Sawyer&Co. Privacy Policy
This privacy policy ("Privacy Policy") applies to personal data we collect from you as a customer ("you" or "your"). It explains what data we collect, why we collect it, how it is used, the lawful basis for processing your personal data, and your rights under applicable data protection and privacy laws, including the General Data Protection Regulation (GDPR).
1. Who We Are
We are Sawyer&Co., your trusted photography and videography service provider. We are the data controller responsible for handling your personal data.
2. What Data We Collect
We collect and process the following information during your enquiry and throughout our contract for photography/videography services:
Personal Information: This includes your name, address, email address, phone number, date of birth, gender, country of residence, as well as details of family members or other participants in a photography session (such as names, dates of birth, etc.), and any other information you provide.
Payment Information: Your debit/credit card and bank account details, which are handled by our payment providers, are used to process payments for our services.
Other Information: Any additional details you choose to share when corresponding with us via email or phone.
As part of our services, we create photographs and videos that may identify you, your family, or other participants, which can be considered personal data. These photos or videos may be produced in both print and digital formats. You are responsible for ensuring that all participants in a session or event have received a copy of this privacy policy.
Your personal data will be processed to perform our contract, fulfil legal obligations, and for our legitimate interests, as outlined below.
3. How We Use Your Data
We use your personal data for the following purposes:
Service Delivery: To provide our services, create the products you’ve requested, and contact you regarding your use of our services. This is necessary to perform our contract with you.
Legitimate Business Interests: We may use your data for business purposes, including:
Responding to enquiries or complaints.
Sending postal communications of potential interest to you.
Retaining minimal data if you request removal from marketing lists, in order to prevent future unwanted processing.
Complying with legal obligations, protecting our operations, and enforcing legal rights.
Marketing (With Consent): With your consent, we may use your photographs for promotional purposes, including in printed materials (brochures, posters, etc.), on our website, and on social media platforms such as Instagram, Pinterest, and Facebook.
Additional Purposes: Occasionally, we may process personal data for other purposes compatible with those outlined here. In such cases, we will notify you and seek your consent where necessary.
You can object to processing based on our legitimate interests at any time by contacting us (see "Your Data Protection Rights" section below).
4. Sharing Your Information
We may share your personal data with third parties under the following circumstances:
Service Providers: We work with third-party providers who support our operations (e.g., payment processors, IT suppliers, photo retouchers, printers). These parties may access or process your data while performing their services.
Business Transfers: If Sawyer&Co. is sold or undergoes a business transfer, personal data held by us may be transferred as part of that process.
Legal Obligations: We may disclose your data to comply with legal obligations, protect our rights, or in response to court orders or law enforcement requests.
5. Payment Information
Payments made via debit/credit cards are processed by third-party providers using secure, encrypted methods. Sawyer&Co. does not store or process card details directly.
You can opt out of us holding your payment details, though this means you will need to provide them again for future transactions.
6. Data Transfers
Your personal data may be transferred to and stored in countries outside the UK, such as the United States, where our service providers operate. These countries may not have the same data protection laws as the UK, but we take steps to ensure your data remains protected in accordance with applicable laws, such as using Privacy Shield certification or standard contractual clauses.
7. Data Retention
We will not retain your personal data for longer than necessary. For example:
Photography session data is stored for 6 years to comply with tax laws.
Marketing data is stored until you unsubscribe.
After the retention period, we securely delete your personal data.
8. Your Data Protection Rights
Under data protection laws, you have the right to:
Access: Request a copy of your personal data.
Rectification: Request corrections to inaccurate or incomplete data.
Erasure: Ask us to delete your personal data in certain circumstances (e.g., if processing is based on consent and you withdraw it).
Restriction: Request restrictions on how we process your personal data.
Data Portability: Receive your data in a structured, machine-readable format.
Objection: Object to data processing based on legitimate interests.
Withdraw Consent: If we rely on your consent, you can withdraw it at any time.
To exercise these rights, please contact us (details below).
9. Contact
For any questions or requests regarding this Privacy Policy, please contact us at:
Email: sawyerandco.creative@gmail.com