PRIVACY POLICY
Last Updated:7/13/26
1. Who We Are
This Privacy Policy explains how Tamas Pal (T/A Tamas Varady) ("we," "us," or "our") collects, uses, stores, and protects your personal information when you visit our website, contact us, or engage our photography services.
We are committed to protecting your privacy and handling your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where applicable, the EU General Data Protection Regulation (EU GDPR).
Business Details
Business Name
Tamas Pal (T/A Tamas Varady)
Business Address
117 Harrow Road
London
HA9 6DQ
United Kingdom
2. Scope of this Policy
This Privacy Policy applies whenever you:
visit our website;
submit an enquiry through our contact form;
communicate with us by email, telephone, Zoom, or social media;
enquire about or book our photography services;
purchase albums, prints, or other products;
receive an online gallery;
or otherwise interact with our business.
By using our website, you acknowledge that your personal information may be processed as described in this Privacy Policy.
3. Information We Collect
The information we collect depends on how you interact with us.
Information You Provide
You may choose to provide information including:
your name;
email address;
telephone number;
wedding or event details;
preferred photography location;
event date;
budget information (if provided);
information contained in your enquiry;
information you provide during consultations;
payment information necessary to complete your booking;
postal address (where required for contracts, albums or print delivery);
any other information you voluntarily provide.
You are under no obligation to provide personal information. However, if you choose not to provide certain information, we may be unable to respond to your enquiry or provide our services.
Information Collected Automatically
When you visit our website, certain technical information may be collected automatically, including:
IP address;
browser type;
operating system;
device type;
pages viewed;
referring website;
date and time of your visit;
approximate location derived from your IP address;
information about how you use our website.
This information helps us understand how visitors use our website and improve the services we offer.
Photographs
As a professional photographer, the photographs we create during portrait sessions, weddings, events, and other commissioned work may contain personal data.
Depending on the nature of the commission, photographs may include:
you;
members of your family;
guests;
children;
members of your wedding party;
other individuals attending the event.
Photographs are collected solely for the purpose of providing the photography services you have requested, delivering your gallery, fulfilling album or print orders, maintaining appropriate backups, and meeting our contractual and legal obligations.
Correspondence
If you contact us by email, our website contact form, social media, or Zoom, we may retain copies of those communications in order to respond to your enquiry, provide our services, maintain accurate records, and improve our client experience.
4. How We Use Your Information
We use your information only where we have a lawful basis for doing so.
Depending on the circumstances, we may use your information to:
respond to enquiries;
arrange consultation calls;
prepare quotations and proposals;
enter into contracts;
provide photography services;
deliver online galleries;
process payments;
create albums and printed products;
communicate before and after your session or event;
maintain records relating to our business;
improve our website;
understand how visitors use our website;
detect fraud or misuse of our website;
comply with legal obligations;
establish, exercise or defend legal claims where necessary.
We do not sell your personal information.
5. Our Lawful Bases for Processing
Under UK GDPR and, where applicable, EU GDPR, we rely on one or more of the following lawful bases:
Performance of a Contract
Most of the personal information we process is necessary to fulfil our agreement with you.
For example:
responding to booking enquiries;
preparing contracts;
photographing your event;
delivering your gallery;
supplying albums or prints.
Legitimate Interests
We may process certain information where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.
Examples include:
improving our website;
maintaining records;
preventing fraud;
backing up client galleries;
responding to correspondence;
protecting our business.
Consent
Where required, we will ask for your consent before:
placing certain non-essential cookies;
processing information for purposes that legally require consent.
You may withdraw your consent at any time.
Legal Obligation
In some circumstances we may process information where required by law, including accounting, taxation and regulatory obligations.
6. Third-Party Service Providers
Like most modern businesses, we rely on carefully selected third-party service providers to help us operate efficiently and deliver our services. We only share personal information where it is necessary to provide our services, fulfil our contractual obligations, comply with legal requirements, or support the legitimate operation of our business.
These providers process personal information on our behalf under their own privacy and security obligations.
