Privacy Policy

Last updated: 20 July 2026

This privacy policy explains how Gavin Bernard Photography collects, uses and protects personal information when you visit this website, make a purchase or contact me.

Who I am

Gavin Bernard Photography is operated by Gavin Bernard as a sole trader based in West Sussex, United Kingdom.

For data-protection purposes, Gavin Bernard is the data controller.

Email: gavbernard@gmail.com
Website: www.gavinbernardphotography.com

Information I collect

I may collect:

  • Your name, email address, telephone number, billing address and delivery address.

  • Details of products ordered, order value, delivery method and order history.

  • Messages and information you provide through the contact form or by email.

  • Technical information such as your IP address, browser, device type, pages visited and cookie preferences.

  • Payment confirmation and limited transaction information. I do not directly receive or store your complete card details.

I do not currently operate a marketing mailing list or send promotional emails.

How I use your information

I use personal information to:

  • Process and fulfil orders.

  • Take payment and issue refunds where necessary.

  • Arrange printing, framing, packaging and delivery.

  • Communicate about orders or respond to enquiries.

  • Maintain financial, tax and business records.

  • Prevent fraud and protect the security of the website.

  • Understand how the website is used and improve its performance.

  • Meet legal and regulatory obligations.

The lawful bases I rely upon are performance of a contract, compliance with legal obligations, legitimate business interests and, where required for non-essential cookies, consent.

Who receives your information

Information may be shared only where necessary with:

  • Squarespace, which hosts the website and provides ecommerce and website-management services.

  • Squarespace Payments and its payment-processing partners, which securely process payments.

  • Creativehub and its associated print-production services, which produce and fulfil print orders.

  • Postal services, couriers and delivery providers.

  • Professional advisers, regulators, law-enforcement bodies or public authorities where legally required.

These organisations process information under their own privacy terms or on my behalf. I do not sell or rent personal information.

International processing

Some service providers may process information outside the United Kingdom. Where this happens, the provider is responsible for using appropriate legal safeguards, such as an adequacy decision or approved contractual protections.

How long information is kept

I retain information only for as long as reasonably necessary:

  • Order and transaction records may be kept for up to six years for accounting, tax and legal purposes.

  • General enquiries will normally be retained for no longer than 12 months unless continuing correspondence or a legal reason requires longer retention.

  • Technical and analytics information is retained according to the settings and policies of the relevant service provider.

Cookies and analytics

This website uses essential cookies required for functions including security, shopping baskets, checkout and cookie preferences.

It may also use analytics cookies to understand site traffic and performance. Where consent is legally required, non-essential cookies should not be set unless you accept them through the cookie banner.

You can change your cookie preferences or delete cookies using your browser settings.

Security

Reasonable technical and organisational measures are used to protect personal information. However, no internet transmission or storage system can be guaranteed to be completely secure.

Your rights

Under UK data-protection law, you may have the right to:

  • Request access to your personal information.

  • Ask for inaccurate information to be corrected.

  • Request deletion of information in certain circumstances.

  • Ask for processing to be restricted.

  • Object to certain uses of your information.

  • Request transfer of information in a portable format.

  • Withdraw consent where processing is based on consent.

To exercise these rights, email gavbernard@gmail.com. I may need to verify your identity before responding.

You can also complain to the Information Commissioner’s Office at www.ico.org.uk.

Changes to this policy

This policy may be updated occasionally to reflect changes to the website, services or legal requirements. The latest version will always appear on this page.