Privacy Policy

© 2026 MATTHEW SHAW. All rights reserved.

Introduction

Matthew Shaw Photography ("I", "me", or "my") is committed to protecting the privacy of visitors to this website and anyone who contacts me through it ("you" or "your"). This Privacy Policy explains how I collect, use, and disclose your personal data in connection with matthewshaw.co.uk (the "Site"), in compliance with the UK General Data Protection Regulation (UK GDPR).

Data I collect

I may collect the following categories of personal data:

a) Contact information, such as your name, email address, postal address, and telephone number;

b) Usage data, such as information about how you use the Site;

c) Technical data, such as your IP address, browser type and version, time zone setting, and operating system and platform;

d) Marketing and communications data, such as your preferences in receiving communications from me.

Lawful basis for processing

I will only process your personal data when I have a lawful basis for doing so. The lawful bases for processing include:

a) To perform a contract with you;

b) To comply with a legal obligation;

c) To protect your vital interests or those of another person;

d) To further my legitimate interests, provided that they do not override your fundamental rights and freedoms;

e) With your consent, for specific purposes.

How I use your data

I use your personal data for the following purposes:

a) To operate and improve the Site;

b) To respond to enquiries and provide the services you request;

c) To send you communications, where you have consented to receive them;

d) To comply with legal and regulatory requirements.

Disclosure of your data

I may disclose your personal data to the following categories of recipients:

a) Service providers who assist in operating the Site;

b) Regulators, law enforcement, and other relevant third parties, where required by law.

International data transfers

If your personal data is transferred to countries outside the UK or the European Economic Area (EEA), I will ensure that appropriate safeguards are in place in accordance with the UK GDPR.

Data retention

I will retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Your rights

You have the following rights in relation to your personal data under the UK GDPR:

a) Right of access;

b) Right to rectification;

c) Right to erasure;

d) Right to restrict processing;

e) Right to data portability;

f) Right to object to processing;

g) Right to withdraw consent.

You may exercise these rights by contacting me using the details provided below.

I use cookies and similar tracking technologies to improve the Site and your experience of using it. For more information about the cookies used and how to disable them, please see the Cookie Policy as you enter the Site.

Security

I take appropriate technical and organisational measures to ensure a level of security appropriate to the risk involved in processing personal data. Please note, however, that no security measures are perfect or impenetrable, and I cannot guarantee that information you provide will not be intercepted, accessed, or disclosed by unauthorised parties.

Changes to this Privacy Policy

I reserve the right to amend this Privacy Policy at any time. The date of the last revision will be indicated at the top of this page. I encourage you to review this Policy periodically.

Contact

If you have any questions or concerns about this Privacy Policy or how your personal data is used, please contact me through the contact form or by email here.

Complaints

If you are not satisfied with my response, or if you believe I am not processing your personal data in accordance with the UK GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.