Website Hosting
Our website is hosted by Squarespace, which processes information submitted through our website, including enquiry forms and technical information necessary to operate the website.
Email Services
We use Google Workspace to manage our business email communications. Information you send to us by email may therefore be processed through Google's secure infrastructure.
Online Meetings
Where consultations are held online, we currently use Zoom.
Analytics
We use Google Analytics to better understand how visitors use our website. Google Analytics collects information such as pages visited, time spent on the website, browser information, and general geographic location derived from your IP address.
Where legally required, Google Analytics will only operate after you have provided consent through our cookie banner.
Advertising & Marketing
Our website uses the Meta Pixel, which helps us understand the effectiveness of our advertising campaigns on social media platforms.
The Meta Pixel may collect information regarding:
pages visited;
actions taken on our website;
browser information;
device information;
approximate location;
advertising interactions.
Where required by law, the Meta Pixel is only activated after you have consented to marketing cookies.
We do not receive personal information identifying individual visitors through Meta Pixel reporting.
Payment Providers
Payments for our services may be processed using:
Revolut
Wise (bank transfers)
We do not store your banking information ourselves. Payment information is processed in accordance with the privacy and security policies of the relevant payment provider.
Gallery Delivery
Client galleries are delivered using SmartAlbums.
This service may process your name, email address and photographs in order to securely deliver your online gallery and any associated products or albums.
7. Sharing Your Personal Information
We do not sell, rent or trade your personal information.
We may share your personal information only where necessary, including:
with trusted service providers described above;
with professional advisers, including accountants, insurers or legal advisers where necessary;
where required by law or by a lawful request from a regulatory authority or court;
where necessary to establish, exercise or defend legal claims;
where you have expressly requested that we share information with a third party;
where necessary to protect the rights, safety or property of ourselves, our clients or others.
We require service providers to handle personal information appropriately and only for the purposes for which it has been shared.
8. International Transfers
Because some of the service providers we use operate internationally, your personal information may be transferred outside the United Kingdom or the European Economic Area.
Whenever personal information is transferred internationally, we take reasonable steps to ensure that appropriate safeguards are in place in accordance with applicable data protection laws.
These safeguards may include:
adequacy regulations issued by the UK Government or European Commission;
Standard Contractual Clauses approved for international data transfers;
or other legally recognised transfer mechanisms.
9. Cookies
Our website uses cookies and similar technologies to improve your browsing experience, understand how our website is used, and support certain website functions.
Cookies are small text files stored on your device when you visit a website.
They may be used to:
remember your preferences;
improve website performance;
measure website traffic;
analyse visitor behaviour;
help us improve our services;
support advertising and marketing.
Some cookies are essential for our website to function properly.
Others, including analytics and marketing cookies, are optional and will only be used where you have provided your consent.
You can withdraw or change your cookie preferences at any time through our cookie settings or your browser settings.
10. Website Analytics
We use analytics tools to understand how visitors interact with our website.
These analytics help us understand:
which pages are most popular;
how visitors navigate the website;
how users find our website;
whether our website is functioning effectively.
The information collected is generally aggregated and used to improve the website and user experience.
We do not use analytics to identify individual visitors.
11. Data Security
Protecting your personal information is important to us.
We take reasonable technical and organisational measures to protect personal information from accidental loss, misuse, unauthorised access, alteration or disclosure.
These measures include, where appropriate:
secure password management;
encrypted website connections (HTTPS);
reputable cloud service providers;
access controls;
secure business devices;
regular software updates;
secure storage of photographs and business records.
Although we take reasonable precautions, no method of transmitting or storing information electronically can ever be guaranteed to be completely secure.
For this reason, while we strive to protect your personal information, we cannot guarantee absolute security.
12. How Long We Keep Your Information
We keep personal information only for as long as it is reasonably necessary to fulfil the purposes for which it was collected, to provide our services, comply with legal obligations, resolve disputes, or protect our legitimate business interests.
The length of time we retain information depends on the nature of the information and the reason it was collected.
