Privacy Policy

Effective Date: 9 August 2026
Data Controller: Simon Bailey Studios Ltd
Websites:

• simonbstudios.com
• clients.simonbstudios.com
• consulting.simonbstudios.com

Simon Bailey Studios Ltd (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your personal information when you visit our websites, communicate with us, or engage our services across both our photography (Simon Bailey Studios) and media technology consulting (Simon Bailey Consulting) operations.

Simon Bailey Studios Ltd is the Data Controller responsible for your personal data.

Personal data means any information relating to an identified or identifiable individual. We may collect, use, and store the following categories of personal data:

• Identity & Contact Data: Name, business name, address, email address, and phone numbers.
• Client & Project Data: Project briefs, consulting requirements, shoot locations, event schedules, and account preferences.
• Media & Digital Assets: Photography, video recordings, and client gallery downloads provided or generated as part of our creative deliverables.
• Financial & Transaction Data: Invoicing details, payment history, and bank transfer information (we do not store raw payment card data).
• Technical & Usage Data: IP address, browser type, operating system, and details about how you use our websites.

We collect data directly from you when you:

• Fill out contact or project inquiry forms on our websites.
• Communicate with us via email, phone, or messaging platforms.
• Access our custom client job management portal or download media galleries.
• Commission photography, IT or media asset management (MAM) consulting, or custom software development services.

We only process your personal data when the law allows us to. Most commonly, we rely on the following UK GDPR legal bases:

Purpose / Activity	Type of Data	Legal Basis for Processing
To register you as a new client or respond to inquiries	Identity, Contact, Project Data	Performance of a contract (or taking pre-contractual steps)
To deliver photography services & consulting engagements	Identity, Contact, Media Assets, Project Data	Performance of a contract
To host client portals & deliver downloadable media	Identity, Contact, Media Assets	Performance of a contract / Legitimate Interests
To process invoicing & accounting payments	Identity, Contact, Financial Data	Performance of a contract / Compliance with a legal obligation (HMRC record-keeping)
To maintain website & IT security	Technical Data	Legitimate Interests (running our business securely)

To run our business operations, job management tools, and media delivery systems, we use trusted third-party service providers:

• Client Job Management Database: Hosted on secure servers provided by Hostinger, located in the European Union (EU).
• Media Asset Storage & Downloads: Client image and video files are securely stored on cloud infrastructure provided by Backblaze B2 (eu-central-003), located in the EU (Frankfurt, Germany).

International Data Transfers: Because our servers and cloud infrastructure are hosted within the European Economic Area (EEA), your personal data and media assets are transferred outside the UK. Under UK GDPR regulations, transfers to the EU/EEA are fully permitted based on the UK Government’s official adequacy regulations, ensuring your data receives an equivalent standard of protection.

We have put in place appropriate technical and organizational security measures to protect your personal data from accidental loss, unauthorized access, alteration, or disclosure. Access to your personal data is strictly limited to authorized personnel and infrastructure providers who operate under robust confidentiality obligations.

We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.

• General Client & Project Data: Kept for the duration of our business relationship plus up to 2 years.
• Financial & Invoicing Records: Kept for 6 years following the end of the tax year to satisfy UK tax law (HMRC requirements).
• Archived Photography & Media Files: Retained as agreed under specific client photography contracts or for portfolio archive purposes.

Under the UK GDPR, you have the right to:

• Access a copy of the personal data we hold about you.
• Rectify any inaccurate or incomplete personal data.
• Erase your personal data (the “right to be forgotten”) in certain circumstances.
• Restrict or Object to our processing of your personal data.
• Data Portability to request the transfer of your data to yourself or a third party.

To exercise any of these rights, please contact us at hello@simonbstudios.com. You will not have to pay a fee, and we aim to respond to all legitimate requests within one month.

Our websites use essential cookies required for site performance and security, as well as optional analytical cookies. For full details on the specific cookies used and to manage your preferences, please view our Cookie Policy.

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to address your concerns directly before you approach the ICO.

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

• Company Name: Simon Bailey Studios Ltd
• Email: hello@simonbstudios.com or consulting@simonbstudios.com
• Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