1. Introduction and company information

This Privacy Policy explains how Northlight Portrait Studio Ltd collects, uses, discloses, stores, and protects personal data when you visit our website, contact us, make enquiries, book services, attend our photo studio, purchase products, or otherwise interact with us.

The data controller responsible for your personal data is Northlight Portrait Studio Ltd, a photo-studio business operating in the United Kingdom.

Company name: Northlight Portrait Studio Ltd
Registered / business address: Unit 4, 18 Frederick Place, Brighton, BN1 4EA, UK
Email: [email protected]
Phone: +44 1273 845 962

We aim to handle personal data lawfully, fairly, and transparently in accordance with applicable privacy laws.

2. Data collection and processing

We may collect and process the following categories of personal data:

We may collect personal data directly from you, from persons booking on your behalf, from payment and booking systems, from our website, or from third-party service providers involved in delivering our services.

3. Purpose of data processing

We process personal data for the following purposes:

4. Legal basis for processing

We only process personal data where we have a valid legal basis to do so. Depending on the circumstances, our legal bases include:

Where we process special category data, we will only do so where an additional lawful condition applies, such as your explicit consent or another condition permitted by law.

5. Data sharing and third parties

We may share personal data with third parties where necessary for the purposes described in this Policy. These may include:

We require third parties to process personal data securely and only for specified purposes, and where appropriate under written contractual arrangements. We do not sell personal data.

6. Data transfer to third countries

Some of our service providers may store or process personal data outside the United Kingdom or the European Economic Area. Where this occurs, we take appropriate steps to ensure that any transfer is protected by suitable safeguards, which may include:

By using our services, you acknowledge that certain personal data may be transferred internationally in accordance with applicable legal requirements and safeguards.

7. Storage duration

We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, insurance, and reporting requirements.

Typical retention periods may include:

When personal data is no longer required, we will delete, anonymise, or securely archive it in accordance with our retention practices.

8. User rights

Subject to applicable law, you may have the following rights in relation to your personal data:

To exercise any of these rights, please contact us using the details set out below. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law.

9. Withdrawal of consent

Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

If you withdraw consent for the use of images for marketing or portfolio purposes, we will stop any future use of those images for that purpose, although previously published materials may not always be fully removable from all channels or third-party platforms.

10. Right to complain

If you are concerned about how we handle your personal data, please contact us first so that we may try to resolve the matter promptly and fairly.

You also have the right to lodge a complaint with the relevant supervisory authority. In the United Kingdom, this is typically the Information Commissioner's Office (ICO).

We encourage you to contact us before making a formal complaint, but you are entitled to contact the supervisory authority directly.

11. Data security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures may include:

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You should also take care when sharing information with us electronically.

12. Contact information

If you have questions about this Privacy Policy, wish to exercise your rights, or want to contact our data controller, please use the details below:

Northlight Portrait Studio Ltd
Unit 4, 18 Frederick Place
Brighton, BN1 4EA
United Kingdom

Email: [email protected]
Phone: +44 1273 845 962

13. Changes to privacy policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we process personal data. Any updated version will be posted on our website with a revised effective date where appropriate.

We encourage you to review this Privacy Policy periodically to stay informed about how Northlight Portrait Studio Ltd protects your personal data.

8/28/2026 Home