Privacy policy

Last updated: 30/09/26

This page explains what personal information I collect, why I collect it, and what I do with it. I've tried to keep it plain. If anything's unclear, email me and I'll explain.

Who I am

I'm Andy Mitty, a wedding photographer based in Soham, Cambridgeshire, trading as Andy Mitty Photography. I'm responsible for the personal information described here. You can contact me at [email protected].

I'm registered with the Information Commissioner's Office. My registration number is C2047583.

What I collect

When you get in touch. Your names, email address, phone number, wedding date, venue, and anything else you tell me about your plans.

When you book me. Everything above, plus your address, the details in your contract, and payment information. Payments are handled by [payment provider], and I never see or store your full card details. Before the wedding I'll also collect details about the day, such as timings, the names of people for family photos, and contact details for your other suppliers.

On your wedding day. Photographs of you, your family and your guests.

When you download my guide. Your first name, email address and, if you choose to give it, your wedding date.

When you visit my website. Basic information about how the site is used, collected through cookies. There's more on this below.

Why I use it

I only use your information when I have a proper reason to. That means one of four things:

To do the job you've booked me for. Planning your day, photographing it, delivering your gallery, and handling the contract and payments.
Because it's in both our interests. Replying to your enquiry, or keeping records so I can answer questions about your wedding later.
Because you've said yes. Sending you the guide and the occasional email about planning your wedding. You can unsubscribe at any time using the link at the bottom of every email.
Because the law requires it. Keeping financial records for tax.

Your photographs

Your photographs are the heart of what I do, so I'll be specific here. I may share some of them on my website, on social media, or with the venue and suppliers from your day, as set out in your contract. If you'd rather I didn't, tell me and I won't. That's fine, and it won't change anything about how I photograph your day.

Your guests appear in photographs too. If a guest ever asks me to remove a photograph of them from my website or social media, I'll do it.

Who else sees your information

I don't sell your information, and I never will. I use a small number of trusted services to run my business, and they handle some of your information on my behalf:

Google Workspace, for email and file storage
MailerLite, for the guide and my email list
Showit, which hosts my website
Shootproof, for delivering your photographs
Cloudflare
CleanTalk
Google reCAPTCHA

Some of these services store information outside the UK. When they do, they use recognised legal safeguards to protect it.

How long I keep it
Enquiries that don't turn into bookings: [12 months], then deleted.
Client records and contracts: as long as tax law requires, which is usually six years.
Your photographs: I keep a backup of your gallery for [number] years after your wedding, in case you ever need it again.
The email list: until you unsubscribe.
Your rights

You can ask me, at any time:

for a copy of the information I hold about you
to correct anything that's wrong
to delete your information, where I'm not legally required to keep it
to stop using your information for a particular purpose
to withdraw any consent you've given

Email [email protected] and I'll reply within one month. There's no charge.

If you're unhappy with how I've handled your information, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

Cookies

My website uses a small number of cookies, and they're all there to keep the site secure and stop spam. None of them track you for advertising, and I don't use analytics that follow you around the internet.

Cloudflare protects the site from bots and attacks.
CleanTalk stops spam coming through my contact form. To tell people from bots, it looks at things like how long a form takes to fill in, and it processes that information on its own servers.
Google reCAPTCHA protects my email sign-up form from bots. Google's privacy policy applies to the information it collects.

Because these cookies are needed for the site to work safely, they're set without asking first. You can block or delete cookies in your browser settings, but the contact and sign-up forms may not work if you do.
[Once you've checked what your site actually sets, add a line here about your cookie banner.]

Changes to this policy

If I change how I use your information, I'll update this page and the date at the top.