​

This Privacy Policy explains how Michelle Morris trading as The Confidence Photographer (“I”, “me” or “the Photographer”) collects, uses and protects personal information.

​

I take your privacy seriously and handle personal information in accordance with applicable UK data protection law, including the UK GDPR and Data Protection Act 2018.

​

1. Who I Am

Michelle Morris — The Confidence Photographer

Based in Worcestershire and working across the UK and internationally.

Email: michelle@michellemorris.co.uk
Telephone: 07894 747 807

​

I am the data controller for the personal information described in this Privacy Policy.

​

2. Information I May Collect

Depending on how you interact with me, I may collect information including:

​

• your name;

• email address;

• telephone number;

• business or organisation name;

• job title or professional information;

• information you provide through my website, enquiry forms, email, telephone, WhatsApp or social media;

• information provided when planning or booking a photography session;

• billing and transaction information;

• photographs created during a photography session;

• information you provide in connection with a testimonial, review or permission to use photographs;

• mailing-list subscription information; and

• information about how you use my website, where this is collected through cookies or analytics tools.

 

I will only collect information that is reasonably necessary for the purposes described in this policy.

​

3. How I Use Your Information

I may use personal information to:

​

• respond to enquiries;

• arrange discovery calls, photography sessions and planning consultations;

• provide photography services;

• communicate with Clients before, during and after a shoot;

• process bookings, payments and invoices;

• deliver photographs and online galleries;

• maintain business and accounting records;

• provide customer service and respond to queries or complaints;

• send marketing emails where I have permission or another lawful basis to do so;

• improve my website and understand how visitors use it;

• protect my business and website from misuse or security threats; and

• comply with legal, tax and regulatory requirements.

 

Where identifiable photographs are used by me for my website, portfolio, social media, advertising, editorial features or other promotional purposes, I will obtain appropriate permission as described in my Terms & Conditions.

​

4. Lawful Basis for Using Personal Information

Under UK data protection law, I must have a lawful reason for using personal information.

Depending on the circumstances, I may rely on:

​

Contract — where the information is necessary to take steps at your request before entering into a contract or to provide photography services you have booked.

​

Legitimate interests — where it is reasonably necessary for running and developing my business, communicating with Clients and potential Clients, maintaining records, improving my services or protecting my business, provided those interests do not override your rights.

​

Consent — where you have specifically agreed to something, for example certain marketing communications or use of identifiable photographs for promotional purposes where consent is appropriate.

​

Legal obligation — where I need to retain or use information to comply with legal, accounting or tax obligations.

​

Where I rely on consent, you can withdraw that consent at any time.

​

5. Photographs

Photographs of identifiable individuals may constitute personal data.

​

Images created during a photography session are processed in order to provide the photography service booked by the Client.

​

I may retain final edited photographs as part of my professional archive and business records.

​

I use ShootProof to provide private online galleries and deliver final edited photographs to Clients. Client names, email addresses and photographs may therefore be processed through ShootProof where necessary to provide this service.

​

I will not assume that every Client wishes their photographs to be used publicly. Where I wish to use identifiable photographs for my own website, portfolio, social media, advertising, editorial features, awards submissions or other promotional purposes, appropriate permission will be obtained.

​

A Client may decline permission for promotional use without affecting the photography service they receive.

​

6. Email Marketing

If you subscribe to my mailing list or otherwise agree to receive marketing communications, I may use your name and email address to send you news, photography-related content, information about my services and occasional offers.

​

My email marketing service is MailerLite.

​

You can unsubscribe at any time by using the unsubscribe link included in marketing emails or by contacting me at michelle@michellemorris.co.uk.

​

Email marketing systems may collect information such as whether an email has been opened or a link clicked. This information may be used to understand engagement with my communications.

​

7. Who I May Share Information With

I do not sell personal information.

​

I may share information with trusted third-party service providers where necessary to run my business and provide my services. These may include providers of:

​

• website hosting and website services;

• email and email marketing;

• online photography galleries and image delivery;

• cloud storage and file backup;

• accounting and payment processing;

• scheduling or customer-management systems; and

• professional advisers such as accountants, solicitors or insurers where necessary.

 

These providers may only use personal information for the purposes for which it has been provided to them and are required to handle it appropriately.

​

I may also disclose information where required by law.

​

8. International Transfers

Some of the technology and service providers I use may process or store personal information outside the United Kingdom.

​

Where personal information is transferred internationally, I will take reasonable steps to ensure that appropriate protections required by UK data protection law are in place.

​

9. How Long I Keep Information

I retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide my services, maintain appropriate business records and meet legal, tax and accounting requirements.

​

Different information may therefore be retained for different periods.

​

Financial and transaction records may be retained for the period required by applicable tax and accounting law.

 

Photographs may be retained within my professional archive unless there is a reason for them to be deleted.

​

Mailing-list information will normally be retained until you unsubscribe or ask me to remove your details.

​

I periodically review information I hold and delete or securely dispose of information that is no longer required.

​

10. Security

I take reasonable technical and organisational precautions to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

​

However, no online system or method of electronic storage can be guaranteed to be completely secure.

​

11. Cookies and Website Analytics

My website may use cookies and similar technologies.

​

Cookies are small files stored on your device that can help a website operate correctly, remember preferences or provide information about how visitors use the website.

​

Some cookies are necessary for the website to function.

​

Other cookies, such as analytics or marketing cookies, will only be used where permitted by applicable law and, where required, after you have been given the opportunity to accept or reject them.

​

You can also control cookies through your browser settings.

​

12. Links to Other Websites

My website may contain links to websites operated by other organisations.

​

I am not responsible for the privacy practices of those websites and recommend that you read their own privacy policies before providing personal information.

​

13. Your Data Protection Rights

Depending on the circumstances, you may have rights under UK data protection law including the right to:

​

• ask for a copy of the personal information I hold about you;

• ask me to correct inaccurate or incomplete information;

• ask for personal information to be deleted in certain circumstances;

• ask me to restrict how your information is used;

• object to certain uses of your personal information;

• ask for certain information to be transferred to you or another organisation; and

• withdraw consent where processing is based on consent.

 

Not all rights apply in every circumstance.

 

If you wish to exercise any of these rights, please contact me at michelle@michellemorris.co.uk.

​

You will not normally have to pay a fee to exercise your rights.

​

14. Complaints

If you have any concerns about how I use your personal information, please contact me in the first instance at michelle@michellemorris.co.uk.

​

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK regulator for data protection.

​

Further information is available from the ICO at www.ico.org.uk.

​

15. Changes to This Privacy Policy

I may update this Privacy Policy occasionally to reflect changes to my business, the services I use or applicable law.

The latest version will always be published on this website.

​

Last updated: August 2026