DRP Photography – Schools & Nurseries Privacy Notice

Introduction

DRP Photography provides professional photography services to schools, nurseries and educational settings. This Privacy Notice explains how personal data and photographic images are collected, used, stored, shared and protected.

Who We Are

DRP Photography is operated by David R Peart. We act either as a Data Controller or Data Processor depending on the nature of the service being provided.

Data We Process

We may process children's photographs, parent and guardian contact information, order details, payment information, school administrative data, and website enquiry information.

Purpose of Processing

To provide photography services, fulfil parent orders, communicate with customers, maintain records, comply with legal obligations, and support educational photography operations.

Lawful Basis

Processing may be based on contract, legitimate interests, legal obligations, and consent where required.

Children's Images

Children's photographs are processed solely for agreed photography services. Images are not used for advertising, websites, brochures, social media or promotional materials without appropriate consent.

Data Sharing

Information may be shared with professional print laboratories, online gallery and ordering systems, payment providers, cloud storage providers, professional advisers, and educational settings where necessary to provide services.

Security Measures

DRP Photography uses password-protected systems, encrypted devices where available, two-factor authentication, secure cloud storage, restricted access controls, and secure deletion procedures.

Retention Schedule

Data TypeRetention PeriodSchool & Nursery Portrait

Images12 months

Parent Orders7 years

Financial Records7 years

Website Enquiries24 months

Marketing ConsentsUntil withdrawn

Data Breach Procedure

Any suspected data breach will be investigated promptly. Schools, nurseries, affected individuals and regulatory authorities will be notified where required by law.

International Transfers

If data is processed outside the UK, appropriate safeguards will be implemented in accordance with UK GDPR requirements.

Your Rights

Individuals have rights including access, rectification, erasure, restriction, portability, objection, and complaint to the Information Commissioner's Office.

School & Nursery Relationships

Schools and nurseries may act as Data Controllers. DRP Photography may act as a Data Processor when handling information on behalf of educational settings. Separate agreements may be established where required.

Information Commissioner's Office (ICO) Registration
DRP Photography is registered with the Information Commissioner's Office (ICO) as a data controller.
Registration Number: XXXXXXXX

Contact Information

DRP Photography
Email: info@drpphotography.co.uk