Privacy Policy
Last Updated: 25 August 2026
Welcome to Ryan Houghton Photography. I operate the website ryanhoughtonphotography.com (the "Website"). I respect your privacy and am committed to protecting your personal data. This Privacy Policy explains how I collect, use, store, and safeguard your personal information when you visit my website, purchase fine art prints, subscribe to my email newsletter list, or contact me via email.
1. Important Information and Who I Am
Data Controller
Ryan Houghton is the data controller responsible for your personal data (referred to as "I", "me", or "my" in this policy).
Contact Details
If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact me using the details below:
-
Full Name: Ryan Houghton
-
Email Address: ryanhoughtonphotography@outlook.com
-
Website: ryanhoughtonphotography.com
2. The Data I Collect About You
"Personal data" means any information about an individual from which that person can be identified. I may collect, use, store, and transfer different kinds of personal data about you, which I have grouped together as follows:
-
Identity Data: Includes first name and last name.
-
Contact Data: Includes billing address, delivery address, email address, and telephone numbers.
-
Financial Data: Includes bank account and payment card details (processed securely via third-party payment gateways; I do not store your full card details).
-
Transaction Data: Includes details about payments to and from you and other details of prints or products you have purchased from me.
-
Technical Data: Includes your internet protocol (IP) address, browser type and version, time zone setting and location, and browser plug-in types.
-
Usage Data: Includes information about how you use my website, view my photography galleries, and interact with my marketing emails.
I do not collect any Special Categories of Personal Data about you (this includes details about your race, religion, health, or political beliefs).
3. How Your Personal Data Is Collected
I use different methods to collect data from and about you, including:
-
Direct Interactions: You may give me your Identity and Contact Data by filling out forms on my site, signing up for my email subscriber list, or by corresponding with me via email.
-
Automated Technologies: As you interact with my website, I may automatically collect Technical Data about your equipment, browsing actions, and patterns. I collect this personal data by using cookies and other similar technologies.
4. How I Use Your Personal Data
I will only use your personal data when the law allows me to. Most commonly, I will use your personal data in the following circumstances:
-
Performance of a Contract: Where I need to process your order to deliver the fine art prints you have purchased.
-
Legitimate Interests: Where it is necessary for my legitimate business interests (for example, to analyze how visitors use my website and ensure its security), provided your interests and fundamental rights do not override those interests.
-
Consent: Where you have given me explicit consent to send you newsletters, photography updates, and marketing communications.
Purpose / ActivityType of DataLawful Basis for Processing
To process and deliver your print order, including managing payments(a) Identity
(b) Contact
(c) Financial
(d) TransactionPerformance of a contract with you
To manage my relationship with you (e.g., responding to an email enquiry)(a) Identity
(b) ContactPerformance of a contract or Legitimate Interests
To send you my photography newsletters, print sale updates, and blog notifications(a) Identity
(b) ContactExplicit Consent (which you can withdraw at any time by clicking 'unsubscribe')
To administer and protect this website (troubleshooting, data analysis)(a) TechnicalLegitimate Interests (running my business and website securely)
5. Data Disclosures & International Transfers
I do not sell your personal data. To run my photography business effectively, I may share your data with trusted third-party service providers:
-
Email Marketing Platform: Your Identity and Contact Data (name and email) will be stored and processed using a third-party email service provider to securely distribute my newsletters and track subscriber engagement.
-
Service Providers: Professional IT infrastructure providers, web hosting platforms, and payment processors (e.g., Stripe, PayPal).
-
Delivery Partners: Postal or courier services used to dispatch and deliver your fine art prints.
International Transfers
Some of my external third-party providers are based outside the UK (for example, in the United States). Whenever your personal data is transferred out of the UK, I ensure a similar degree of protection is afforded to it by ensuring appropriate legal safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO).
6. Data Security
I have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. In addition, I limit access to your personal data to those third-party processors who have a business need to know, and they will only process your personal data on my instructions.
7. Data Retention
I will only retain your personal data for as long as reasonably necessary to fulfil the purposes I collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, I consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use, and applicable legal requirements. For example, HMRC requires UK businesses to keep records of basic transaction data for six years after the tax year end for audit purposes.
8. Your Legal Rights
Under UK data protection laws, you have rights in relation to your personal data, including the right to:
-
Request access to your personal data (commonly known as a "data subject access request").
-
Request correction of the personal data that I hold about you.
-
Request erasure of your personal data (the right to be forgotten).
-
Object to processing of your personal data where I am relying on a legitimate interest.
-
Request restriction of processing of your personal data.
-
Request the transfer of your personal data to you or to a third party.
-
Withdraw consent at any time where I am relying on consent to process your data.
If you wish to exercise any of these rights, please contact me directly at ryanhoughtonphotography@outlook.com.
9. Complaints Procedure & The Right to Complain
In accordance with UK statutory data protection laws, you have a formal right to raise a data protection complaint directly with me if you feel your information is being handled incorrectly. I am committed to acknowledging and resolving complaints within statutory timescales. Please submit any concerns directly to my email address so that I can look into the matter immediately.
You also have the right to lodge a complaint at any time with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). I would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact me in the first instance.
