Privacy Policy

​

This Privacy Notice explains how Olu Oko ("the Photographer") collects, uses, stores, and protects your personal information under UK data protection law.

​​​

1. Information Collected

​

The Photographer may collect and process personal information, including names, email addresses, telephone numbers, home addresses, billing details, information relating to your photography sessions, photographs, and any other information voluntarily provided by Clients.

​

2. How Information Is Collected

​

Personal information may be collected through website enquiry forms, email, telephone, social media messages, contracts, questionnaires, invoices and conversations relating to a photography booking. Information may also be provided by another person involved in a booking, such as a partner, parent, guardian or event organiser.

​

3. How Information Is Used and Our Lawful Basis

​

Under the UK GDPR, the Photographer relies on the following lawful bases when using personal information:

​

Contract: To respond to booking enquiries, take steps requested before entering into a contract, arrange and provide photography services, manage bookings, prepare agreements, process payments, and deliver final photographs and online galleries.

​

Legal obligation: To keep appropriate tax, accounting and business records, and to comply with other legal or regulatory requirements.

​

Legitimate interests: To operate and protect the photography business, manage copyright, prevent fraud, deal with disputes or legal claims, and

retain selected photographs as part of the Photographer’s professional archive. When relying on legitimate interests, the Photographer considers the rights and interests of the people shown in the photographs, particularly children.

​

Consent: To display identifiable photographs in portfolios, on websites and social media, and in publications, exhibitions or professional competitions, where specific and optional permission has been given. Consent can be withdrawn at any time, although this will not affect any use that took place before it was withdrawn.

​

4. Who We Share Information With

​

Personal information may be shared where necessary with service providers involved in operating the business, including website and email providers, online gallery platforms, cloud-storage providers, electronic-signature services, payment providers and professional advisers.

​

Where physical products are ordered, relevant information may also be shared with printing laboratories and delivery providers. Information may be disclosed where required by law, or where necessary to establish, exercise or defend legal claims.

​

The Photographer does not sell personal information.

​

5. Photographs as Personal Data

​

Photographs created during a session may contain personal data and are processed in accordance with applicable data protection legislation. The use, publication, display, or marketing of photographs is governed by the photography agreement signed by the Clients.

​

6. Storage, Security and Third-Party Services

​

Personal information and photographs are stored electronically using appropriate security measures. The Photographer takes all reasonable steps to protect your data from unauthorised access, loss, misuse, or disclosure.

The Photographer uses trusted third-party service providers ("Data Processors") to help operate the business. These include online gallery platforms, secure cloud storage providers, electronic signature services, and professional email platforms. The Photographer only shares the minimum necessary information required for these providers to perform their services.

Some service providers may store or process personal information outside the UK. Where this happens, the Photographer takes reasonable steps to ensure that an appropriate legal safeguard is in place.

​

7. Cookies and Website Technologies

​

This website currently uses only essential cookies and similar technologies needed to operate securely and reliably. They are used for website security, page rendering, load balancing, API protection, error monitoring and maintaining a visitor’s current session as they move between pages. They are not used by the Photographer for targeted advertising, remarketing or cross-site tracking. Because these technologies are necessary for the website to function, consent is not requested before they are used. You can block or delete cookies through your browser settings, although some parts of the website may not work properly as a result. This section will be reviewed if the website or the technologies it uses change.

​

Essential cookies used by this website

​

ssr-caching
Purpose: Supports page rendering and website performance.
Duration: Up to 24 hours.

​

XSRF-TOKEN
Purpose: Helps protect the website against cross-site request forgery and fraudulent calls.
Duration: For the duration of the browsing session.

​

server-session-bind
Purpose: Protects website sessions and API requests.
Duration: For the duration of the browsing session.

​

hs
Purpose: Supports website security.
Duration: For the duration of the browsing session.

​

svSession
Purpose: Supports website security, stability and core website functions.
Duration: Up to 12 months.

​

bSession
Purpose: Supports load balancing and measures the technical effectiveness of the website.
Duration: Up to 24 hours.

​

fedops.logger.sessionId
Purpose: Records technical errors and website stability issues.
Duration: Up to 12 months.

​

mpaSessionId
Purpose: Identifies and maintains the current session while a visitor moves between pages of the website.
Duration: For the duration of the browsing session.

​

client-session-bind
Purpose: Protects website sessions and API requests.
Duration: For the duration of the browsing session.

​

Cookie names and durations may occasionally change following technical updates. This notice will be updated if the way visitors’ information is used changes.

​​

​​​​​​​​​​​​​​8. Retention of Information

​

• Client contact details, contracts, financial transactions, and email correspondence are retained for as long as reasonably necessary to fulfil the Photographer's legal, accounting, and tax obligations, to protect the Photographer's business interests, and to maintain an ongoing operational archive.

• Photographs: Final photographs may be retained indefinitely for archival, portfolio, copyright, and business record purposes.

​

9. Your Rights & Contact

​

Under UK data protection law, you have the right to access, correct, or request the deletion of your personal data, as well as the right to object to or restrict its processing.

​​​

To exercise any of these rights, or if you have any questions about this notice, please contact the Photographer directly:

​​​

• Data Controller: Aleksandra Horezga (Trading as Olu Oko)

• Email: oluoko.photo@gmail.com

​​​​

If you are dissatisfied with how your personal information has been handled, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). Further information can be found at www.ico.org.uk.