Privacy Policy
Last updated: 1 October 2026
Ash Rhone Photography, operated by Ashley Rhone, respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains what personal information I collect, how I use it, where it may be stored or shared, and your rights in relation to your information.
This policy applies to information collected through my website, ashrhonephotography.com, through enquiry and booking forms, by email or phone, through social media, and as part of providing photography and content creation services.
1. Who I am
Ash Rhone Photography
Ashley Rhone
Sherborne, Dorset, UK
Email: ashley.ie@icloud.com
Website: ashrhonephotography.com
For the purposes of UK data protection law, I am responsible for deciding how and why your personal information is processed.
2. What information I collect
Depending on how you interact with me, I may collect:
Your name
Email address
Telephone number
Address
Event or photography details
Wedding or event dates and locations
Information about your photography requirements
Names and relevant information about other people involved in a booking
Information provided through enquiry or contact forms
Information contained in emails or other correspondence
Booking, quotation and agreement information
Payment and invoice information
Photographs and video containing identifiable people
Information you choose to provide through social media
Website usage information collected through cookies and analytics
I only collect information that is reasonably necessary for providing my services, communicating with you, operating my website and running my business.
3. How I collect your information
I may collect personal information when you:
Submit a contact or enquiry form through my website
Contact me by email, telephone or social media
Request a quote
Book a photography session
Enter into an agreement with me
Make a payment
Provide information during the planning of your photography session or event
Receive or access photographs through an online gallery or file transfer
Visit or interact with my website
My website is hosted through Squarespace and website forms are processed through Squarespace.
4. How I use your information
I may use your personal information to:
Respond to enquiries
Provide quotes and proposals
Prepare and manage bookings
Prepare agreements and contracts
Communicate with you before, during and after your photography session or event
Plan and carry out photography or content creation services
Deliver photographs, videos and other agreed content
Provide online galleries and file transfers
Process and record payments
Send invoices and maintain business records
Provide customer service and respond to questions
Manage my website and improve my services
Understand how visitors use my website
Maintain the security of my website and systems
Meet legal, accounting and tax requirements
Protect my legitimate business interests
I will not use your personal information for purposes that are incompatible with those described in this policy without informing you where required.
5. Lawful basis for processing
Under UK data protection law, I rely on different lawful bases depending on how and why your information is being used.
Contract
I may process your information when it is necessary to provide services you have booked or to take steps at your request before entering into a contract.
For example, this includes using your contact details to discuss your booking, prepare an agreement and deliver your photographs.
Legitimate interests
I may process information where it is necessary for my legitimate business interests, provided that those interests are not overridden by your rights and freedoms.
This may include managing enquiries, maintaining business records, improving my services, protecting my website and communicating with existing clients.
Legal obligation
I may need to process and retain certain information to comply with legal, accounting or tax requirements.
Consent
Where consent is required, I will ask for it before carrying out the relevant processing.
For example, I may ask for your permission to use selected photographs for my portfolio, website, social media, marketing, awards or competitions.
Where processing is based on consent, you can withdraw that consent at any time.
6. Photography and photographs of people
Photography is the service I provide, so photographs of you and other people attending a photography session or event are an important part of my work.
Photographs may contain identifiable individuals and are therefore treated as personal information where applicable.
I use photographs to:
Provide the photography services you have booked
Edit and prepare your final images
Deliver your photographs
Create galleries or other agreed deliverables
Using photographs for my portfolio and marketing
I may ask for permission to use selected photographs from your session or event for my:
Website
Portfolio
Instagram and other social media
Marketing materials
Photography awards or competitions
Promotional materials
I will respect your decision if you do not wish your photographs to be used for promotional purposes.
If you have previously given consent for promotional use and would like to withdraw it, please contact me.
Please note that photographs may have already been published or submitted to third parties before consent is withdrawn, and in some circumstances it may not be possible to completely remove material that has already been distributed or shared.
7. Client galleries and file delivery
Photographs and other files may be delivered or stored using third-party services including Google Drive and WeTransfer.
These services are used to securely store, transfer and provide access to photographs and other files as part of the services I provide.
WeTransfer states that files are encrypted during transfer using TLS 1.2 or TLS 1.3 and encrypted at rest using AES-256. WeTransfer also explains that storage and retention periods can vary depending on the service and settings used.
Where I use a professional WeTransfer account to process personal data on behalf of my clients, the relevant data processing arrangements may apply.
8. Quotes and agreements
Quotes, proposals and agreements may be sent and signed electronically using WeTransfer Sign.
Information contained within these documents may include your name, contact details, booking information, agreed services, pricing and other information necessary to establish and manage our agreement.
9. Payments
Payments are made by bank transfer directly to my business bank account.
I do not collect or store your full bank card details through my website.
I may retain information about payments, including the amount paid, date of payment, invoice information and relevant transaction references, where necessary for accounting, tax and business record-keeping purposes.
10. Website, cookies and analytics
My website is hosted by Squarespace.
Like most websites, my website may use cookies and similar technologies to provide essential website functionality and understand how the website is being used.
