Last updated: 12th June 2026
Thank you for visiting this website or choosing to work with Clare Murthy Photography.
This privacy policy explains how Clare Murthy Limited collects, uses, stores and protects your personal data when you visit this website, make an enquiry, book a photography session, take part in a model call or test shoot, buy photography products, sign up to my mailing list, or otherwise communicate with me.
Clare Murthy Photography is a trading name of Clare Murthy Limited.
Clare Murthy Limited is the data controller for the personal data described in this policy.
Company name: Clare Murthy Limited
Company number: 13889971
Registered office: 16 Bridge Gardens, East Molesey, KT8 9HU
Trading name: Clare Murthy Photography
Website: https://claremurthy.com
Email: clare@claremurthy.com
If you have any questions about this policy or how I use your personal data, please contact me at clare@claremurthy.com.
1. The personal data I collect
The personal data I collect depends on how you interact with me and which services you use.
Enquiries and bookings
When you enquire about or book a photography session, I may collect:
- your name
- your email address
- your phone number
- your address or general location
- your baby’s due date, date of birth or age
- your child or children’s names and ages
- the names of other family members taking part in the session
- information about the type of photography session you’re interested in
- information you include in enquiry forms, booking forms, questionnaires, emails or messages
- details of your session date, location and package
- information about your preferences for your shoot
- contract and consent information
- payment and invoice information
Photography sessions and images
When you have a photography session with me, I may collect and create:
- photographs of you and/or your family
- photographs of your baby or children
- notes about your chosen images and products
- information about gallery access and image downloads
- image usage consent given through your booking form
- product order details
- testimonials or reviews, if you choose to provide them
Photographs of identifiable people are personal data. I treat family, baby and children’s photographs with particular care.
Model calls and test shoots
If you or your child takes part in a model call or test shoot, I may collect:
- your name and contact details
- your child’s name and age
- information needed to arrange the session
- photographs created during the session
- model release or image usage consent information
- relevant correspondence about the shoot
Email marketing
If you sign up to receive emails from me, I may collect:
- your name
- your email address
- the form or page you signed up through
- your marketing preferences
- information about whether you open or click links in my emails
I only add people to my mailing list where they have signed up through a form on my website, or where they have been a paying client or model for a test shoot and the soft opt-in applies.
You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email or by emailing clare@claremurthy.com.
Website and technical data
When you visit this website, I may collect technical information such as:
- IP address
- browser type and version
- device information
- pages visited
- how you use the website
- cookie and tracking preferences
- referral source, such as search engines, social media or another website
This may be collected through cookies, analytics tools, tracking pixels, scripts, tags or similar technologies. Please see the cookie section below for more information.
2. Children’s personal data
Much of my work involves photographing babies and children, and I take children’s personal data seriously.
Where a child is photographed, I usually collect and use their personal data through their parent or legal guardian. This may include their name, age, date of birth, due date, photographs, and information needed to plan the session safely and appropriately.
I use children’s personal data only where it is necessary to provide photography services, manage bookings, create and deliver photographs and products, or where a parent or legal guardian has given permission for images to be used in my marketing.
3. Special category data
I do not routinely ask for special category data, such as detailed health information.
However, you may choose to share information that is relevant to your session, for example information about pregnancy, birth, accessibility needs, feeding, allergies, medical needs, disability, or anything else that may help me make the session safe and comfortable.
I only ask for or record this kind of information where it is relevant and necessary for the photography session. I treat it with extra care.
