PRIVACY POLICY

Last updated: 11th September 2026

Rob Kirman Photography respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information I collect, why I use it, how it is stored and the rights you have in relation to it.

1. Who I Am

Rob Kirman Photography is an independent photography business operating in the United Kingdom.

Website: robkirmanphotography.com

Email:  info@robkirmanphotography.com

Correspondence address: Argoed Farm, Argoed Lane, Overton, Wrexham. LL13 0HH.

For data protection purposes, Rob Kirman Photography is the data controller for personal information that I collect and use in connection with my website, enquiries, bookings and photography services, including information received from third parties where appropriate.

2. Information I May Collect

Depending on how you interact with me, I may collect:

• Your name
• Email address
• Telephone number
• Information submitted through enquiry and contact forms
• Details relating to a photography session, event, project or booking
• Information provided by a referral partner or collaborator where relevant to your booking
• Correspondence between us
• Billing and transaction information
• Photographs and video created as part of commissioned work
• Iris photographs and edited iris artwork where you use the Incredible Irises service
• Information relating to delivery of galleries, prints or other products
• Website usage and cookie information where applicable

I only collect information that is reasonably necessary to operate my business and provide the services you request.

3. How I Use Your Information

I may use your information to:

• Respond to enquiries and provide quotations
• Arrange and manage photography bookings
• Communicate with you before, during and after a commission
• Deliver photographs, galleries, prints and other agreed products
• Process payments and maintain appropriate financial records
• Administer workshops, teaching or other services
• Maintain appropriate business records
• Improve my website and services
• Comply with legal and regulatory obligations
• Create, edit and deliver commissioned photographic and digital artwork
• Where Creative Iris Artwork is commissioned, use selected edited iris photographs with third-party AI-assisted and digital creative tools as part of the artwork production process

The lawful basis for processing will normally be contract, including steps taken at your request before entering into a contract; legal obligation; legitimate interests where appropriate and proportionate; or consent where consent is the appropriate basis.

Where AI-assisted creative tools are used, this processing is undertaken only as part of providing the commissioned service and not for automated decision-making about the Client.

4. Photographs and Portfolio Use

Photographs and artwork created during commissioned work may contain personal information where individuals can be identified from them.

Private commissioned photographs and artwork will not automatically be used for advertising, portfolio or promotional purposes simply because I created them.

Where permission is required for portfolio, website, social-media, exhibition, competition or promotional use, this will be dealt with separately through the relevant agreement or permission process.

This applies equally to original photographs, edited photographs and finished creative artwork, including AI-assisted iris artwork.

Where I rely on consent, that consent may be withdrawn at any time for future use. Withdrawal of consent does not affect the lawfulness of any processing that took place before consent was withdrawn.

5. Children

Where photography involves children, booking arrangements and permissions will normally be handled through a parent, guardian, school, nursery or other authorised organisation as appropriate.

I take particular care when processing personal information, photographs and artwork relating to children.

Photographs or artwork involving children will not be used publicly for portfolio, website, social-media or promotional purposes unless appropriate permission has been obtained.

6. Who I May Share Information With

I do not sell personal information.

Where reasonably necessary to provide my services or operate the business, personal information may be processed by trusted third-party service providers, including:

• Pixieset and other website, gallery or client-management providers
• Email, cloud-storage and business-management providers
• Payment-processing and accounting services
• Professional photographic laboratories, printers, framers and album suppliers
• Digital editing, creative software and AI-assisted service providers used to produce commissioned artwork
• Professional advisers where necessary
• Referral partners or collaborators where relevant to arranging or fulfilling a booking
• Public authorities where disclosure is required by law

Only information reasonably necessary for the relevant purpose will be shared.

Where third-party providers process personal information on my behalf, I take reasonable steps to use appropriate providers and contractual arrangements consistent with applicable data-protection law.

7. International Processing

Some of the technology, cloud-storage, gallery, payment or AI-assisted service providers I use may process or store personal information outside the United Kingdom.

Where this happens, I take reasonable steps to use providers that put appropriate safeguards in place in accordance with applicable UK data-protection law.

These safeguards may include adequacy regulations, recognised contractual protections or other lawful transfer mechanisms where required.

8. How Long I Keep Your Information

Personal information is not kept for longer than reasonably necessary for the purposes for which it was collected.

Enquiries that do not become bookings will normally be reviewed and deleted when they are no longer required.

Client, contractual and financial records may be retained for the period required for accounting, tax, legal, insurance or legitimate business purposes.

Photographs, edited images, iris photographs, creative artwork and client galleries may be retainedasonable period af delivert seateice, backup, re-ordering, archive or legitimate businessuoek.

Where third-party editing or AI-assisted services are used, information may also be retained by those providerson reqs.ataithaiwdn

permanent copies of delivered photographs and artwork.

Retention periods are reviewed periodically, and information that is no longer required will be deleted or anonymised where appropriate.

9. Cookies and Website Information

This website may use cookies and similar technologies that are necessary for the website to function properly.

Where non-essential analytics, advertising or similar technologies are used, visitors will be given appropriate information and, where required, asked for consent before those technologies are used.

Further information may be provided through the website’s cookie settings or cookie notice where applicable.

10. Your Rights

Depending on the circumstances, you may have the right to:

• Request access to personal information held about you
• Request correction of inaccurate or incomplete information
• Request deletion of personal information in certain circumstances
• Request restriction of processing in certain circumstances
• Object to certain processing
• Request transfer of information in certain circumstances
• Withdraw consent at any time where processing relies on consent

These rights are not absolute and may apply differently depending on the circumstances and the lawful basis being used. 

To exercise any of these rights, please contact:

info@robkirmanphotography.com

I will normally respond to a valid rights request within one calendar month. 

You also have the right to raise a concern with the Information Commissioner’s Office (ICO) if you believe your personal information has been handled improperly.

11. Security

Reasonable technical and organisational measures are used to protect personal information from accidental loss, misuse, unauthorised access, alteration or disclosure.

Where personal information is processed using third-party services, I take reasonable steps to use reputable providers and appropriate account, access and security controls.

No internet-based or electronic system can be guaranteed to be completely secure, but reasonable steps are taken to protect the information entrusted to Rob Kirman Photography.

12. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes to the business, website, services, technology providers or legal requirements.

The latest version will always be published on this website and the “Last updated” date at the top of the policy will be revised accordingly.

Where a significant change materially affects how personal information is used, I will take reasonable steps to bring that change to the attention of affected clients where appropriate.

13. Contact

If you have any questions about this Privacy Policy, how your personal information is handled, or if you wish to exercise any of your data-protection rights, please contact:

Rob Kirman Photography

Email: info@robkirmanphotography.com

Website:  robkirmanphotography.com

Address: Argoed Farm, Argoed Lane, Overton, Wrexham. LL13 0HH.