ProHeadshots: Privacy Policy

Nutkins UK Ltd, doing business as “ProHeadshots”, (“we” or “us”) is sensitive to concerns that personal information collected from its customers (“you” or “your”) be handled respectfully and appropriately.

The Policy

This Privacy Policy (the “Policy”) discloses the privacy practices for ProHeadshots and applies solely to information collected by the website ProHeadshots.uk including any related domains and subdomains (the “Site”). This Policy should be viewed alongside our Terms & Conditions, and is intended to notify you of the following:

What personally identifiable information collects from you through the Site, how it is used and with whom it may be shared.
What choices are available to you regarding the use of your data.
The security procedures in place to protect the misuse of your information.
How you can correct any inaccuracies in the information.

Data Controller Information

Nutkins UK Ltd, at registered address 48 May Pole Knap, Somerton, Somerset, TA11 6HR, registered in England No. 10781892, VAT registration number GB 438 7147 70, is the data controller responsible for the processing of your personal data as described in this Privacy Policy. For any privacy-related inquiries, please contact us at peter@proheadshots.uk.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

Consent: Where you have given clear consent for us to process your personal data for a specific purpose. E.g., completing our contact form for a Professional Headshot.
Contract: The processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract. E.g., payment information.
Legal Obligation: The processing is necessary for us to comply with a legal obligation.
Legitimate Interests: The processing is necessary for our legitimate interests, or the legitimate interests of a third party, provided your interests and fundamental rights do not override those interests.

Detailed Information on Data Sharing

We may share your personal data with the following categories of third parties, only to the extent necessary to fulfill our contractual obligations or as permitted by law:

Payment Processors: We use Stripe and Square to handle payment transactions securely.
IT and Hosting Services: We use LightBlue to host our client information. All these partners are carefully vetted and are bound by contractual obligations to keep your data secure and use it only for the purposes specified.

We take precautions to protect your information. When you submit sensitive information via the Site, your information is protected both online and offline.

Wherever we collect sensitive information, that information is encrypted and transmitted to us by secure servers. We have included common indications of such secured features when appropriate such as a closed lock icon at the top of your web browser.

While we use encryption to protect sensitive information transmitted online, we also protect your information offline. Only employees who need the information to perform a specific job (for example, billing or customer service) are granted access to personally identifiable information. The computers/servers in which we store personally identifiable information are kept in a secure environment.

Data Subject Rights

As a data subject, you have the following rights under GDPR:

Right to Access: You can request access to the personal data we hold about you.
Right to Rectification: You can request correction of any inaccurate or incomplete data.
Right to Erasure: You can ask us to delete your personal data under certain conditions.
Right to Restrict Processing: You can request that we limit the processing of your data.
Right to Data Portability: You can request a copy of your data in a structured, commonly used format.
Right to Object: You can object to the processing of your data in certain circumstances, including for direct marketing purposes (you may opt out of any future contacts from us, or request that we discontinue sending email and other communications).

To exercise any of these rights, please contact us at peter@proheadshots.uk.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected or to comply with legal, accounting, or reporting requirements. Typically, this means:

Order Information: Retained for 7 years for tax and accounting purposes.
Contact Information: Retained until you request deletion or unsubscribe from our communications. We review our retention periods regularly and securely delete or anonymise data that is no longer needed.

Cookies and Tracking

Our website does not use cookies. But we all like real cookies—especially the white chocolate and raspberry ones!

Testimonials

ProHeadshots may display personal testimonials of yours from time to time received via email or as otherwise received from you by ProHeadshots. By accepting the Terms of Use, which incorporate this Privacy Policy, you give ProHeadshots specific consent to use such personal testimonial. If you would like ProHeadshots to remove your testimonial or customer review at any time, please simply contact us at peter@proheadshots.uk, and we will promptly do so.

Updates

Our Privacy Policy may change from time to time, and all updates will be posted on this page.

If you have any questions about this Privacy Policy, you may contact us via email at peter@proheadshots.uk.