Privacy Policy

1. Introduction

1.1 This privacy policy sets out how Anastasiya Kaliada, trading as a self-employed photographer at glushphoto.com (“I”, “me”, “my”), collects, uses, stores, shares, and protects information about individuals (“personal data”) in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection legislation.

1.2 glushphoto.com is a self-employed photography business operated by Anastasiya Kaliada, based in London, United Kingdom.

1.3 For the purposes of the UK GDPR, I am the data controller. My contact details are set out in Section 13 below.

1.4 This privacy policy applies to my website at glushphoto.com and to the services I provide. By using my website or getting in touch with me, you acknowledge that you have read and understood this policy.

2. What data I collect

2.1 I collect and process the following categories of personal data:

2.2 Enquiry and booking data

When you submit an enquiry through the contact form on my website, you provide me with:

Your first and last name
Your email address
Your Instagram handle (optional — used to get a sense of your style before we speak)
The type of session you are interested in (Family, Solo, Couples, Ceremony, or Other)
Your event or preferred shoot date (optional)
A message describing what you are looking for

2.3 Technical and usage data

When you visit my website, I automatically collect limited technical data, including:

Your IP address
Browser type and device type
Pages visited and time spent on the site
How you arrived at the site (referral source)
Click and interaction data

2.4 I do not collect financial data (such as bank account or payment card details) through my website. Payments are arranged separately and directly.

2.5 I do not collect any special category data (such as health information or government identification) unless you have explicitly shared this with me in the context of planning your shoot — for example, to help me accommodate an accessibility need.

3. How I collect your data

3.1 Direct interactions. I collect personal data when you fill in the enquiry form on my website, send me an email, or communicate with me directly.

3.2 Automated technologies. As you browse my website, I automatically collect technical and usage data through cookies and similar technologies. I use Google Analytics and the Meta Pixel (Facebook) to collect this data. Please see Section 8 (Cookies) for further details.

4. How I use your data

4.1 I use your personal data only for the following purposes:

To respond to your enquiry and discuss your photography needs.
To arrange, confirm, and manage your booking.
To deliver your finished photographs and provide after-shoot support.
To send you administrative communications related to your booking (such as reminders or delivery notifications). I do not send marketing emails without your explicit consent.
To understand how visitors use my website and to improve its content and performance (via Google Analytics).
To measure the effectiveness of any paid advertising I run on platforms such as Instagram, Facebook, or Google (via the Meta Pixel and Google Analytics).
To comply with my legal and tax obligations.

5. Legal basis for processing (UK GDPR Article 6)

5.1 I rely on the following legal bases for processing your personal data:

Consent (Article 6(1)(a))

I rely on your consent for the use of non-essential cookies, including Google Analytics and the Meta Pixel. Consent is obtained through the cookie notice on my website. You may withdraw consent at any time by adjusting your cookie preferences or your browser settings.

I also rely on your consent before sharing photographs from your session on my website or social media channels.

Contract / pre-contractual steps (Article 6(1)(b))

I process the personal data you provide in your enquiry form to respond to your enquiry and, if you decide to proceed, to fulfil the photography contract between us.

Legal obligation (Article 6(1)(c))

I retain certain records (such as invoices and financial correspondence) to comply with UK tax and accounting legislation.

Legitimate interests (Article 6(1)(f))

I may process your contact data to follow up on an enquiry you have made, where I have a legitimate interest in doing so, and this does not override your rights. I have carried out a balancing assessment and am satisfied that my legitimate interests are proportionate in this context.

6. Sharing your data

6.1 I do not sell your personal data. I may share limited data with the following trusted third-party services, solely to the extent necessary for running my business:

Google LLC — for website analytics (Google Analytics) and advertising performance measurement. Data may be transferred to Google servers outside the UK; Google operates under the UK–US Data Bridge and standard contractual clauses.
Meta Platforms, Inc. — for advertising performance measurement via the Meta Pixel. Meta operates under the UK–US Data Bridge and standard contractual clauses.
Email service providers — to send and receive communications with you.
Vigbo — the platform I use to deliver your finished photographs securely via a private online gallery.
Accounting software — to manage invoices and financial records.

6.2 All third-party services I use are required to handle your data in accordance with applicable data protection law. I do not permit third parties to use your personal data for their own purposes beyond what is described above.

6.3 I may also disclose personal data to HM Revenue & Customs or other regulatory authorities where I am required to do so by law.

