Summary
- We collect only the personal data needed to respond to enquiries, perform our services and deliver images.
- We do not sell personal data. Trusted service providers process it on our behalf.
- Online galleries are deleted automatically when the link expires.
- Visit measurement is cookie-free. Google Analytics runs only with your consent.
- You may request removal of an image of yourself, or of your personal data, at any time.
01About us
1.1
This Privacy Policy explains how Still Sonic Media (“we”, “us”, “our”) collects, uses, stores and protects personal data in connection with this website and our photography services.
1.2
Still Sonic Media is the trading name of Campbell Downie, a sole trader based in Doncaster, South Yorkshire, United Kingdom. For the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, Campbell Downie is the data controller.
1.3
Questions about this policy or requests concerning your personal data should be sent to hello@stillsonicmedia.co.uk.
02Personal data we collect and why
2.1
We collect and process personal data for the purposes, and on the lawful bases, set out below.
2.2
| Circumstance | Data | Purpose and lawful basis |
|---|---|---|
| Enquiries | Name, email address, type of work, preferred date, location, budget and message. | To respond to your enquiry and provide a quotation. Lawful basis: steps taken at your request prior to entering into a contract. |
| Agreement to booking terms | A record that you accepted our Terms and Conditions of Booking, and the version accepted. | To evidence the terms of our agreement. Lawful basis: contract. |
| Photo delivery consent | A record of your consent and the date given. | To send your images by email following a shoot. Lawful basis: consent, which may be withdrawn at any time. |
| Bookings | Contact details, shoot details, invoices and payment records. | To perform our contract with you and meet our legal obligations, including tax record-keeping. Lawful bases: contract; legal obligation. |
| Gallery delivery | Email address, delivered images, and aggregate counts of gallery views and downloads. | To deliver images and confirm receipt. Lawful bases: contract; consent. |
| Events and performances | Photographs in which individuals may appear. | To supply images to the commissioning client and to promote our work. Lawful basis: legitimate interests (see section 5). |
| Business outreach | Publicly available business contact details: business name, email address, telephone number, website and address. | To offer our services to businesses. Lawful basis: legitimate interests (see section 6). |
| Website use | Anonymous usage statistics and, where you consent, Google Analytics data. | To understand and improve the website. Lawful bases: legitimate interests; consent (see section 7). |
2.3
We do not sell personal data, and we do not use it for any purpose incompatible with those set out above.
03Third-party service providers
3.1
We use the following service providers (“processors”) to operate our business. They process personal data only on our instructions and for the purpose of providing their services to us:
- Cloudflare, Inc.: website hosting, data storage and delivery of client galleries;
- Formspree, Inc.: processing of website enquiry forms;
- Resend, Inc.: transactional and business email delivery;
- Apple Inc. (iCloud Mail): email hosting;
- Google LLC (Google Analytics): website analytics, only where you have given consent.
3.2
Some of these providers are located in, or process data in, the United States. Where personal data is transferred outside the United Kingdom, it is protected by appropriate safeguards as required by UK data protection law, such as the UK Extension to the EU–US Data Privacy Framework or the International Data Transfer Addendum.
04Data retention
4.1
We retain personal data only for as long as necessary for the purposes for which it was collected:
4.2
| Category | Retention period |
|---|---|
| Enquiries not resulting in a booking | Up to two years from our last contact. |
| Client contact details | For the duration of our working relationship and two years thereafter, unless you request earlier deletion. |
| Invoices and payment records | Six years, in accordance with statutory record-keeping requirements. |
| Online galleries and delivered images | Until the gallery link expires (typically 14 to 90 days), after which they are automatically deleted from our website. |
| Photographer’s archive | Retained as part of our professional archive. |
| Business outreach contacts | Until you ask us not to contact you, after which we keep only the business name and a suppression note to ensure no further contact. |
| Anonymous visitor identifiers | Deleted after 75 days; aggregate statistics only are retained thereafter. |
05Images of individuals
5.1
At live music performances and events, we photograph performers and audiences. Images are supplied to the commissioning client (such as the artist, venue or organiser) and selected images may be published on our website, social media channels and in competition entries.
5.2
Any individual may ask for an image in which they appear to be removed from our website and social media channels by contacting hello@stillsonicmedia.co.uk. We will act on such requests promptly and will notify the commissioning client of the request.
5.3
We will not use images of children for promotional purposes without the consent of a parent or guardian.
06Business-to-business communications
6.1
We may contact venues, promoters and other businesses using contact details that are publicly available, including from search engines, mapping services, event listing sites and the businesses’ own websites, to offer our services.
6.2
Each such communication identifies the sender and provides a simple means of opting out. Where a recipient asks not to be contacted, we will not contact them again.
6.3
Where the recipient is a sole trader or partnership, their details are treated with the same care as those of a private individual, in accordance with the Privacy and Electronic Communications Regulations 2003.
08Your rights
8.1
Under UK data protection law you have the right to:
- access the personal data we hold about you and obtain a copy of it;
- have inaccurate personal data corrected;
- have your personal data erased, where we are not legally required to retain it;
- restrict or object to our processing of your personal data, including for direct marketing;
- withdraw your consent at any time, where processing is based on consent;
- receive your personal data in a portable format.
8.2
To exercise any of these rights, please contact hello@stillsonicmedia.co.uk. There is no charge, and we will respond within one month.
8.3
If you are dissatisfied with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ico.org.uk). We would, however, welcome the opportunity to address your concerns first.
09Security
9.1
We take appropriate technical and organisational measures to protect personal data. Client records and administrative systems are accessible only to the data controller through secure authentication; the website is served exclusively over encrypted connections; and client gallery links are unguessable, excluded from search engines and expire automatically.
10Changes to this policy
10.1
We may update this Privacy Policy from time to time. The current version will always be published on this page with its effective date. Where changes materially affect existing clients, we will notify them directly.
Effective 19 October 2026 · Still Sonic Media