Breydon Digital – Privacy Policy
This Privacy Policy explains how Breydon Digital collects, uses, stores, and protects personal data when you use my website and services (the “Service”).
This Privacy Policy explains how personal information is handled; it does not ask you to consent to all processing simply by using the Service. Where consent is the appropriate legal basis, it will be requested separately.
I may update this Privacy Policy from time to time. Any changes will be published on this page and will take effect when published.
Information I Collect
I may collect and process the following personal data:
- Name
- Email address
- Business information provided via contact or intake forms
- Photography booking details and images of identifiable people where relevant to an agreed shoot
- Billing and payment-related information
- Communications sent to me (e.g. emails or form submissions)
I only collect personal data that is necessary to provide, manage, and support my services.
Lawful Basis for Processing (UK GDPR)
I process personal data under one or more of the following lawful bases:
- Contractual necessity – to provide managed website and application subscriptions, photography and one-off services
- Legal obligation – for accounting, tax, and regulatory compliance
- Legitimate interests – to operate, secure, and improve my services
- Consent – where you have explicitly provided it (for example, for optional cookies where required)
How I Use Your Information
I use personal data to:
- Deliver and manage your website and related services
- Process payments and manage billing
- Respond to enquiries and support requests
- Communicate with you about your service
- Maintain platform security and reliability
- Meet legal and regulatory obligations
I do not use personal data for automated decision-making or profiling.
Payments
Payment arrangements are confirmed before you buy. If a third-party payment provider is used, it processes payment information under its own privacy policy.
Breydon Digital does not store full payment card details on its own systems.
Photography Services
Photography bookings may involve contact details, location and shoot instructions, proofs and final photographs, including images of identifiable people. This information is used to plan, carry out, edit and deliver the agreed work and deal with payment, support or a complaint. The applicable lawful basis depends on the circumstances; a customer’s booking does not automatically provide consent on behalf of every person photographed.
Where a third-party photographer or drone operator is engaged to provide agreed work, relevant booking details and images may be shared as necessary for that purpose, subject to appropriate confidentiality and data-protection arrangements. Commissioned photographs will be used in my portfolio or promotional material only with the customer’s permission and any additional permission or lawful basis required for identifiable people.
Hosted Application Data
Customers using Booking Office or another hosted application may enter information about their clients, contacts, bookings, jobs, quotes, invoices and payment records. The customer determines why that information is used for its business and is normally the data controller. Where I host or otherwise process that information on the customer’s instructions, I act as data processor under the relevant agreement and Data Processing Schedule.
Questions about personal information held in a customer’s application workspace should normally be directed to that customer. If a request is received by me as processor, I will pass it to the relevant customer and assist in accordance with the applicable agreement and legal obligations. Handling and retention of that information are governed by those instructions, the Data Processing Schedule and applicable law, rather than the general retention periods for my own business records below.
This is separate from information I use as controller to manage the customer’s subscription, billing, support and our business relationship.
Sharing Your Information
I do not sell or rent personal data.
I may share personal data with trusted third parties where necessary, including:
- Hosting and infrastructure providers
- Email and form processing services
- Payment processors
- Analytics and performance monitoring services
I may also disclose personal data where required to comply with legal obligations, enforce my Terms & Conditions, or protect my legal rights.
If this business is sold, transferred or restructured, relevant personal data may be transferred as part of that change, subject to applicable data protection requirements.
International Data Transfers
Some third-party service providers may process data outside the United Kingdom. Where this occurs, appropriate safeguards are used to ensure data is protected in accordance with UK GDPR requirements.
Data Retention
The periods below concern information I hold for my own business purposes. They do not set a retention period for a customer’s hosted application records; see Hosted Application Data.
I retain personal data only for as long as necessary:
- While a subscription or service relationship is active
- For 90 days to 2 years after cancellation or completion
- Longer where required by law (e.g. financial and tax records)
Anonymous and aggregated data may be retained indefinitely.
Your Rights
Under UK data protection law, you have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Request deletion of your data
- Restrict or object to processing
- Request data portability
- Withdraw consent at any time
- Lodge a complaint with the Information Commissioner’s Office (ICO)
Withdrawing or removing required data may prevent me from delivering services under my Terms & Conditions.
You can make a request by emailing [email protected]. I normally respond within one month, in line with the applicable legal requirements. If extra time is permitted and needed, I’ll explain why.
Cookies
My website does not use advertising or tracking cookies. I use Plausible to understand website traffic; its standard analytics does not use cookies or local storage and reports aggregate statistics only.
If I add anything in future that needs your consent, I will ask for it before it is used. See the Cookies Policy for the full details.
Data Security
I use reasonable technical and organisational measures to protect personal data. However, no method of transmission or storage is completely secure, and I cannot guarantee absolute security.
Third-Party Links
My website may contain links to third-party websites. I am not responsible for the privacy practices or content of those websites.
Contact & Data Protection
If you have questions or concerns about this Privacy Policy or how personal data is handled, please contact: