Last updated: 31 August 2026
I am Amanda Herbert, trading as Amanda Herbert Photography.
My website is amandaherbert.com.
If you have any questions about how I use your personal data, you can contact me using the contact details provided on this website.
This privacy policy explains what personal information I may collect, how I use it, who I may share it with, and your rights in relation to your personal data.
I process personal data in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Depending on how you interact with me, I may collect:
I only collect information that is reasonably necessary for the purpose for which it is being collected.
I may use your personal data to:
Where I rely on legitimate interests as the lawful basis for processing your information, these interests include operating and administering my photography business, responding to enquiries, and maintaining and improving my website and services.
Where I rely on consent, you can withdraw that consent at any time.
I use Google Analytics and Clicky to understand how visitors use my website.
These services may collect information such as pages visited, approximate location, device and browser information, and other information relating to website usage.
I use this information to understand website traffic and improve my website.
Where required, I will obtain your consent before using non-essential analytics cookies or similar technologies.
My website uses cookies and similar technologies.
Some cookies are necessary for the website to function correctly. Other cookies, including those used for analytics, may be optional.
Where required, I will ask for your consent before placing or accessing non-essential cookies on your device.
You can control or withdraw your cookie choices through the cookie controls provided on the website.
I do not sell your personal data.
I may share personal data with third-party service providers where this is necessary to operate my website or provide photography-related services.
These may include:
Website hosting and technical providers
My website and its associated data are hosted and technically supported by third-party providers.
Pixieset
I may use Pixieset to provide photographs to clients or participants. I normally do this by emailing you a link to the relevant Pixieset gallery.
Analytics providers
Google Analytics and Clicky may process website usage information as described above.
I may also disclose personal data where this is necessary to:
Some of the third-party services I use may process personal data outside the UK.
Where personal data is transferred outside the UK, I will ensure that the transfer is made in accordance with applicable UK data protection law and that appropriate safeguards are in place where required.
I keep personal data only for as long as it is reasonably necessary for the purpose for which it was collected, unless I am legally required to retain it for longer.
Business and financial records will be retained for the period required by applicable tax and accounting requirements.
Information relating to enquiries and correspondence may be retained for as long as reasonably necessary to deal with the enquiry and maintain appropriate business records.
Information relating to legal claims may be retained for as long as necessary to establish, exercise or defend those claims.
Website analytics information is retained according to the settings and retention periods of the relevant analytics services.
I periodically review the personal data I hold and securely delete or anonymise information that I no longer need.
Depending on the circumstances, you have rights under UK data protection law including the right to:
You also have the right to complain to the Information Commissioner’s Office (ICO) if you believe your personal data has been handled unlawfully.
If you want to exercise one of your data protection rights or have a question about this privacy policy, please contact me using the contact details provided on my website.
I will normally respond to a valid data protection request within the period required by applicable law.
I may update this privacy policy from time to time to reflect changes to my website, services, technology or legal requirements.
The latest version will always be published on this page, with the date of the most recent update shown at the top.