Privacy Policy

Clever Cookies Photography Ltd

Last updated: 28 September 2026

Clever Cookies Photography (“we”, “our”, “us”) is committed to protecting your personal data. This policy explains what information we collect, how we use it, and your rights under UK GDPR.

1. Information We Collect

We collect the minimum information needed to provide our services, including:

  • Your name and email address

  • Order details

  • Payment information (processed securely by Stripe — we never see or store card details)

  • Gallery access data (login activity)

  • Images of children taken during school photography sessions

2. How We Use Your Data

We use your data to:

  • Provide access to private galleries

  • Process orders and deliver digital downloads

  • Communicate about your order

  • Maintain security and prevent unauthorised access

  • Comply with school safeguarding requirements

3. Lawful Basis for Processing

We process data under:

  • Contract — to fulfil your order

  • Legitimate interest — to provide secure gallery access

  • Consent — where schools require parental permission for photography

4. Sharing Your Data

We only share data with:

  • Stripe (payment processing)

  • Our secure gallery platform (Sunshine Photo Cart)

  • Schools, where required for safeguarding or access control

We do not sell or share your data with third parties for marketing.

5. How Long We Keep Data

  • Gallery images: retained for the period agreed with the school

  • Order information: retained for accounting purposes (typically 6 years)

  • Contact details: retained only as long as needed to provide services

6. Your Rights

You have the right to:

  • Access your data

  • Request correction

  • Request deletion

  • Object to processing

  • Withdraw consent (where applicable)

To exercise your rights, contact: admin@clevercookies.co.uk

7. Security

We use secure hosting, encrypted payment processing, and restricted gallery access to protect your data.

  • UK based site hosting and image storage
  • User login required and multi-factor authentication required for access

 

8. Contact

For privacy enquiries: admin@clevercookies.co.uk