Introduction

This Privacy Policy explains how your personal data is collected, used, stored, and protected by Carley Aplin.

I am committed to safeguarding your privacy and ensuring your personal information is handled responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using this website or booking my services, you agree to the terms of this Privacy Policy.

Business Details

Business Name: Carley Aplin
Legal Name: Carley Aplin
Business Structure: Sole Trader
Location: Southampton, Hampshire, United Kingdom
Email Address: hello@carleyaplin.com

For the purposes of data protection legislation, Carley Aplin is the Data Controller.

Information I Collect

I may collect and store the following personal information:

• Full name
• Email address
• Telephone number
• Postal address (if required for billing or delivery)
• Session details and preferences
• Communication history
• Payment-related information (processed securely by third parties)
• Website usage data including IP address and cookies

I only collect information that is necessary to provide my services.

How Your Information Is Collected

Your data may be collected when you:

• Complete a contact or enquiry form
• Book a photography session
• Purchase digital products or vouchers
• Subscribe to email communications
• Communicate with me via email or social media
• Browse this website

How Your Information Is Used

• Your personal data may be used to:
• Respond to enquiries
• Manage bookings and contracts
• Deliver photography services
• Process payments
• Deliver digital products
• Provide galleries and downloads
• Send booking confirmations and session information
• Communicate important updates
• Maintain business records for accounting and legal purposes

Your data will never be used for purposes outside those listed above.

Legal Basis for Processing

Under UK GDPR, I process personal data under the following lawful bases:
Contractual necessity: to fulfil bookings and services

Legitimate interests: for business administration and communication
Legal obligation: accounting and tax requirements
Consent: for marketing communications and portfolio use

You may withdraw consent at any time.

Sharing Your Information

Your data is never sold or shared for marketing purposes.

Information may be shared only with trusted third parties essential to business operation, including:
Website hosting platforms

• Online gallery providers
• Client management systems
• Email communication platforms
• Payment processors such as Stripe
• Accounting software

All third parties are GDPR compliant and process data securely.

Payment Information

Payments are processed securely via Stripe or bank transfer.

I do not store or have access to your full card details.

Online Galleries and Image Storage

Client images are delivered via secure online galleries.

Galleries are password protected where applicable and remain active for a limited time as stated in your contract.

Clients are responsible for downloading and backing up their purchased files.

Marketing and Image Usage

With your permission, images may be used for:

• Website
• Portfolio
• Social media
• Marketing materials
• 
  

You may opt out of image usage at any time by contacting me in writing. Your decision will always be respected.

Email Communications

If you subscribe to my mailing list, your email address will be used only to send relevant updates, offers, or information.
You may unsubscribe at any time using the link provided in emails.

Cookies
This website uses cookies to improve user experience and analyse website traffic.

Cookies may collect:

• IP address
• Browser type
• Pages visited
• Time spent on the site
• You can disable cookies through your browser settings at any time.
• A separate Cookies Policy may provide further details.

Data Storage and Security

Your personal data is stored securely using encrypted systems and password-protected platforms.
Reasonable technical and organisational measures are in place to protect your data against unauthorised access, loss, or misuse.

Data Retention
Personal data is retained only for as long as necessary to:

• Provide services
• Meet legal and accounting requirements
• Maintain business records

Images and client information may be archived for portfolio and legal purposes unless you request deletion.

Your Rights Under GDPR

You have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Withdraw consent at any time
• Request data portability

To exercise any of these rights, please contact: hello@carleyaplin.com

Third-Party Links

This website may contain links to third-party websites.

I am not responsible for the privacy practices of external sites. Please review their policies separately.

Changes to This Policy

This Privacy Policy may be updated periodically to reflect changes in legislation or business practices.
The most current version will always be available on this website.

Contact

If you have any questions about this Privacy Policy or how your data is handled, please contact:
hello@carleyaplin.com

Last updated: January 2026