Legal

Privacy Policy

Last updated: 13.07.2026

EDC Studio (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it, in line with UK GDPR and the Data Protection Act 2018.

1. Who We Are

EDC Studio is a photography business operated by Emily DC, providing wedding, portrait, family, event, party, product and commercial photography services, primarily covering London, Portsmouth and the surrounding areas.

For any questions about this policy or how your data is handled, contact us at edcstudio@proton.me.

2. Information We Collect

We collect personal data in the following ways:

Contact form: name, email address, phone number, and the details of your enquiry.
Booking & checkout: name, billing address, email, phone number, your chosen package, preferred date, and (where relevant) the location of your shoot.
Payments: payment details are collected and processed securely by our payment provider, Stripe. We do not store your full card details ourselves.
Client galleries: if you book a session with us, the photographs from your shoot are stored in a private online gallery for delivery to you.
Email correspondence: if you email us directly, we keep a record of that conversation to respond to you and for our records.
Website usage data: general analytics about how visitors use our site (see Section 6, Cookies & Analytics).

3. How We Use Your Information

To respond to enquiries and communicate with you about a potential or confirmed booking.
To process bookings, take payment, and deliver photography services.
To deliver your photographs via a private online gallery.
To send you booking confirmations, reminders (such as balance payment reminders), and, where relevant, updates about your order.
To keep records for accounting, tax, and legal purposes.
To improve our website and services, based on general usage trends.

4. Legal Basis for Processing

We rely on the following legal bases under UK GDPR:

Contract: processing necessary to provide photography services you’ve booked.
Legitimate interests: responding to enquiries, improving our services, and basic marketing to existing clients about our services.
Consent: where you’ve explicitly agreed, for example to be featured in our portfolio (see our Copyright & Image Usage policy) or to receive optional marketing communications.
Legal obligation: where we’re required to keep certain records, such as for tax purposes.

5. Sharing Your Information

We do not sell your personal data. We share information only where necessary, with:

Stripe — to process payments securely.
Our website host and email delivery provider — to operate the website and send booking-related emails.
Google Analytics (via Google Site Kit) — to understand general website usage. See Section 6 for more detail.
Law enforcement or regulatory authorities, where we are legally required to do so.

Each of these providers processes data under their own privacy policies and, where applicable, appropriate data protection agreements.

6. Cookies & Analytics

Our website uses Google Analytics (via the Google Site Kit plugin) to understand how visitors use the site — for example, which pages are viewed and roughly how visitors found us — so we can improve our services. This involves cookies being placed on your device. Google Analytics collects general, non-identifying usage data; we do not use it to personally identify individual visitors.

You can control or disable cookies at any time through your browser settings. Disabling cookies may affect some website functionality but will not prevent you from browsing the site or contacting us.

Google Site Kit may also connect to other Google services, such as Search Console, to help us understand search performance; these do not collect personal data about individual visitors to the site.

7. Data Retention

We keep personal data only for as long as necessary for the purposes set out in this policy. As a general guide:

Contact form enquiries that do not result in a booking are typically retained for up to 12 months.
Booking and order records are retained for at least 6 years, in line with UK tax and accounting requirements.
Original and edited photographs from your session are retained for a minimum of 3 months following gallery delivery, after which they may be archived or deleted.

8. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request erasure of your data, where applicable.
Restrict or object to certain processing of your data.
Request a copy of your data in a portable format.
Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at edcstudio@proton.me. We will respond within one month, as required by law.

If you’re unhappy with how we’ve handled your data, you also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO).

9. Children’s Data

Our services may involve photographing children as part of family, event, or portrait sessions, always with the consent of a parent or legal guardian, who is responsible for providing that consent and for the accuracy of any information provided to us on a child’s behalf.

10. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including secure payment processing via Stripe and access controls on our website and email systems. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or for legal reasons. Any changes will be posted on this page with an updated “last updated” date.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at edcstudio@proton.me.