Legal
Privacy notice
Last updated: 7 November 2026
Who we are
Mason Jones Photography ("we", "us") is responsible for the personal data collected through this website. You can contact us about anything in this notice at masonjphotography@gmail.com.
What we collect and why
When you send an enquiry
Your name, email address, phone number (if you give it) and your message. We use these only to reply to you and, if you go ahead, to provide what you asked for. Our lawful basis is taking steps at your request before entering a contract, or our legitimate interest in answering questions. We keep enquiries for 12 months and then delete them automatically. If you book, your enquiry becomes part of your booking (below).
When you book a shoot
Your name and contact details, and the details of the shoot: what it's for, the date, time and place, how many people, the price, and our notes and messages about it. We use these to arrange the shoot, deliver your photos and keep our accounts. Our lawful basis is the contract between us, and our legal obligation to keep business records. We keep booking records for 6 years after the shoot, as the tax rules require, and then delete them automatically. Enquiries that don't go ahead are deleted after 12 months.
If we add your shoot to our calendar app, your name, the date and the place are stored by that calendar provider. When your photos are ready we may email you a link to your album.
Consent and model-release forms
When a shoot includes people, we may ask for a signed consent or model-release form, which says how the photos may be used. For anyone under 18, a parent or guardian signs it. The form is stored privately with your booking: it is never published, and only Mason can see it. Our lawful basis is our legitimate interest in keeping a record of the permission given (and, where you give it, your consent). We keep each form while the photos it covers are published and for 12 months after, then delete it.
Photos of you on this website
Some photos on this website and our social media show the people we photograph. You can ask us to take down any photo of you, or of your child, at any time, and we will remove it promptly. Email us with the page or album and a description of the photo. If we published it on the basis of your consent, you can withdraw that consent the same way.
Sharing and social media links
The share and follow buttons are plain links: nothing is sent to Instagram, Facebook, TikTok or other networks until you choose to open one, and then that network's own privacy policy applies.
Cookies
This site only uses cookies that are strictly necessary for it to work. We don't use advertising or tracking cookies.
Who we share it with
We don't sell your data. We use a small number of trusted providers to run this website, and they only process your data on our instructions:
- Cloudflare: website hosting, secure storage of enquiries, bookings and consent forms, and delivery of the emails sent from the enquiry form.
Some of these providers may process data outside the UK. Where they do, they use safeguards approved under UK data protection law.
Your rights
You can ask us for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, or ask for it in a portable format. Where we rely on your consent, you can withdraw it at any time. A parent or guardian can make these requests for a child. Email us and we'll reply within one month.
Complaints
If you're unhappy with how we've handled your data, please tell us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.