For example, we may retain:
enquiry correspondence for a reasonable period to manage enquiries and maintain business records;
contracts, invoices, and payment records for the period required under applicable tax and accounting laws;
website analytics data for the period configured within our analytics services.
Client Photographs and Galleries
We generally retain edited client photographs and online galleries for one (1) year from the date your gallery is delivered. During this period, you may request access to your gallery or order additional prints, albums, or other products, subject to availability.
After one (1) year, we may permanently delete photographs and galleries or move them to archival storage. Images retained in archival storage are not guaranteed to remain available for future access, replacement, or product orders.
While we take reasonable steps to securely store and back up client images during our retention period, no storage system can be guaranteed to be completely free from failure, loss, or corruption. Clients are responsible for downloading and securely storing their photographs upon delivery.
We recommend creating multiple backups of your final gallery, such as on an external hard drive and a secure cloud storage service. We cannot guarantee that photographs will remain available after the one-year retention period.
Where information is no longer required, we will securely delete or anonymise it where reasonably practicable.
13. Your Privacy Rights
Depending on your location and the applicable data protection laws, you may have certain rights regarding your personal information.
These rights may include:
Right of Access
You have the right to request confirmation of whether we process your personal information and to request a copy of the personal information we hold about you.
Right to Rectification
If any personal information we hold about you is inaccurate or incomplete, you have the right to request that it be corrected.
Right to Erasure
In certain circumstances, you may request that we delete your personal information.
This right is not absolute. We may need to retain certain information where required by law or where it is necessary to establish, exercise, or defend legal claims.
Right to Restrict Processing
You may request that we temporarily restrict how we process your personal information in certain circumstances.
Right to Object
Where we rely on legitimate interests as the legal basis for processing, you have the right to object to that processing.
Right to Data Portability
Where processing is based on consent or a contract and carried out by automated means, you may request a copy of your personal information in a structured, commonly used, and machine-readable format.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
14. Exercising Your Rights
If you wish to exercise any of your privacy rights, please contact us using the details provided at the end of this Privacy Policy.
To help protect your privacy, we may ask you to verify your identity before responding to your request.
We aim to respond to requests within the timeframes required by applicable law.
15. Children's Privacy
Our services are intended for adults who are able to enter into legally binding contracts.
We do not knowingly collect personal information directly from children through our website.
During weddings, portrait sessions, family sessions, or other events, photographs may naturally include children where this forms part of the photography services requested by our client.
In such cases, we process those photographs as part of fulfilling our contractual obligations to our client and in accordance with applicable data protection laws.
If you believe that personal information relating to a child has been provided to us inappropriately, please contact us and we will investigate the matter.
16. Data Breaches
We take appropriate technical and organisational measures to reduce the risk of unauthorised access, loss, misuse, or disclosure of personal information.
If we become aware of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will comply with our legal obligations under applicable data protection laws, including notifying the relevant supervisory authority and affected individuals where required.
17. Third-Party Websites
Our website may contain links to third-party websites or social media platforms.
Please note that we are not responsible for the privacy practices, security, or content of third-party websites.
We encourage you to read the privacy policies of any external websites you visit.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, legal obligations, technology, or the services we use.
When significant changes are made, we will update the "Last Updated" date at the beginning of this Privacy Policy.
We encourage you to review this Privacy Policy periodically to remain informed about how we protect your personal information.
19. Contact Us
If you have any questions about this Privacy Policy or wish to exercise any of your privacy rights, please contact us.
Tamas Pal (T/A Tamas Varady)
117 Harrow Road
London
HA9 6DQ
United Kingdom
Email: tamas@tamasvarady.com
19. Right to Lodge a Complaint
If you believe we have not handled your personal information in accordance with applicable data protection laws, we encourage you to contact us first so that we have the opportunity to resolve your concerns.
If you remain dissatisfied, you have the right to lodge a complaint with the supervisory authority responsible for data protection in your place of residence.
For individuals in the United Kingdom, the relevant supervisory authority is the Information Commissioner's Office (ICO).
Further information about your rights and how to make a complaint is available from the ICO.