Privacy policy

How we handle your personal data under UK GDPR and the Data Protection Act 2018.

Template notice: this is a good-faith starting point, not legal advice. Please have this policy reviewed by a solicitor or data-protection specialist before relying on it.

1. Who is responsible for your data

O'Gara Photography is the data controller for the personal data described in this policy. If you have any questions, contact us at [email protected].

2. What we collect

Account details — your name, email address and password (stored only as a secure hash).
Order details — the photographs you buy, amounts paid and download activity.
Payment data — handled by Stripe. We receive confirmation of payment and a reference, but never your full card number.
Technical data — IP address, browser type and session cookies needed to run the site securely.
Marketing preferences — whether you have opted in to email updates.

3. How and why we use it

To take payment and deliver your downloads (to perform our contract with you).
To provide your account, order history and customer support (legitimate interests).
To keep the site secure and prevent fraud (legitimate interests and legal obligation).
To send event and gallery updates, only if you have opted in (consent, withdrawable at any time).

4. Cookies

We use a small number of strictly necessary cookies to keep you signed in, remember your basket and protect forms against cross-site request forgery. We do not use advertising cookies.

5. Sharing your data

We share data only with the processors that make the service work: Stripe (payments), our email provider (transactional and, where opted in, marketing email) and our cloud storage provider (hosting your files). We do not sell your data.

6. How long we keep it

We keep order and account records for as long as needed to provide the service and to meet tax and accounting obligations, then delete or anonymise them. Download links and their logs expire automatically.

7. Your rights

You have the right to access, correct, delete or restrict use of your personal data, to object to certain processing, and to data portability. You can update your details or marketing preferences in your account settings, or contact us to exercise any of these rights.

8. Complaints

If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to resolve your concern first.

9. Changes

We may update this policy from time to time. The current version always appears on this page.