Privacy Policy

Last updated: 19 June 2026

M + J Photography (“we”, “us” or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you visit this website (the “Site”), and sets out your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For the purposes of applicable data protection law, we are the data controller in respect of personal data processed through the Site.

1. Information we collect

We do not require you to create an account or submit personal information to browse the Site. We may process the following categories of data:

2. How we use your information

We use the information described above for the following purposes:

3. Lawful basis for processing

We process personal data on the basis of our legitimate interests in operating, securing, and improving the Site (Article 6(1)(f) UK GDPR), and, where you contact us, to respond to your enquiry and take steps at your request (Article 6(1)(b)). We do not carry out marketing and do not rely on consent for that purpose.

4. Cookies and similar technologies

This Site does not set cookies. Limited functional preferences may be stored locally in your browser on your own device; such information remains on your device and is not transmitted to us.

5. Analytics and performance

We use privacy-friendly, cookieless analytics and performance-monitoring tools to understand Site usage and load performance in aggregate. These tools do not store identifiers on your device and do not track you across other websites.

6. Service providers and disclosures

We use third-party service providers to host the Site, deliver images, and monitor for errors. These providers process data on our behalf and only in accordance with our instructions. We do not sell your personal data. We may disclose information where required to do so by law or to protect our legal rights.

7. International transfers

Some of our service providers may process data outside the United Kingdom. Where such transfers occur, we rely on appropriate safeguards recognised under UK data protection law to ensure your information remains protected.

8. Data retention

We retain personal data only for as long as necessary for the purposes set out in this Policy, or as required to comply with our legal obligations, after which it is deleted or anonymised.

9. Data security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, or disclosure. No method of transmission over the internet is, however, completely secure.

10. Your rights

Under UK data protection law you have rights in relation to your personal data, including the rights of access, rectification, erasure, restriction of processing, objection to processing, and data portability. To exercise any of these rights, please contact us using the details below. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk.

11. Third-party links

The Site may contain links to third-party websites. We are not responsible for the privacy practices or content of such websites and encourage you to review their privacy policies.

12. Changes to this Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “last updated” date.

13. Contact

For any questions about this Privacy Policy or our handling of personal data, please contact us at J.R.Lightly.Media@gmail.com.

This Privacy Policy is provided for general information and does not constitute legal advice.