Privacy Policy

    Last updated: 17 January 2026

    1. Introduction

    Welcome to Crafted Image. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our website and services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

    2. Data Controller

    Crafted Image is the data controller responsible for your personal data. If you have any questions about this privacy policy or our data practices, please contact us at:

    3. Information We Collect

    We may collect and process the following categories of personal data:

    3.1 Information You Provide

    • Contact Information: Name, email address, phone number
    • Property Information: Property address and type for booking services
    • Account Information: Email and password when you create an account
    • Communication Data: Messages you send through our contact form

    3.2 Information Collected Automatically

    • IP Address: Collected for spam prevention and security purposes
    • Usage Data: How you interact with our website
    • Device Information: Browser type, operating system

    4. Legal Basis for Processing

    We process your personal data based on the following legal grounds:

    • Contract Performance: To fulfil bookings and provide our photography services
    • Legitimate Interests: To improve our services, prevent fraud, and ensure security
    • Consent: Where you have given explicit consent for specific processing activities
    • Legal Obligation: To comply with legal and regulatory requirements

    5. How We Use Your Information

    We use your personal data to:

    • Process and manage your bookings
    • Provide our property photography services
    • Communicate with you about your enquiries and bookings
    • Send service-related notifications
    • Improve our website and services
    • Prevent spam and protect against fraudulent activity
    • Comply with legal obligations

    6. Data Sharing

    We do not sell your personal data. We may share your information with:

    • Service Providers: Third-party services that help us operate our business (e.g., email services, hosting providers)
    • Legal Requirements: When required by law or to protect our rights

    All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify.

    7. Data Retention

    We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Contact form submissions with IP addresses are automatically deleted after 24 hours. Booking information is retained for the duration of our business relationship and for up to 6 years afterwards for legal and accounting purposes.

    8. Your Rights

    Under UK GDPR, you have the following rights:

    • Right of Access: Request a copy of your personal data
    • Right to Rectification: Request correction of inaccurate data
    • Right to Erasure: Request deletion of your data ("right to be forgotten")
    • Right to Restrict Processing: Request limitation of how we use your data
    • Right to Data Portability: Request transfer of your data to another service
    • Right to Object: Object to processing based on legitimate interests
    • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

    To exercise any of these rights, please contact us at info@craftedimage.uk. We will respond to your request within one month.

    9. Data Security

    We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, secure servers, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

    10. Cookies

    Our website uses essential cookies to ensure proper functionality. We also use cookies for authentication and session management. You can control cookie settings through your browser preferences. Please note that disabling certain cookies may affect website functionality.

    11. International Transfers

    Your data may be processed by service providers located outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your data in accordance with UK GDPR requirements.

    12. Changes to This Policy

    We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

    13. Complaints

    If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. Visit ico.org.uk for more information.

    14. Contact Us

    If you have any questions about this privacy policy or wish to exercise your data protection rights, please contact us: