Privacy policy

Updated 29 May 2018


This is the privacy policy of Alison Taylor Photography. In this policy, “I”, “my”, or “me” refer to Alison Taylor Photography.

This privacy policy sets out how, why and for how long I process information that I collect from my users (“you”), or that you provide to me. It covers information that could identify you (“personal information”) and information that could not. In the context of the law and this notice, “process” means collect, store, transfer, use or otherwise act on.

I take seriously the protection of your privacy and maintaining the security of any personal information received from you. I understand that you are entitled to know that your personal data will not be used for any purpose unintended by you.

I strictly adhere to the requirements of data protection legislation in the UK, including that required by the EU General Data Protection Regulation (GDPR).

The law requires me to tell you about your rights and my obligations to you in regards to the processing and control of your personal data. I do this now, by requesting that you read the information provided at or at

By using my website you acknowledge that you have read and agree to the terms and conditions of this privacy policy. If you do not agree to all of the terms of this privacy policy, your sole and exclusive remedy is to discontinue use of the website.

How, why and for how long I process your personal data

Except as set out below, I do not share, sell or disclose to a third party any information collected through my website, unless disclosure is necessary to (1) conform to legal requirements, (2) protect my rights, or (3) protect your vital interests or the vital interests of another person.

The law requires me to determine under which of six defined bases I process different categories of your personal information, and to notify you of the basis for each category. If the basis on which I process your personal information is no longer relevant then I shall immediately stop processing your data. If the basis changes then if required by law I shall notify you of the change and of any new basis under which I have determined that I can continue to process your information.

Usage data

When you browse my website, I process data about your use of the website. This may include your approximate geographical location, browser type, and version, operating system, referral source, length of visit, page views, and website navigation paths, as well as information about the timing, frequency, and pattern of your website visits. This data is non-personally identifiable and so you are anonymous to me. The legal basis for processing this data is my legitimate interests, namely monitoring, analysing, and improving my website usage and the services I provide. This data is stored in my Analytics service, Google Analytics, for an indefinite period of time, or until I decide I no longer need it for the purposes outlined above.

You can prevent your data from being used by Google Analytics by installing the Google Analytics opt-out browser add-on.

When you make an enquiry through my contact form or by sending me an email

When you submit an enquiry, I process the information contained in your enquiry, including your name and email address. I believe that you would reasonably expect me to process this data for the purposes of responding to your enquiry, and so I process it on the basis that there is a legitimate interest to you and to me in doing so.

I process this data and any data in subsequent email communication between you and me for as long as is necessary to adequately deal with your enquiry and track my communications with you.

When you subscribe to a newsletter

When you sign up to receive a newsletter, I ask for your consent to process your personal information. I process this information in order to send you the information you have subscribed to. I continue to process your information on this basis until you withdraw your consent or it can be reasonably assumed that your consent no longer exists. You can withdraw your consent at any time by instructing me by email at or by clicking the unsubscribe link in the newsletter you receive.

When you make a payment for a product or service

Payment information is never taken by me either through my website or otherwise.

At the point of payment, you are transferred to a secure page on the website of either PayPal or Stripe, my payment service providers, or to a secure page on my website which operates the Stripe payment gateway through a pop-up window. In all cases, your payment is controlled by either Paypal or Stripe, not by me. You can find information about Paypal’s privacy policies and practices here, and about Stripe’s privacy policies and practices here.

Information I process because I have a legal obligation

I may process any of your data identified in this policy in order to comply with a legal obligation, or in order to protect your vital interests or the vital interests of another natural person. This may include your personal information.

Other information I may process

I may process any of your data identified in this policy where necessary for the establishment, exercise, or defense of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The legal basis for this processing is my legitimate interests, namely the protection and assertion of my legal rights, your legal rights, and the legal rights of others.

I may process any of your data identified in this policy where necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice. The legal basis for this processing is my legitimate interests, namely the proper protection of my business against risks.

Accessing, updating and removing your personal information

You can at any time request a copy of your personal data processed by me, or request to have it updated if it is incorrect. You can do both these things by sending an email to After receiving your request, I will tell you when I expect to provide you with the information requested or correct the incorrect information.

If you wish to remove your personal information, you can make a request by sending an email to

Verification of your information

When I receive any request to access, edit or delete personal identifiable information I shall first take reasonable steps to verify your identity before granting you access or otherwise taking any action. This is important to safeguard your information.

My use of cookies

Cookies are small text files that are placed on your computer’s hard drive by your web browser when you visit any website. They allow information gathered on one web page to be stored until it is needed for use on another. Cookies allow me to distinguish you from other visitors to the website, helping me to provide you with a good user experience and allowing me to improve the site.

Cookies may be either “persistent” cookies or “session” cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date unless deleted by the user before the expiry date. A session cookie will expire at the end of the user session when the web browser is closed.

You can choose to disallow cookies by changing your browser settings. However, by doing so, you may hinder your user experience on this and other websites. You can read more about cookies and how to disallow them at

My website uses cookies. They are placed by software that operates on my servers, and by software operated by third parties whose services I use.

Cookies that I use

Necessary cookies
These cookies help make my website usable by enabling basic functions like page navigation and access to pages that require visitors to create an account and log in. The website cannot function properly without these cookies.

COOKIE NAME: phpsessid
EXPIRY: Session
PURPOSE: Preserves users’ states across page requests

Analytics cookies

I use Google Analytics to help me understand how you interact with my website by collecting and reporting information anonymously. You can find more information about Google Analytics cookies and privacy here.

EXPIRY: 2 years
PURPOSE: Registers a unique ID that is used to generate statistical data on how the visitor uses the website

EXPIRY: 24 hours
PURPOSE: Used to distinguish visitors

EXPIRY: Session
PURPOSE: Used by Google Analytics to throttle request rate

Cookies used for payment processing

I use these cookies if you make a payment through Stripe or Paypal.

EXPIRY: 27 days
PURPOSE: Used by Paypal for the checkout process when making a Paypal payment

COOKIE NAME: simpay_wp_session
EXPIRY: Session
PURPOSE: Used for payment processing

COOKIE NAME: cid, __stripe_mid, __stripe_sid and checkout-live-session
EXPIRY: Session
PURPOSE: Used for payment processing

EXPIRY: Persistent
PURPOSE: Used for payment processing

PURPOSE: Used for payment processing

Encryption of data sent between us

I use Secure Sockets Layer (SSL) certificates to verify my website’s identity to your browser and to encrypt any data you give me. Whenever information is transferred between us, you can check that it is done so using SSL by looking for a closed padlock symbol or other trust mark in your browser’s URL bar or toolbar.


How you can complain

If you are not happy with my privacy policy or if have any complaint then you can tell me by sending an email to

If you are in any way dissatisfied with how I process your personal information, you have a right to lodge a complaint with the Information Commissioner’s Office. This can be done at

Retention period for personal data

Except as otherwise mentioned in this privacy policy, I keep your personal information only for as long as required by me:

  • to provide you with the services you have requested
  • to comply with other law, including for the period demanded by tax authorities
  • to support a claim or defence in court

Third party websites

I may include links to third-party websites that are controlled and maintained by others. It is your responsibility to review the privacy and cookie policies of these sites. I am not responsible for the policies and practices of third-party sites.

More information and review of this privacy policy

You can find more information about UK data protection legislation at the Information Commissioner’s website.

I may update this privacy policy from time to time as necessary. The terms that apply to you are those posted here on my website on the day you use my website.

If you have any questions about this privacy policy please contact me by email at or through my contact form.