Privacy & Cookie Policy
Last updated: 8 August 2026
Everleaf Photography respects your privacy and takes care of the personal information and photographs entrusted to us. This policy explains what we collect, why we use it, who we may share it with, how long we keep it, and your rights.
Everleaf Photography is the controller of the personal information described in this policy.
Contact
Everleaf Photography
38 High Street
Cheshunt
Hertfordshire
EN8 0AQ
Email: info@everleafphotography.co.uk
Telephone: 01992 631415
Information we collect
Depending on how you contact or book with us, we may collect:
• your name, email address, telephone number, address and other contact details;
• booking, appointment, payment and transaction information;
• the type of photography session you are interested in;
• a baby’s due date or birth date, a child’s name and age, and information about parents, guardians or other session participants;
• messages, preferences, questionnaires, contracts and information needed to plan and safely provide a session;
• photographs, video and audio created during a session, together with image selections and editing or product instructions;
• information you choose to give us about accessibility, allergies, health or other needs relevant to providing the service safely;
• marketing preferences, reviews and competition or promotion entries;
• technical information about visits to our website, such as device, browser, approximate location, pages viewed and cookie choices.
We usually receive this information directly from you. A parent or guardian may provide information about a child, and a person arranging a family session may provide limited information about other participants.
How and why we use information
We use personal information to:
• answer enquiries and provide quotations;
• manage bookings, sessions, payments, contracts and client communication;
• plan and safely deliver photography services;
• create, edit, display for private selection, supply and archive photographs and products;
• operate password-protected client galleries and provide digital downloads;
• keep business, accounting and tax records;
• prevent fraud, protect our systems and enforce or defend legal rights;
• improve our website and understand how people find and use it, where consent is required;
• send marketing when you have asked to receive it or where the law otherwise permits it.
Our lawful bases will depend on the activity. They are normally:
• contract, where processing is needed to answer a booking request or provide the service you have asked for;
• legal obligation, for records or disclosures we must keep or make;
• legitimate interests, for proportionate business administration, security, service improvement, fraud prevention, archiving and the establishment or defence of legal claims;
• consent, for optional marketing, non-essential cookies, and the public or promotional use of identifiable client photographs where consent is the appropriate basis.
If you provide health or other special-category information relevant to a session, we use it only where necessary and where an additional lawful condition applies, normally your explicit consent.
Children and photographs
Our services frequently involve babies and children. We normally deal with a parent or legal guardian, who must provide information and permissions on the child’s behalf.
Private delivery of photographs to the client is part of the photography service. We will not use identifiable client photographs on our website, portfolio, social media, advertising or other public marketing solely because a session was booked. Any such use will be covered by a separate, clear choice or agreement. You may withdraw consent for future use at any time, although this will not affect use that was lawful before withdrawal or material that cannot reasonably be recalled.
Sharing information
We do not sell personal information and do not share it with other organisations for their own marketing.
We may share only what is necessary with trusted suppliers that help us provide the service, such as:
• Pixieset and other website, booking, contract, gallery and image-delivery providers;
• payment processors, banks and accounting providers;
• email, telephone, cloud storage, security and IT providers;
• professional print, album, framing, courier or fulfilment suppliers;
• Google Analytics, Microsoft Clarity and similar measurement services, subject to the cookie and consent settings described below;
• professional advisers, insurers, regulators, law-enforcement bodies or courts where necessary or legally required.
Suppliers must handle information for the agreed purpose and protect it appropriately.
Some suppliers may process information outside the United Kingdom. Where this happens, we use providers and safeguards intended to give the information protection required by UK data-protection law. You can contact us for more information about relevant safeguards.
How long we keep information
We keep information only for as long as reasonably needed for the purpose for which it was collected, including legal, accounting, insurance and dispute requirements.
As a guide:
• enquiries that do not become bookings are normally kept for up to 12 months;
• booking, contract, payment and accounting records are normally kept for up to 6 years after the relevant transaction or client relationship;
• private galleries are available for the period communicated to the client;
• photographs and working files may be kept for service delivery, reasonable backup and archive purposes, or to establish or defend legal rights.
Retention may be shorter or longer where you request deletion, we agree a different archive arrangement, or the law or an active dispute requires it. Because photographs may be valuable family records, please ask us about the applicable gallery and archive period and keep your own secure copies of delivered images.
Marketing
If you have asked to receive news or offers, you can unsubscribe at any time by using the link in an email or contacting us. Service messages about an enquiry, booking, payment, contract, gallery or order are not marketing.
Cookies and analytics
Cookies are small files or similar technologies used by websites and browsers.
We may use:
• strictly necessary cookies, required for security, navigation, forms, bookings, client galleries and your cookie choices; and
• analytics cookies, including Google Analytics, to understand website use and improve the site.
Strictly necessary cookies do not require consent. We will ask for consent before setting non-essential analytics or marketing cookies. You can accept, reject or change your choice through the cookie banner or your browser settings. Rejecting non-essential cookies will not prevent you from using the main website, although some optional features may work differently.
Google may receive information such as your device, browser, approximate location and website activity when Google Analytics is enabled. Google’s own privacy information explains how it handles data.
We use Microsoft Clarity to understand how visitors use the website through aggregated usage information, heatmaps and session recordings. Clarity may collect technical and interaction information such as device and browser details, pages viewed, clicks and scrolling. Sensitive information entered into forms is masked, and Clarity cookies are currently disabled. Microsoft processes this information under its own privacy terms.
Security
We use reasonable technical and organisational measures to protect personal information. These include controlled access and, where offered, password-protected galleries and secure service providers. No internet or storage system can be guaranteed completely secure.
If you receive a client-gallery link or password, please keep it private. You are responsible for anyone with whom you choose to share access.
Your rights
Depending on the circumstances, UK data-protection law may give you the right to:
• ask for a copy of your personal information;
• correct inaccurate or incomplete information;
• ask us to erase information;
• restrict or object to processing;
• receive certain information in a portable format;
• withdraw consent at any time;
• complain about how your information has been used.
These rights are not absolute and some legal exceptions apply. To make a request, contact info@everleafphotography.co.uk. We may need to verify your identity before responding.
You can also complain to the Information Commissioner’s Office at ico.org.uk (https://ico.org.uk/), although we would appreciate the opportunity to address your concern first.
Links and other websites
Our website may link to Pixieset galleries, payment services, social networks or other websites. Those services control their own processing and have their own privacy and cookie information.
Changes to this policy
We may update this policy when our services, suppliers or legal obligations change. The latest version and its update date will appear on this page.