4. How and why I use your personal data
I only use your personal data where I have a lawful reason to do so.
| Purpose | Type of data | Lawful basis |
| To respond to enquiries | Contact and enquiry information | Legitimate interests or steps before entering into a contract |
| To arrange and manage bookings | Contact, booking and session information | Contract |
| To provide photography services | Contact, session and image information | Contract |
| To create, edit and deliver photographs | Photographs and session information | Contract |
| To provide online galleries | Photographs, names and contact information | Contract and legitimate interests |
| To provide albums, prints and products | Contact, order and image information | Contract |
| To manage contracts, invoices and payments | Contact, payment, invoice and contract information | Contract, legal obligation and legitimate interests |
| To keep business and accounting records | Contract, invoice and payment information | Legal obligation |
| To communicate with you about your session or order | Contact and booking information | Contract |
| To use photographs in my portfolio, website, blog, social media or other marketing | Photographs and image consent information | Consent |
| To use testimonials or reviews | Your words, name and any agreed details | Consent or legitimate interests, depending on the situation |
| To send email marketing | Name, email address and marketing preferences | Consent or soft opt-in where applicable |
| To improve this website | Website and technical information | Legitimate interests or consent, depending on the technology used |
| To use analytics, pixels or advertising tracking | Website and technical information | Consent where required |
| To protect my business, clients and legal rights | Relevant records and correspondence | Legitimate interests or legal obligation |
5. Image consent and use of photographs in marketing
I may ask whether you are happy for me to use photographs from your session in my marketing. This includes use on my website, portfolio, blog, social media, printed marketing, advertising, email marketing, sample products, awards, training or other promotional materials.
You are asked about this on your booking form.
I will only use identifiable client images publicly where you have given permission for me to do so.
You can say no to image use in marketing. This will not affect the service you receive.
If you have previously given consent and later change your mind, please email clare@claremurthy.com. I will stop using the images in future marketing where reasonably possible. Please note that it may not always be possible to remove images from materials that have already been printed, shared, published, indexed by search engines, or reshared by others.
6. Email marketing
I only add you to my mailing list where:
- you have signed up through a form on my website; or
- you have been a paying photography client or model for a test shoot, and I am sending information about similar photography services or related offers under the soft opt-in rules.
I do not add photography enquiries to my mailing list just because they have enquired.
I do not add coaching enquiries to my photography mailing list unless they have separately signed up for photography emails.
You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email or by contacting me at clare@claremurthy.com.
If you unsubscribe, I may keep a limited record of your email address to make sure I do not send you further marketing emails.
7. Cookies and website tracking
This website uses cookies and similar technologies.
Cookies are small files placed on your device when you visit a website. Some cookies are essential for the website to work properly. Others help me understand how visitors use the website, improve the website, or make my marketing more effective.
This website may use:
- essential cookies needed for the website to function
- security cookies
- analytics cookies
- Google Analytics or Google Site Kit
- Google Tag Manager
- Meta/Facebook Pixel or similar marketing pixels
- embedded content from third-party platforms
- scripts, tags or similar technologies
Where consent is required, you’ll be asked to give consent before non-essential cookies or tracking technologies are used.
You can manage your cookie preferences through the cookie banner on this website, where available. You can also manage or block cookies through your browser settings.
For more detail, please see my cookie policy: https://claremurthy.com/cookie-policy/
8. Who I share your personal data with
I do not sell your personal data.
I may share your personal data with trusted service providers who help me run my business and provide photography services. These may include:
- website hosting providers
- website and IT support providers
- CRM or studio management software
- email providers
- cloud storage providers
- online gallery providers
- print labs and album suppliers
- delivery or courier providers
- payment processors
- accounting and bookkeeping software
- email marketing providers
- online form or questionnaire tools
- analytics and advertising platforms
- professional advisers, such as my accountant, solicitor or insurer
These providers only receive the information they need to provide their service.
I may also share information where required by law, regulation, legal proceedings, insurance requirements, or to protect the rights, safety or security of myself, my clients, children, families or others.
9. International transfers
Some of the tools and service providers I use may process personal data outside the UK.
Where this happens, I take steps to make sure appropriate safeguards are in place. This may include using providers based in countries covered by adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, the UK Extension to the EU-US Data Privacy Framework, or another lawful transfer mechanism.
