Effective Date: 24 July 2026
Last Updated: 24 July 2026

​

Privacy Policy

​

Welcome to Gibbs & Sister ("we", "us", "our"). We are committed to protecting your privacy and handling your personal information responsibly.

​

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, enquire about our wedding photography services, book with us, or otherwise interact with us.

​

Our website is: www.gibbsandsister.co.uk

​

This Privacy Policy has been prepared in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and other applicable UK data protection laws.

​

1. Data Controller

Business Name: Gibbs & Sister
Business Type: Sole Trader
Website: www.gibbsandsister.co.uk
Email: gibbsandsister@gmail.com

​

If you have any questions regarding this Privacy Policy or your personal information, please contact us using the email address above.

​

2. Information We Collect

We may collect personal information directly from you when you:

• Submit an enquiry through our website

• Contact us by email

• Book our photography services

• Complete questionnaires or booking forms

• Sign a contract

• Make payments

• Subscribe to updates (where offered)
   

The personal information we collect may include:

• Full name

• Partner's name

• Email address

• Telephone number

• Postal address

• Wedding date

• Wedding venue

• Billing information

• Information relating to your wedding plans

• Messages you send us

• Supplier information where provided

• Any other information you voluntarily provide
   

3. Wedding Photographs

As part of providing our wedding photography services, we create and retain digital photographs that may identify you, members of your wedding party and guests.

Some images may incidentally reveal information such as religious beliefs (for example through the wedding ceremony) or health information that is visible within photographs.

These images are processed solely for the purpose of providing our photography services and fulfilling our contract with you, unless another lawful basis applies.

​

4. Information Automatically Collected

When you visit our website, we may automatically collect information including:

• IP address

• Browser type

• Device type

• Operating system

• Pages visited

• Date and time of visits

• Referring website

• Cookie information

• Website usage statistics
   

5. How We Use Your Information

We use your personal information to:

• Respond to enquiries

• Provide quotations

• Arrange consultations

• Process bookings

• Prepare contracts

• Deliver wedding photography services

• Process payments

• Deliver online galleries

• Supply albums and prints

• Contact you regarding your booking

• Maintain business records

• Improve our website and services

• Comply with legal obligations

• Prevent fraud and maintain website security

Where you have given consent, we may also use your information to send occasional updates about our services. You may unsubscribe at any time.

​

6. Lawful Basis for Processing

Under UK GDPR, we process personal information under one or more of the following lawful bases:

• Performance of a contract

• Legitimate interests

• Compliance with legal obligations

• Consent

• Establishment, exercise or defence of legal claims where applicable
   

7. Sharing Your Information

We only share your information where necessary.

This may include trusted third parties such as:

• Secure online gallery providers

• Album manufacturers

• Professional print laboratories

• Payment processors

• Website hosting providers

• Cloud storage providers

• Email providers

• IT support providers

• Accountants

• Legal advisers

• Government authorities where required by law

We require third-party providers to process your information securely and in accordance with applicable data protection laws.

8. International Transfers

Some of our trusted service providers may process personal information outside the United Kingdom.

Where this occurs, we ensure appropriate safeguards are in place as required under UK GDPR.
 

9. Image Portfolio & Marketing

We may occasionally wish to display selected wedding photographs on:

• Our website

• Social media platforms

• Wedding blogs

• Online portfolios

• Printed promotional materials

• Awards and competitions
   

Where applicable, we will only do this where permitted under our contract or another lawful basis under UK data protection law.

If we have agreed with you that your wedding images will remain private, we will honour that agreement.

10. Data Retention

We retain personal information only for as long as reasonably necessary.
 

Typical retention periods include:

• Enquiries that do not result in a booking: up to 24 months.

• Contracts and financial records: up to 7 years where required by law.

• Wedding photographs and edited galleries: retained for a reasonable business period unless otherwise agreed.
   

Although we take reasonable care in storing images, clients are responsible for downloading and safely backing up all delivered photographs.

Secure backups may also be retained for disaster recovery purposes.
 

11. Cookies

Our website uses cookies to:

• Ensure the website functions correctly

• Improve user experience

• Analyse website traffic

• Remember user preferences

• Improve website performance

Where legally required, we will ask for your consent before placing non-essential cookies on your device.

You can change your cookie preferences at any time through your browser settings or our cookie management tool, where available.
 

12. Website Analytics

We may use website analytics services to help us understand how visitors use our website.

Analytics information may include:

• Pages visited

• Time spent on pages

• Browser type

• Device type

• Approximate location

• Referring website

Where required, analytics cookies will only be activated after obtaining your consent.
 

13. Data Security

We take appropriate technical and organisational measures to protect your personal information, including:

• Secure HTTPS encryption

• Password-protected systems

• Secure cloud storage

• Limited access to personal information

• Regular software updates

• Reputable third-party providers

Although we take reasonable steps to safeguard your information, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

​

14. Your Rights

Under UK data protection law, you have the right to:

• Request access to your personal information.

• Request correction of inaccurate information.

• Request deletion of your personal information where applicable.

• Request restriction of processing.

• Object to certain processing activities.

• Request a copy of your information in a portable format where applicable.

• Withdraw consent at any time where processing is based on consent.

• Lodge a complaint with the Information Commissioner's Office (ICO).

We aim to respond to all valid requests within one calendar month.
 

15. Children's Information

Our website is intended for adults arranging wedding photography.

Wedding photographs may naturally include children attending weddings as guests. Such images are processed solely for the purpose of providing our contracted photography services.
 

16. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for the content, privacy practices or policies of those websites, and we encourage you to read their privacy policies before providing personal information.
 

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, legal obligations or website functionality.

The latest version will always be published on our website with the revised "Last Updated" date shown at the top of this page.
 

18. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

​

Gibbs & Sister

Website: www.gibbsandsister.co.uk
Email: gibbsandsister@gmail.com

​

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO), the UK's independent authority for data protection matters.