Clever Cookies Photography Ltd
Last updated: 28 September 2026
Clever Cookies Photography is committed to protecting personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. What We Collect
We collect only the information required to provide our photography services, including:
-
Images taken during school photography sessions
-
Parent/carer contact details
-
Order information
-
Gallery access data (login activity)
2. How We Protect Data
We use:
-
Secure, encrypted hosting within the UK
-
Private galleries with restricted access
-
Password protection for user accounts
Multi-factor authentication for user accounts
-
Secure payment processing via Stripe
3. How We Use Data
Data is used to:
-
Provide access to private galleries
-
Deliver digital downloads
-
Communicate about orders
-
Meet school safeguarding requirements
4. Sharing Data
We only share data with:
-
Stripe (payment processing)
-
Our gallery platform (Sunshine Photo Cart)
-
Schools, where required for safeguarding or access control
We do not share data with third parties for marketing.
5. Retention
Images and personal data are retained only as long as necessary for:
-
Order fulfilment
-
School requirements
-
Legal and accounting obligations
6. Your Rights
You may request:
-
Access
-
Correction
-
Deletion
-
Restriction
-
Objection
Contact: admin@clevercookies.co.uk