2.1 We process data when you use our website (“usage data”). The source of the usage data is our website security provider and may include search queries and the date and time of the request and referral URL. Depending on the settings of the device, it also automatically collects: IP address; MAC address; Device make, model and operating system version; mobile network information; internet service provider; browser type and language; country and time zone in which the Device is located; and metadata stored on the Device. This usage data may be processed for the purposes of helping to secure our website. The legal basis for this processing is our legitimate interests, namely monitoring and protecting our website.
2.2 We may process your prospect / customer account data (“account data”). The account data may include name, business name, address and / or photoshoot address, telephone number(s) and email address(es). The account data may be processed for the purposes of providing services/products, general administration, managing the account, recovering or collecting overdue payments, ensuring the security of our services, maintaining backups of our databases, workflow management of our diary and communicating with you. The legal basis for this processing is our legitimate interests, namely the proper administration of our business and recovering debts owed to us.
2.3 We may process information relating to transactions, including purchases of services/products, that you enter into with us (“transaction data”). The transaction data may be processed for the purpose of supplying the purchased services/products and keeping proper records of those transactions. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract and our legitimate interests, namely our interest in the proper administration of our business.
2.4 We may process information that you provide to us for the purpose of updating you on changes to our business, products or services (“notification data”). The legal basis for this processing is our legitimate interests, namely the proper administration of our business and communications with customers.
2.5 We may process supplier account data which may include name(s), business name, address, telephone number, email address and BACS details (“supplier data”). The supplier data may be processed so that we can purchase products/services from suppliers. The legal basis for this processing is our legitimate interests, namely to fulfil our contractual obligations and communicate with suppliers.
2.6 We may process customer account data and transaction data for the purposes of defining types of customers for our products/services and analyse our financial performance (“statistical data”). The legal basis for this processing is our legitimate interests, namely to inform our marketing strategy and improve our business.
2.7 We may process information contained in or relating to any communication that you send to us by email, post, voicemail or any similar communications (“message data”). The message data may include the communication content and metadata associated with the communication. Our website will generate the metadata associated with communications made using the contact forms. The message data may be processed for the purposes of communicating with you (including where appropriate sending you sales or marketing materials), following up on communications and record keeping. The legal basis for this processing is our legitimate interests, namely the proper administration of our business and communications with suppliers, prospective customers and customers.
2.8 We may process any of your personal data identified in the other provisions of this policy where necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others.
2.9 In addition to the specific purposes, we may also process any of your personal data where such processing is necessary for compliance with a legal obligation to which we are subject (for example: HMRC tax reporting), or in order to protect your vital interests or the vital interests of another natural person.