In short: we only collect what we need to plan your shoot, deliver your photos and run our business. We never sell your data. You can ask to see, correct or delete it at any time by emailing hello@olatunjifagbore.com.
1. Who we are
Mastermind Creative Agency, trading as Mastermind Photography, is the data controller for the personal data described in this policy.
Contact: hello@olatunjifagbore.com · Social: @mastermindphotography.
We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What we collect
- Contact details: your name, email address and phone number.
- Booking details: the service and package, date and time, venue or address, timeline, family-group lists, shot lists, and anything you tell us in your message.
- Business details (corporate bookings): your organisation, job title, invoicing details, and names of team members to be photographed.
- Payment records: amounts, dates and invoices. Card payments are handled by our payment provider; we never see or store your full card number.
- Photographs and video of you, your guests, your team or event attendees.
- Communications: emails and messages you send us, including through social media.
3. How & why we use it
| What we do | Lawful basis under UK GDPR |
|---|---|
| Reply to your enquiry, hold your requested slot and send a quote | Steps at your request before entering a contract |
| Plan, photograph, edit and deliver your shoot; take payment | Performance of our contract with you |
| Keep accounting and tax records | Legal obligation |
| Show selected images in our portfolio, website and social media | Legitimate interests (you can object at any time; see section 4) |
| Use images of children in marketing | Your explicit consent only |
| Send occasional offers or news, if you opt in | Consent (unsubscribe at any time) |
| Contact business clients about similar services | Legitimate interests (you can opt out at any time) |
4. Photos of you & your guests
- We photograph guests and attendees as part of the service our client has booked, based on our client's and our legitimate interests.
- At corporate events we recommend clients offer opt-out lanyards or stickers, and we avoid photographing anyone who has opted out.
- If you appear in a photo we've published and would like it removed, email us and we'll take it down from our own channels promptly.
- You can ask us not to use your shoot in our portfolio at any time. If you tell us before the shoot, nothing will be published.
- We don't use your images to train AI models, and we don't sell them to stock libraries.
5. Children
We photograph children only with a parent or guardian present or with their permission, and we never publish images of children in our marketing without the parent's or guardian's explicit written consent. Our website and services are not aimed at children, and we don't knowingly collect data from anyone under 13.
6. Who we share it with
We never sell your data. We share only what's needed with trusted providers who process it on our behalf under contract:
- Our online gallery host, to deliver your photos
- Our payment processor and our bank
- Our email and cloud storage providers, including encrypted backups
- Our accountant, for tax and accounting
- Second photographers, videographers or editors working on your booking, under a confidentiality agreement
- Album and print labs, if you order products
Some providers may store data outside the UK. Where they do, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement.
We may also disclose data if the law requires it.
7. How long we keep it
| Data | How long |
|---|---|
| Enquiries that don't become a booking | 12 months |
| Online gallery | 12 months after delivery |
| Archive copies of your images | 2 years after delivery |
| Booking, contract and payment records | 6 years after the end of the tax year, as required for tax purposes |
| Portfolio images you've agreed we can use | Until you ask us to remove them |
8. Keeping it safe
We protect your data with password-protected and two-factor-secured accounts, encrypted cloud backups and private, password-protected galleries. Memory cards are kept with us until your images are backed up in three places, and then they are wiped. Access is limited to the people working on your booking.
9. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Correct anything that's wrong or incomplete
- Erase your data, where we have no legal reason to keep it
- Restrict or object to how we use it, including for portfolio use and marketing
- Data portability, which means receiving your data in a common format
- Withdraw consent at any time, where we rely on consent
Email hello@olatunjifagbore.com to use any of these rights. It's free, and we'll reply within one month.
10. Website & cookies
Our website doesn't set advertising or analytics cookies. To display the site, your browser loads fonts from Google Fonts and some images from Unsplash. These services receive your IP address and browser details, as needed to deliver those files, under their own privacy policies.
When our booking form goes live, the details you enter are used only to handle your enquiry, as described above.
11. Contact & complaints
If you have a question or concern about your data, please email hello@olatunjifagbore.com first and we'll do our best to help.
You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint · 0303 123 1113.
See also our Terms & Conditions.