Privacy Policy

This policy explains what personal information I collect when you visit my website, get in touch or book me, what I do with it, and your rights over it. I’ve kept it in plain English. If anything’s unclear, just email me.

Who I am

This website is run by Kirsty Rockett, trading as Kirsty Rockett Photography sole trader I’m the “data controller” for the personal information described here, which means I decide how it’s used and I’m responsible for looking after it.

Address: Sherwood, Nottingham UK 
Email: hello@kirstyrockett.com

What I collect and why

When you fill in my contact form

I collect your names, email address, phone number (if you give it), wedding date, venue or location, the package you’re thinking about, your message and how you found me. I use this to reply to your enquiry, check my availability and send you information about working together.

My lawful basis is legitimate interests: you’ve asked me to get in touch, and replying is the whole point. The consent box on the form confirms you’re happy for me to use your details for that.

When you email or message me

I keep what you send me, including your name, contact details and anything you tell me about your plans, so I can reply and keep track of our conversation. The lawful basis is legitimate interests.

When you book me

If you book, I’ll need your names, contact details, address, wedding details (timings, venue, key people), and payment details such as amounts paid and dates. I use this to prepare your contract, plan your day, take payments, deliver your photos and keep my business records. The lawful basis is contract (I need it to do the job you’ve booked me for) and legal obligation (I have to keep financial records for HMRC).

Your photos

Photos of you and your guests are personal information. I use them to create your gallery. I’ll only use your photos on my website, blog or social media in the way we’ve agreed in your contract, and you can ask me to take a photo down at any time.

Sensitive details

Sometimes couples share things like access needs, health information or details about their religion or ceremony so I can plan properly. I’ll only use this to look after you on the day, I won’t share it with anyone who doesn’t need it, and I’ll only keep it for as long as I need it for your wedding.

When you browse this website

I use Plausible Analytics to see how many people visit and which pages they look at. Plausible doesn’t use cookies, doesn’t collect personal information and doesn’t track you across other websites. All the data is aggregated, so I can’t identify you from it. See my Cookie Policy for more.

Who I share it with

I never sell your information. I only share it with trusted services that help me run my business, and only as much as they need:

• My client management system, Studio Ninja, which stores enquiries, contracts and invoices.
• My online gallery provider, Pic-Time, which delivers your photos.
• My email provider, gmail.
• My website host, [CONFIRM: website host].
• My payment provider, Natwest, bank transfer.
• A second shooter or trusted fellow photographer, if one is working with me at your wedding or has to cover in an emergency.

Some of these services store data outside the UK. Where they do, they use legal protections such as the UK’s International Data Transfer Agreement or an adequacy decision, so your information is protected to UK standards.

I’ll also share information if the law requires it.

How long I keep it

• Enquiries that don’t turn into a booking: 12 months after we last spoke, then deleted.
• Contracts, invoices and payment records: for as long as HMRC requires me to keep business records, then deleted.
• Your online gallery: live for at least 12 months from delivery.
• Your photos in my own archive: I keep raw files for two years. 

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the information I hold about you
• ask me to correct anything that’s wrong
• ask me to delete your information
• ask me to limit how I use it
• object to me using it
• ask me to send it to you, or to another business, in a common format
• withdraw your consent at any time, where I’m relying on it

Some of these have limits. For example, I can’t delete invoices I’m legally required to keep. To use any of these rights, email hello@kirstyrockett.com. It’s free, and I’ll reply within one month.

Keeping it safe

I use secure, password-protected services with two-factor authentication where they offer it, and I only keep what I actually need.

Complaints

If you’re unhappy with how I’ve handled your information, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this policy

I’ll update this page if anything changes. The date below shows when it was last updated.

Last updated: 30 September 2026