Privacy Policy

Last updated: September 2026

Anna Lachlan Photography, operated by Anna Lachlan ("I", "me", "my" or "Anna Lachlan Photography"), respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains what personal information I collect, why I collect it, how I use it, who I may share it with and the rights you have in relation to your information.

If you have any questions about this Privacy Policy or how I use your personal information, please contact me at anna@annalachlan.com.

1. Who I am

Anna Lachlan Photography is a photography business based in West London.

For data protection purposes, I am the data controller responsible for the personal information collected through this website and in connection with my photography services.

2. What information I collect

Depending on how you interact with me and my business, I may collect:

Your name and contact details, including your email address and telephone number where provided.
Information you provide when making an enquiry through my website, including the contents of your message.
Information provided when discussing or booking a photography shoot.
Information needed to provide photography services, including shoot details, location information, preferences and other information relevant to your booking.
Billing and payment information. Payments made through my website are processed through the relevant payment provider. I also use Xero to issue and manage invoices and payment records.
Information contained in correspondence between you and me, including emails.
Information relating to your use of my website, including technical information, browser and device information and website usage data collected through cookies and analytics.
Information you provide when signing up to any email communications through my website.
Photographs and associated information relating to photography shoots.

I do not intentionally collect sensitive personal information through my website. If you choose to provide sensitive information to me as part of an enquiry or photography booking, I will only use it where necessary and where there is a lawful basis for doing so.

3. How I collect your information

I may collect information:

Directly from you when you complete the contact form on my website.
When you contact me by email, telephone or other means.
When you enquire about or book a photography shoot.
When you make a payment or receive an invoice.
When you use my website, including through cookies and analytics technologies.
When you voluntarily subscribe to email communications through my website.

4. How I use your information

I use personal information where necessary to:

Respond to enquiries and requests.
Discuss, arrange and provide photography services.
Communicate with you before, during and after a photography shoot.
Provide quotations, invoices and payment information.
Manage my business accounts and financial records.
Deliver photographs and related services to you.
Maintain records of client relationships and previous work.
Improve and understand how my website is used.
Send marketing or other email communications where you have subscribed to receive them or where I otherwise have a lawful basis to do so.
Maintain the security and proper functioning of my website and business.
Meet legal, accounting and other regulatory obligations.

5. My lawful bases for using your information

Under UK data protection law, I need a lawful basis for processing personal information. Depending on the circumstances, I rely on the following:

Contract: where I need your information to provide a service you have asked me to provide, such as arranging and carrying out a photography shoot.

Legitimate interests: where processing is necessary for the reasonable running and administration of my photography business, communicating with clients and prospective clients, maintaining business records, improving my services and protecting my business, provided that these interests are not overridden by your rights and interests.

Legal obligation: where I need to process or retain information to comply with legal or accounting requirements.

Consent: where I ask for your consent, for example for certain non-essential cookies or certain marketing communications. Where I rely on consent, you can withdraw it at any time.

6. Photography and use of images

As a photography business, I may use photographs from commissioned shoots to showcase my work.

This may include displaying images on my website, portfolio, blog, social media accounts, marketing materials, award submissions or other promotional materials relating to my photography business.

Where the use of identifiable people in photographs requires consent or is otherwise subject to specific arrangements, I will take those arrangements into account. If you have concerns about a particular image or its use, please contact me at anna@annalachlan.com.

Images supplied to clients as part of a photography service may also be stored as part of my normal business and backup processes.

7. Who I share your information with

I do not sell your personal information.

I may share information with trusted third-party service providers where this is necessary to run my business or provide my services. These may include:

Squarespace, which hosts my website and provides website, form and related services.
Google Analytics, which I use to understand website traffic and how visitors use my website.
Pic-Time, which I use to provide online photography galleries and deliver photographs.
Capture One, where galleries or services involving Capture One are used to support image selection or processing.
Xero, which I use for invoicing and accounting.
Payment service providers used to process payments made through my website.
Email, cloud storage, IT and other service providers where necessary to operate my business.
Professional advisers or authorities where I am legally required to provide information.

These organisations may process information outside the UK. Where personal information is transferred internationally, I will take reasonable steps to ensure that appropriate safeguards are in place in accordance with applicable data protection law.

Third-party content embedded on my website, such as Instagram posts or videos, may also result in information being collected by the relevant third-party provider. Their own privacy policies will apply to their processing of information.

8. How long I keep your information

I keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including to provide services, maintain appropriate business records, resolve disputes and meet legal, accounting or reporting requirements.

Enquiry information that does not result in a booking will generally be retained only for as long as it is reasonably useful for managing the enquiry and my business records.

Client and financial records will be retained for the periods required by applicable legal and accounting requirements.

Photographs and associated client information may be retained for longer where this is necessary for the ongoing provision of galleries, portfolio use, business records, backups or the purposes explained in this Privacy Policy.

I regularly review the information I hold and delete or securely dispose of information that is no longer needed.

9. Keeping your information secure

I take reasonable technical and organisational measures to protect personal information against accidental loss, unauthorised access, alteration or disclosure.

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

10. Your rights

Under UK data protection law, you may have rights including:

The right to ask for a copy of the personal information I hold about you.
The right to ask me to correct inaccurate or incomplete information.
The right to ask me to delete your personal information in certain circumstances.
The right to ask me to restrict how your information is processed in certain circumstances.
The right to object to certain types of processing, including processing based on legitimate interests.
The right to withdraw consent where I rely on consent as my lawful basis.
The right to data portability in certain circumstances.

These rights are subject to certain exceptions and limitations under data protection law.

To exercise your rights, please contact anna@annalachlan.com. I may need to ask you for information to confirm your identity before responding to a request.

11. Cookies

My website uses cookies and similar technologies. These help the website function, remember certain preferences and provide information about how visitors use the site.

I use Squarespace and Google Analytics, and my website may also contain embedded content from third-party services such as Instagram or other media providers.

For full information about the cookies used on my website and how you can manage your preferences, please see my Cookie Policy.

12. Changes to this Privacy Policy

I may update this Privacy Policy from time to time to reflect changes to my business, the services I use or applicable data protection requirements.

The latest version will always be available on this website and will show the date it was last updated.

13. Complaints

If you have concerns about how I have handled your personal information, please contact me first at anna@annalachlan.com so that I can try to resolve the issue.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

You can find information about making a complaint on the ICO's website.