10. How long I keep your personal data
I only keep personal data for as long as necessary for the reason it was collected, including for legal, accounting, insurance and business record purposes.
My usual retention approach is as follows.
| Type of data | How long I normally keep it |
| Photography enquiries and correspondence | I keep enquiry records in my CRM and email account for as long as they are useful for managing enquiries, client history, future bookings, customer service, business administration, legal claims or insurance purposes. I do not routinely delete all enquiry records after a fixed short period. |
| Booking forms, contracts and session records | Normally up to 7 years after the end of the client relationship, unless I need to keep them longer for legal, insurance or dispute reasons. |
| Invoices, payment and accounting records | Normally up to 7 years for accounting and tax purposes. |
| Online photography galleries | Galleries are usually available for 7 days, then archived or removed. |
| Purchased final edited images | Purchased images are retained for at least 12 months. I may keep image archives for longer for client service, business, legal, insurance or legitimate business reasons, but this is not guaranteed. |
| Unpurchased images and working files | Kept for as long as needed for editing, gallery delivery, order fulfilment, business administration and image archive management. |
| Image usage consent records | Kept for as long as I use the relevant images, and for a reasonable period afterwards. |
| Testimonials and reviews | Kept for as long as I use the testimonial or review, unless you withdraw permission where applicable. |
| Email marketing data | Kept until you unsubscribe or I decide to remove inactive subscribers. |
| Website analytics data | Kept according to the settings of the relevant analytics tools. |
If you would like me to delete information I hold about you, please contact me. I will consider your request in line with data protection law.
In some cases, I may need to keep certain records for legal, accounting, insurance, contractual or legitimate business reasons.
11. How I protect your personal data
I take reasonable steps to protect your personal data from loss, misuse, unauthorised access, disclosure or alteration.
These steps may include:
- password protection
- two-factor authentication where available
- secure cloud storage
- limiting access to personal data
- using trusted service providers
- keeping devices and systems reasonably secure
- storing digital files carefully
- deleting, archiving or restricting access to information when it is no longer needed
No method of transmission or storage is completely secure, but I take privacy and confidentiality seriously.
12. Your rights
You have rights under data protection law. These may include the right to:
- ask for a copy of the personal data I hold about you
- ask me to correct inaccurate or incomplete personal data
- ask me to delete your personal data in certain circumstances
- ask me to restrict how I use your personal data in certain circumstances
- object to my use of your personal data in certain circumstances
- ask for your personal data to be transferred to another provider in certain circumstances
- withdraw consent where I rely on consent
- complain to me about how I use your personal data
- complain to the Information Commissioner’s Office
If you want to exercise any of these rights, please email clare@claremurthy.com.
I may need to confirm your identity before responding to your request. I will usually respond within one month. If your request is unclear, I may ask you to clarify what information you’re looking for.
13. Subject access requests
You can ask me for a copy of the personal data I hold about you. This is known as a subject access request.
Please send requests to clare@claremurthy.com.
I will usually respond within one month of receiving your request, or within one month of receiving any information needed to confirm your identity or clarify your request.
I am required to carry out reasonable and proportionate searches for personal data. If your request is very broad or unclear, I may ask you to clarify what information you’re looking for.
14. Data protection complaints
If you have a complaint about how I use your personal data, please contact me first at clare@claremurthy.com.
I will acknowledge your complaint within 30 days and will respond without undue delay after looking into it.
If you are not happy with my response, you have the right to complain to the Information Commissioner’s Office.
Website: https://ico.org.uk
Phone: 0303 123 1113
15. Automated decision-making
I do not use your personal data to make solely automated decisions that have a legal or similarly significant effect on you.
16. Links to other websites
This website may include links to other websites. I am not responsible for the privacy practices of those websites. You should read their privacy policies before providing them with personal data.
17. Changes to this privacy policy
I may update this privacy policy from time to time, for example if the law changes, if I change the way I work, or if I use different systems or suppliers.
The latest version will always be available on this website.