Terms of Service Privacy Policy Cookie Policy

Privacy Policy

Privacy Policy
PUSHLIGHT (LucyD Photography)
Last updated: June 2026

This privacy policy explains how PUSHLIGHT (LucyD Photography) collects, uses, stores, and protects your personal information when you use our website or interact with our services.

This policy applies to all current and future website domains operated by the business. If you do not agree with this policy, you should discontinue use of this website and avoid submitting personal information through our forms.

1. Who We Are

For the purpose of data protection law, the data controller is:
Lucy Dawlish trading as PUSHLIGHT (LucyD Photography)
County Durham, United Kingdom
Email: lucydphotography@protonmail.com (Business address available on request)

Throughout this policy:

  • “we”, “us”, “our” refers to PUSHLIGHT (LucyD Photography)

  • “you”, “user”, “visitor”, “client” refers to anyone using our website or services

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025.

2. Information We Collect

We may collect personal information when you complete a form on our website, enquire about our services, book a photography session, or interact with our marketing campaigns.

This information may include:

  • Name, email address, and phone number.

  • Home address or shoot location address (where relevant).

  • Photographs, image files, and likenesses captured during your session.

  • Information you submit in booking forms or pre-session planning questionnaires.

  • Website usage data, IP addresses, and cookie tracking.

3. How We Use Your Information

We may use your personal information to:

  • Respond to enquiries and plan your photography session.

  • Create, hand-edit, and securely deliver your photographs.

  • Issue invoices, process payments, and maintain accurate tax records.

  • Send occasional business updates or promotional offers (where consent is explicitly provided).

We do not sell, trade, or rent your personal information to third parties.

4. Legal Basis for Processing

Under UK GDPR, we process personal data using the following lawful bases:

  • Consent: Where you explicitly agree to receive marketing updates, or sign a separate agreement/model release allowing your images to be displayed in our public portfolio. You can withdraw your consent for promotional image use or marketing at any time.

  • Contract: Where processing is required to deliver the photography services you have purchased, including capturing, archiving, and delivering your files.

  • Legitimate Interests: Where processing is necessary for operating and protecting our business, such as maintaining records and responding to basic enquiries.

5. Data Sharing & Trusted Partners

We never share your information for external marketing. We only share limited personal data with trusted third-party providers strictly required to run our studio operations and fulfill your contract:

  • Pixieset: Handles our client workflows, automated emails, and booking invoices.

  • Stripe: Processes your session fees and image payments securely.

  • Google Drive: Hosts your private folders for final high-resolution digital delivery.

  • Loxley Colour: Fulfills and ships your custom prints, wall art, or professional albums.

  • Professional Advisers: Accountants or legal entities required for business tax compliance.

6. Photographic Integrity & Use of AI

We are deeply committed to protecting your human identity and the craft of photography:

  • All client photographs are edited entirely by hand.

  • Your images are never uploaded to generative AI image-editing systems.

  • Your files are never used to train machine-learning AI models.

  • Creative choices remain entirely human from capture to final delivery.

7. Data Security and Retention

We take appropriate technical and organisational measures to protect your personal information from loss, misuse, or unauthorised access. This includes password-protected devices, secure cloud infrastructure, and locked physical storage.

Client information and image archives are normally retained securely for up to two years to allow for long-term backup protection and client re-orders. When information or images are no longer required, they are securely deleted.

8. Your Rights

Under UK data protection law, you have the right to request access to the information we hold about you, request corrections, restrict processing, or request the total deletion of your personal data in certain circumstances. If you wish to exercise any of these rights, please contact us.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been handled improperly.
Website: https://ico.org.uk

9. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in legal requirements or business practices. The most current version will always be available on this page.

© PUSHLIGHT (LUCYD PHOTOGRAPHY)