I use a cookie consent banner on my website. Non-essential cookies are restricted until the relevant consent has been provided where required.
Some information about website visitors may be collected through Squarespace's analytics and activity logging features. This may include information such as browser, device and network information and how visitors interact with the website.
Where non-essential cookies or similar technologies require consent, you can manage your preferences through the cookie banner.
You can also control or delete cookies through your web browser settings.
11. Google services
My website is connected to Google Search Console to help me understand how my website appears in Google Search and identify issues affecting its search visibility.
Connecting my website to Google Search Console does not itself mean that I receive visitors' personal information through Search Console.
Other Google services may be used where necessary for storing or managing business files and photographs, including Google Drive.
12. Instagram and social media
I may use Instagram and other social media platforms to promote my photography and communicate with clients and potential clients.
If you interact with my social media accounts, the relevant platform may collect and process information according to its own privacy policy.
If you choose to contact me through social media, I may use the information you provide to respond to your enquiry and manage your relationship with me.
Where social media content is embedded into my website, the relevant platform may also process information when you interact with that content.
13. Who I share your information with
I do not sell your personal information.
I may share information with trusted third-party services where necessary to operate my business and provide my services.
These may include:
Squarespace, for website hosting, forms and website functionality
Google / Google Drive, for storing and managing files where required
WeTransfer, for transferring and delivering files
WeTransfer Sign, for quotes and electronic agreements
My bank or banking provider, for processing payments
An accountant or professional adviser, where necessary
Government bodies, regulators or law enforcement agencies where I am legally required to do so
I only share information where there is a legitimate reason to do so and, where applicable, an appropriate legal basis.
Some service providers may process information outside the UK. Where this occurs, appropriate safeguards will be used where required under applicable data protection law.
14. How long I keep your information
I keep personal information only for as long as it is reasonably necessary for the purpose for which it was collected.
Different types of information may be kept for different periods.
For example:
Enquiries: generally retained for as long as reasonably necessary to deal with the enquiry and maintain appropriate business records.
Client and booking information: retained for as long as necessary to manage the relationship and provide the services.
Contracts, invoices and payment records: retained for the period required for legal, accounting and tax purposes.
Photographs and project files: may be retained for an appropriate period after delivery for backup, record-keeping and client service purposes.
Marketing consent records: retained for as long as necessary to demonstrate and manage your preferences.
I regularly review the information I hold and securely delete or dispose of information when it is no longer required.
15. Keeping your information secure
I take reasonable steps to protect your personal information against accidental loss, unauthorised access, alteration or disclosure.
This includes using reputable third-party services for website hosting, file storage, file transfer and electronic agreements.
However, no online system or method of electronic storage can be guaranteed to be completely secure.
16. Your data protection rights
Under UK data protection law, you may have the right to:
Ask for a copy of the personal information I hold about you
Ask me to correct inaccurate or incomplete information
Ask me to delete your personal information in certain circumstances
Ask me to restrict how your information is processed in certain circumstances
Object to certain processing
Request the transfer of certain information to another organisation
Withdraw consent where processing is based on consent
These rights are subject to certain legal conditions and exceptions, so they may not apply in every situation.
If you would like to exercise any of these rights, please contact me using the details below.
17. Right to object
You have the right to object to certain uses of your personal information, including processing based on legitimate interests and, where applicable, direct marketing.
If you object to the use of your information for a particular purpose, I will consider your request in accordance with applicable data protection law.
18. Withdrawing consent
Where I rely on your consent to process your personal information, you can withdraw that consent at any time.
To withdraw consent or change your preferences, please contact:
Email: ashley.ie@icloud.com
Withdrawing consent does not affect the lawfulness of any processing carried out before you withdrew it.
19. Third-party websites
My website may contain links to other websites, including social media platforms, suppliers, venues or other external websites.
I am not responsible for the privacy practices, content or security of websites operated by third parties.
I recommend checking the privacy policy of any external website you visit.
20. Children's information
My photography services may involve photographing children as part of weddings, family events, parties or other events.
Where appropriate, I rely on the client or event organiser to provide the necessary permissions and information relating to children being photographed.
I do not knowingly collect children's personal information through my website for purposes unrelated to providing my services.
21. Automated decision-making
I do not use your personal information to make decisions about you based solely on automated processing or profiling that produces legal or similarly significant effects.
22. Changes to this Privacy Policy
I may update this Privacy Policy from time to time to reflect changes to my services, the way I process information, the technology I use or changes in legal requirements.
The latest version will always be available on my website.
Last updated: 1 October 2026
23. Contact me
If you have any questions about this Privacy Policy, how I use your personal information, or you would like to exercise one of your data protection rights, please contact me:
Ash Rhone Photography
Ashley Rhone
Sherborne, Dorset, UK
Email: ashley.ie@icloud.com
24. Complaints
If you have concerns about how I have handled your personal information, please contact me first so that I have the opportunity to resolve the issue.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection.
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: https://ico.org.uk/
The ICO recommends that privacy information is clear, accessible and regularly reviewed, and that businesses explain their purposes, lawful bases, retention periods, recipients and individuals' rights.