Privacy Policy

Last updated: 18 June 2026

This Privacy Policy explains how Lumen Atellier (“we”, “us”, “our”) collects, uses, stores and protects your personal information when you visit lumenatellier.com, make an enquiry, or book us for wedding, family or portrait photography. We are committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

For the purposes of data protection law, the data controller is:

  • Lumen Atellier
  • 49 Jamaica Street, Liverpool, L1 0AH
  • Email: [email protected]
  • Phone: 07345 628324

If you have any questions about this policy or how we handle your data, please contact us using the details above.

2. The information we collect

We may collect and process the following types of personal information:

  • Contact and identity details – your name, email address, phone number, and postal address.
  • Event and booking details – wedding or event dates, venue addresses, timings, guest information you share with us, and the names of family members or others to be photographed.
  • Photographs and images – images and video we capture of you and other people at your event or session.
  • Payment information – billing details and records of payments. Card payments are handled securely by our payment provider; we do not store full card details.
  • Correspondence – the content of messages, emails and enquiry forms you send to us.
  • Website and technical data – IP address, browser type, device information, and details of how you use our website, collected via cookies and similar technologies (see Section 11).

3. How we collect your information

  • Directly from you, when you contact us, complete an enquiry or contact form, book our services, or correspond with us.
  • During the course of providing photography services (for example, the images we capture).
  • Automatically through our website via cookies and analytics tools.
  • Occasionally from third parties acting on your behalf, such as a wedding planner or venue.

4. How we use your information and our legal basis

Under UK GDPR, we must have a lawful basis for processing your personal data. We use your information for the following purposes:

  • To respond to enquiries and provide quotes – legal basis: our legitimate interests and/or taking steps to enter into a contract.
  • To deliver our photography services – including capturing, editing, storing and delivering your images – legal basis: performance of our contract with you.
  • To process payments and keep financial records – legal basis: performance of our contract and compliance with legal obligations.
  • To send service-related communications (e.g. gallery delivery, booking reminders) – legal basis: performance of our contract.
  • To use selected images for marketing and portfolio purposes – legal basis: your consent (see Section 6).
  • To send marketing communications where you have opted in – legal basis: your consent.
  • To improve and secure our website – legal basis: our legitimate interests.
  • To comply with legal and regulatory obligations – legal basis: legal obligation.

5. Photographs and sensitive information

Photography by its nature involves capturing images of people. Some images may reveal information that could be considered sensitive (special category) data – for example, images taken at a religious ceremony, or that indicate ethnic origin. By booking our services, you consent to us capturing, processing, editing and storing such images for the purpose of fulfilling our contract and delivering your photographs to you. Where images are used for any purpose beyond delivering your order, we will rely on your separate, explicit consent.

6. Use of images for marketing and portfolio

We love to share our work. However, we will only use images of you or your family on our website, social media, blog, in competitions, or in any promotional material where you have given us your consent to do so. This consent is requested separately from your booking. You may withdraw this consent at any time by contacting us, and we will stop using the relevant images going forward (though we cannot always recall material already published or shared by others).

7. Sharing your information

We do not sell your personal information. We only share it where necessary to provide our services or comply with the law. This may include:

  • Professional print labs and album manufacturers, to fulfil print and product orders.
  • Online gallery and cloud storage providers, used to deliver and back up your images.
  • Payment processors, to take payment securely.
  • Second photographers or assistants engaged for your event, bound by confidentiality.
  • Our accountant and professional advisers, where required.
  • Regulatory or law enforcement bodies, where we are legally required to do so.

8. International transfers

Some of our service providers (for example, cloud storage or online gallery platforms) may store data outside the UK. Where this happens, we take steps to ensure your data is protected by an appropriate safeguard, such as an adequacy decision, the International Data Transfer Agreement, or Standard Contractual Clauses.

9. How long we keep your information

We keep your personal information only for as long as necessary:

  • Final edited images are typically retained for 12 months after delivery as a courtesy backup, unless a longer archival service has been agreed. After this period they may be permanently deleted, so we recommend you download and back up your images promptly.
  • Booking and contract records are kept for the duration of our relationship and for a reasonable period afterwards in case of dispute.
  • Financial and transaction records are kept for 6 years to comply with tax and accounting obligations.
  • Enquiry correspondence that does not lead to a booking is deleted after a reasonable period.

10. How we protect your information

We take appropriate technical and organisational measures to keep your data secure, including password protection, secure backups, encrypted storage where appropriate, and restricting access to your information. No method of transmission or storage is completely secure, but we work to protect your data and respond promptly to any suspected breach.

11. Cookies

Our website uses cookies and similar technologies to function correctly and to help us understand how visitors use the site. Some cookies are essential; others (such as analytics and marketing cookies) are only set with your consent. You can manage your preferences through our cookie banner or by adjusting your browser settings.

12. Your rights

Under UK GDPR you have the right to:

  • Be informed about how your data is used.
  • Access the personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request erasure of your data in certain circumstances.
  • Restrict or object to our processing of your data.
  • Request transfer of your data (data portability).
  • Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us using the details in Section 1. We will respond within one month.

13. Marketing

We will only send you marketing communications where you have opted in. You can unsubscribe at any time using the link in our emails or by contacting us directly.

14. Children

We frequently photograph children as part of family and wedding work. We only photograph children with the consent of a parent or guardian, and any use of those images beyond delivering your order is subject to that parent or guardian’s explicit consent.

15. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “last updated” date.

16. Complaints

If you have concerns about how we handle your data, please contact us first so we can try to resolve the matter. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk.