Last updated: 1 October 2026
This policy explains what personal information I collect, why I need it and how I look after it.
Who I am
Striking Places Limited (company number 09741068), trading as Striking Places Photography, is a commercial photography business run by me, Jo Hailey. For data protection purposes I’m the “data controller”, which means I’m responsible for your information.
11 Belsize Close, St Albans, Hertfordshire AL4 9YD
Email: [email protected]
Phone: 0800 298 2119
What I collect
- When you get in touch: your name, email address, phone number and anything you write in your message.
- When you book me: your business details, the address of the shoot, invoicing details and our emails and notes about the job.
- During a shoot: photos and video can include people, such as staff headshots or guests at an event.
- When you ask me to look after your Google Business Profile: the access you give me and the information Google shows to profile managers, such as reviews and customer questions.
- When you use this website: details about your visit from Google Analytics, which don’t say who you are. This only happens if you accept analytics cookies. See my Cookie Policy.
Why I use it
The law asks me to explain my reasons for using your information. It calls these my “lawful basis”. Here they are:
- To reply to you and give you a quote, because you’ve asked me to.
- To do the work you’ve booked, invoice you and keep proper records, because we have a contract and the law says I must keep business accounts.
- To show my work in my portfolio, on social media or in case studies. I only use photos of people where they or their business have agreed.
- To send you occasional news or offers, only if you’ve asked for them. You can unsubscribe at any time.
Who I share it with
I never sell your information. I only share it with people who help me run the business. They only get what they need:
- the company that hosts my website
- the services I use for email, calendars and client records, such as Google and HubSpot
- payment providers, when you pay by direct debit or card
- freelance editors who help with photo and video editing
- my accountant
- Google, when I publish photos or Street View tours to Google Maps or manage your Google Business Profile for you
Some of these companies store information outside the UK. Where they do, they use the safeguards UK law requires.
How long I keep it
- Enquiries that don’t go ahead: up to 2 years, then I delete them.
- Client records and invoices: 6 years after the job, because the law says I must keep business records that long.
- Photos and video: I keep an archive so I can supply copies later. If you’d like images of you removed, just ask.
How I keep it safe
I keep your information in secure, password-protected systems and only share it as described above.
Your rights
Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you can ask me to:
- give you a copy of the information I hold about you
- correct anything that’s wrong
- delete your information
- stop or limit how I use it
- send your information to you or someone else in a format you can use
If you agreed to something, such as receiving news from me, you can change your mind at any time. To ask for any of these, email [email protected]. I’ll reply within a month.
If you’re not happy
Please tell me first and I’ll do my best to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
Children
My website and services are for businesses and aren’t aimed at children.
Other websites
My website links to other sites and shows content from companies like Google and YouTube. They have their own privacy policies, so please check those too.
Changes to this policy
If I change how I use your information, I’ll update this page and the date at the top.