1. Who controls your information
ON Lisk-Carew Photography is the controller of personal information collected through this website and photography enquiries. To make a privacy request, use the website's booking/contact route and identify the message as a privacy request.
2. Information collected
The website may receive information you choose to provide when you book a consultation, access a client gallery or communicate about a commission. This can include your name, email address, organisation, event or project details, scheduling information and correspondence. Client gallery access records include the gallery requested, whether access was granted or denied, and the date and time of the attempt. Gallery passwords are checked securely and are not stored in access records.
Where you consent to optional analytics, limited device and usage information may be collected by HubSpot, including pages visited, approximate location derived from an internet address, browser type and interaction information.
3. Why information is used
- To respond to enquiries and arrange consultations.
- To plan, deliver and administer photography commissions.
- To provide protected client delivery pages and photographs.
- To keep business and financial records where required.
- With consent, to understand and improve website performance.
4. Lawful bases
Information is handled where necessary to take steps at your request before a contract, perform a contract, meet legal obligations, pursue legitimate business interests that do not override your rights, or where you have given consent. Optional analytics are not loaded unless you accept them.
5. HubSpot booking and analytics
Consultation booking is provided through HubSpot's EU-hosted meeting service. Opening the embedded scheduler or the external booking page sends information directly to HubSpot. HubSpot analytics are loaded only after consent and can be declined without preventing access to the site or external booking page.
6. Client galleries and Google Photos
Client delivery pages require a name, email username and gallery password. After successful verification, the site creates a temporary protected session and displays the photographs through ON Lisk-Carew's own gallery pages. The underlying Google Photos shared-album address and individual Google media addresses are kept on the server and are not released to the visitor.
Access records are used to protect delivery, support clients and investigate repeated unsuccessful attempts. An authorised visitor can still download photographs, capture the screen or share their website password; no online delivery system can prevent every onward copy. Gallery passwords and Google album links can be changed when required.
7. Sharing and international transfers
Information may be processed by service providers needed to operate the business, including HubSpot for booking and optional analytics, Google Photos as the master gallery store, and website hosting providers. Protected image requests are relayed by the website without revealing the Google Photos album address. These organisations operate under their own privacy terms and may process information in countries outside the UK. Appropriate contractual or legal safeguards are relied on where required.
8. Retention and security
Information is kept only as long as reasonably needed for enquiries, commissions, gallery delivery, access control, record keeping and legal obligations. Gallery access records are available only through the owner account or the private hosting account. Reasonable technical and organisational measures are used, but no internet service can guarantee absolute security.
9. Your choices and rights
Depending on the circumstances, you may ask to access, correct, erase or restrict personal information, object to certain uses, request portability, or withdraw consent. You may also complain to the UK Information Commissioner's Office. Withdrawing consent does not affect processing that was lawful before withdrawal.
10. Cookies
The site stores a small preference in your browser to remember whether you accepted or declined optional analytics. A strictly necessary, secure session cookie is used for up to six hours after a successful client gallery sign-in so protected photographs can be requested without repeatedly entering the password. If analytics are accepted, HubSpot may set additional cookies. You can clear or block cookies using your browser settings, although blocking the gallery session cookie prevents protected photographs from loading.
11. Changes to this notice
This notice may be updated when services, providers or legal requirements change. The latest version will remain available on this page with its update date.