Privacy Policy

Last Updated: 21st November 2025

This Privacy Policy explains how f22 Studios Ltd (“we”, “our”, or “us”) collects, uses, and protects your personal data when you visit our website https://f22studios.co.uk (“Website”) or when you contact us or use our commercial photographic services.

We are committed to safeguarding your privacy and complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all relevant data protection laws.

Who We Are

f22 Studios Ltd
Unit 20, Millennium Business Park,
Enterprise Close, Mansfield,
Nottinghamshire, United Kingdom
NG19 7JY

Email: info@f22studios.co.uk
Website: https://f22studios.co.uk

We are the Data Controller for the personal data we collect.

Personal Data We Collect

We may collect and process the following types of personal data:

Information you provide directly

  • Name

  • Email address

  • Phone number

  • Business details (for commercial clients)

  • Billing/payment details (handled securely via our payment providers)

  • Any other information you provide via our contact forms, emails, or phone enquiries

Information collected automatically when you use our Website:

  • IP address

  • Browser type and version

  • Device information

  • Pages visited and interaction data

  • Cookies (see section below)

Images and media

As a photographic business, we may collect and store:

  • Photographs and video content created as part of our services

  • Necessary model consent forms for identifiable individuals

We do not collect any special category (sensitive) data unless explicitly required and consented to (e.g., for specific photography involving such data).

How We Use Your Personal Data

We use your personal data for the following purposes:

  • To respond to enquiries and provide quotations

  • To deliver and manage photographic services

  • To communicate about bookings, projects, and support

  • To process payments and invoices

  • To send service-related updates

  • To maintain business records

  • To operate, maintain, and improve our Website

  • For legal and regulatory compliance

We only process personal data where we have a lawful basis, including contractual necessitylegitimate interestslegal obligation, or consent where required.

Lawful Bases for Processing

We rely on the following lawful bases under UK GDPR:

  • Contract: Processing necessary for providing our photographic services

  • Legitimate Interests: Business operations, marketing to existing clients, website analytics

  • Consent: When using identifiable images for promotional purposes

  • Legal Obligation: Accounting, taxation, and record-keeping requirements

Sharing Your Personal Data

We may share your personal data with:

  • Payment processors

  • Professional printing/production partners

  • IT service providers and web hosting providers

  • Email and communication service providers

  • Accountants or legal advisers

  • Delivery services

We do not sell your data.

Where third parties process data, they do so under strict contractual obligations that comply with UK GDPR.

International Transfers

If any personal data is transferred outside the UK (e.g., cloud storage providers), we ensure appropriate safeguards are in place such as:

  • UK GDPR-approved Standard Contractual Clauses

  • Adequacy regulations

  • Equivalent data protection safeguards

Data Retention

We retain personal data only as long as necessary for the purposes collected, including:

  • Client records: up to 7 years (for tax and accounting purposes)

  • Photographs: duration agreed in contract, or until consent is withdrawn (for promotional use)

  • Website analytics data: typically 12–26 months

You may request deletion at any time (see section below).

Security of Your Data

We implement appropriate technical and organisational measures to protect your data, including:

  • Secure servers and encrypted connections (HTTPS)

  • Restricted access control

  • Regular security monitoring

  • Encrypted storage where appropriate

However, no internet transmission is fully secure, and we cannot guarantee absolute security.

Your Data Protection Rights

Under the UK GDPR, you have the following rights:

  • Right to access – Request a copy of the data we hold

  • Right to rectification – Correct inaccurate data

  • Right to erasure – Request deletion of your data

  • Right to restrict processing

  • Right to object – Including to marketing

  • Right to data portability

  • Right to withdraw consent at any time

  • Right to lodge a complaint with the UK Information Commissioner’s Office (ICO)

Contact details for exercising your rights:
Email: info@f22studios.co.uk

Cookies and Tracking Technologies

Our Website may use cookies to:

  • Enable essential site functionality

  • Improve performance

  • Analyse website usage (e.g., Google Analytics)

You can manage cookie preferences through your browser settings.

If required, we can also provide a separate Cookie Policy.

Photography, Image Rights & Consent

For commercial projects involving identifiable individuals:

  • We may require signed consent or release forms

  • Images will be used only for agreed purposes

  • Promotional use of images will only occur with explicit consent

Clients are responsible for obtaining necessary permissions from individuals featured in commissioned photography unless otherwise agreed.

Links to Other Websites

Our Website may contain links to external sites. We are not responsible for their content or privacy practices.

Changes to This Privacy Policy

We may update this policy periodically. The updated version will always be posted on our Website with a revised “Last Updated” date.

Contact Us

For any questions about this policy or your personal data, please contact:

f22 Studios Ltd
Unit 20, Millennium Business Park,
Enterprise Close, Mansfield,
Nottinghamshire, United Kingdom
NG19 7JY

Email: info@f22studios.co.uk