7. Data retention

7.1 I will only retain your personal data for as long as is reasonably necessary for the purposes set out in this policy.

Enquiry messages where no booking was made: up to 12 months, in case you get back in touch.
Booking records, signed agreements, and related correspondence: up to 6 years after the date of your shoot, as required by UK tax and business record-keeping obligations.
Delivered photographs: I retain a backup copy of your edited images for up to 1 year after delivery. I recommend you download and back up your files promptly, as I cannot guarantee storage beyond this period.
Analytics data: retained by Google Analytics in accordance with the retention period I have configured (typically 14 months).

7.2 In some circumstances, I will anonymise your personal data so that it can no longer be associated with you. I may retain anonymised data indefinitely.

8. Cookies

8.1 My website uses cookies — small text files placed on your device — to help me understand how the site is used and to measure the performance of my advertising.

8.2 I use the following types of cookies:

Strictly necessary cookies: required for the basic operation of the website. This includes cookies set by the Vigbo website platform to identify the device you are using and ensure the site displays correctly. These do not require your consent.
Analytical cookies (Google Analytics): used to count visitors and understand how they navigate the site. These are placed only with your consent.
Advertising / tracking cookies (Meta Pixel): used to measure whether visitors to my website have come from my paid advertising on Instagram or Facebook, and to help me optimise those campaigns. These are placed only with your consent.

8.3 When you first visit my website, a cookie notice will ask for your consent before any non-essential cookies are placed. You can change your preferences at any time using the cookie settings link on the website, or by adjusting your browser settings.

8.4 For more information about how Google uses data from its analytics tools, visit: policies.google.com/technologies/partner-sites

8.5 For more information about how Meta uses pixel data, visit: www.facebook.com/policy/cookies

9. Your rights

9.1 Under the UK GDPR and the Data Protection Act 2018, you have the following rights:

Right of access (Article 15): you may request a copy of the personal data I hold about you.
Right to rectification (Article 16): you may ask me to correct inaccurate or incomplete data.
Right to erasure (Article 17): you may ask me to delete your personal data where there is no longer a lawful reason for me to hold it.
Right to restriction of processing (Article 18): you may ask me to limit how I use your data in certain circumstances.
Right to data portability (Article 20): you may ask me to provide your data in a portable, machine-readable format, where technically feasible.
Right to object (Article 21): you may object to my processing of your data where I rely on legitimate interests as my legal basis.
Right to withdraw consent: where I rely on consent, you may withdraw it at any time, without affecting the lawfulness of any processing carried out before withdrawal.

9.2 To exercise any of these rights, please contact me using the details in Section 13 below. I will respond within one month. There is no fee for requesting unless it is clearly unfounded, repetitive, or excessive.

10. Photographs and portfolio use

10.1 All photographs taken during your session remain my intellectual property under the Copyright, Designs and Patents Act 1988.

10.2 I may wish to share images from your session on my website (glushphoto.com) and social media channels for the purpose of promoting my work. I will always ask for your consent before doing so, and you are entirely free to decline.

10.3 If you have given consent and later change your mind, please contact me, and I will remove the relevant images from my platforms as soon as reasonably practicable.

10.4 Where a session features children under the age of 18, consent for portfolio use must be given by a parent or guardian.

11. Children’s privacy

11.1 My website is not directed at children under the age of 18, and I do not knowingly collect personal data directly from children. If you are booking a session that involves children, please ensure that enquiry and booking details are submitted by a parent or guardian.

11.2 If you believe a child has submitted personal data to me without appropriate parental consent, please contact me, and I will take steps to delete that data promptly.

12. Changes to this privacy policy

12.1 I may update this privacy policy from time to time. Any updated version will be published on this page with a revised “last updated” date.

12.2 I encourage you to check this page periodically. Where changes are significant, I will endeavour to bring them to your attention.

13. How to contact me

13.1 If you have any questions about this privacy policy, or if you wish to exercise your data protection rights, please contact me:

Anastasiya Kaliada

Email: glushphoto@gmail.com

Website: www.glushphoto.com

14. Supervisory authority

14.1 You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection (www.ico.org.uk). I would, however, appreciate the chance to address your concerns first — please do get in touch with me before approaching the ICO.

14.2 ICO contact details: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Telephone: 0303 123 1113. Website: ico.org.uk