image or information.

Depending on the circumstances and lawful basis, you may ask to access your personal information, correct inaccurate information, have it erased, restrict its use or receive certain information in a portable format. You can withdraw consent where processing relies on it.

You have the right to object to processing based on legitimate interests on grounds relating to your situation, and an unconditional right to object to use of your information for direct marketing. Other rights may be subject to legal exceptions, such as a requirement to keep particular business records.

Use the contact page to make a request. Barry may need information to confirm your identity and locate the relevant records. Requests are normally answered within one month, subject to any extension or other adjustment permitted by law. There is normally no charge.

Please contact Barry Henderson Photography if you are unhappy with how your information has been handled. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, through the ICO complaints page. You do not have to contact Barry before exercising that right.

This notice was last updated on 8 September 2026. It may be updated as services, data practices or legal requirements change. The current version will be published here, and significant changes will be brought to your attention where required.

For privacy questions, requests about your information or concerns about a photograph, contact Barry Henderson Photography through the contact page. Please explain what your request relates to and provide enough detail to identify the relevant booking, account or image without sending unnecessary sensitive information.