Privacy Policy

Nick Gregan Photography
Website: https://nickgregan.com
Last updated: April 2026

1. Who We Are

Nick Gregan Photography is a photography business operated by Nick Gregan, providing headshot, portrait, and commercial photography services based in London, UK.

As a business that collects and processes personal data, Nick Gregan acts as the Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact details for data-related enquiries:
Name: Nick Gregan
Business: Nick Gregan Photography
Website: https://nickgregan.com
Email: [email protected]

Note: Nick Gregan Photography is in the process of registering with the Information Commissioner’s Office (ICO). If you wish to check ICO registration status, visit https://ico.org.uk/esdwebpages/search

2. What Personal Data We Collect and Why

Photography Sessions
When you book and attend a photography session with Nick Gregan Photography, we collect and process the following personal data:
Your name and contact details (email address, phone number)
Booking and payment information
Photographs taken during your session (including images of your likeness)
Correspondence related to your booking or session

This data is processed on the lawful basis of contract – it is necessary to fulfil the photography services you have booked. Images may also be retained for portfolio and marketing purposes (see Section 6 below).

Contact Forms
When you submit an enquiry via the contact form on our website, we collect:
Your name
Your email address
Any information you choose to include in your message

This data is processed on the lawful basis of legitimate interests – to respond to your enquiry. We do not use contact form submissions for marketing without your separate consent.

Email Marketing and Mailing List
If you sign up to receive the free ebook or marketing communications from Nick Gregan Photography, we collect:
Your name
Your email address

This data is processed on the lawful basis of consent. Your email address and name are stored and managed via MailerLite (our email marketing platform). You can unsubscribe at any time by clicking the unsubscribe link in any email we send, or by contacting us directly. MailerLite’s privacy policy is available at: https://www.mailerlite.com/legal/privacy-policy

Website Analytics
We use Google Analytics to collect anonymised data about how visitors use our website. This may include:
Pages visited and time spent on each page
Browser type and device information
Approximate geographic location (country/city level)
How you arrived at our website (e.g. search engine, social media)

Google Analytics uses cookies to collect this data. The information is anonymised and does not identify you personally. This is processed on the lawful basis of legitimate interests – to understand how our website is used and improve its content. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout

Facebook Pixel and Meta Tracking
Our website uses the Facebook Pixel, a tracking tool provided by Meta Platforms, Inc. This may collect:
Information about your visit to our website (pages viewed, actions taken)
Your IP address and browser information
Data linked to your Facebook account if you are logged in

This data is used to measure the effectiveness of our advertising on Facebook and Instagram, and to show relevant ads to people who have visited our website. This is processed on the lawful basis of consent (via our cookie consent tool) and legitimate interests. Meta’s privacy policy is available at: https://www.facebook.com/privacy/policy

You can opt out of interest-based advertising from Meta at: https://www.facebook.com/ads/preferences

Cookies
Our website uses cookies – small text files stored on your device. The cookies we use include:
Essential cookies: Required for the website to function correctly (e.g. session cookies, security cookies)
Analytics cookies: Used by Google Analytics to collect anonymised usage data (see above)
Marketing cookies: Used by Facebook Pixel for advertising purposes (see above)
Preference cookies: Used to remember your settings and choices on the site

When you first visit our website, you will be asked to consent to non-essential cookies via our cookie banner. You can change your cookie preferences at any time by clearing your browser cookies and revisiting the site, or by adjusting your browser settings.

Comments on the Website
If you leave a comment on our website blog, we collect your name, email address, and the content of your comment, along with your IP address (for spam detection purposes). An anonymised version of your email address may be shared with the Gravatar service to display a profile image. Comments and associated metadata may be retained indefinitely to support comment moderation.

3. How Long We Retain Your Data
We retain your personal data only for as long as necessary for the purposes for which it was collected:
Session booking and payment data: Retained for 7 years to comply with UK tax and accounting obligations
Photographs from sessions: Retained for up to 3 years after the session, unless you request earlier deletion or we have agreed a longer period for portfolio use
Email marketing data: Retained until you unsubscribe or request deletion
Contact form enquiries: Retained for up to 2 years
Website analytics data: Retained in accordance with Google Analytics’ data retention settings (default 26 months)
Website comments: Retained indefinitely unless you request deletion

4. Who We Share Your Data With
We do not sell your personal data to third parties. We may share your data with the following trusted service providers, solely for the purposes described in this policy:
MailerLite (email marketing platform) – based in the EU, GDPR compliant
Google LLC (Google Analytics) – data may be processed outside the UK/EEA; Google is certified under appropriate data transfer mechanisms
Meta Platforms, Inc. (Facebook Pixel) – data may be processed outside the UK/EEA; Meta is certified under appropriate data transfer mechanisms
Automated spam detection services (for website comments)

We may also disclose your data if required to do so by law, or in response to a valid legal request from a public authority.

5. Use of Your Images for Portfolio and Marketing
Unless you request otherwise in writing before your session, Nick Gregan Photography reserves the right to use images from your session for the following purposes:
Portfolio display on the nickgregan.com website
Nick Gregan Photography’s social media accounts (Instagram, Facebook, LinkedIn, X)
Promotional and marketing materials

Your name will not be used in connection with any publicly displayed images without your separate consent.

If you do not wish your images to be used for portfolio or marketing purposes, please notify us in writing before your session. You may also withdraw consent at any time by contacting us at the email address above, though this will not affect any use made prior to your withdrawal.

6. Your Rights Under UK GDPR
Under UK GDPR, you have the following rights regarding your personal data:
Right of access: You can request a copy of the personal data we hold about you
Right to rectification: You can ask us to correct inaccurate or incomplete data
Right to erasure: You can ask us to delete your personal data, subject to legal obligations
Right to restrict processing: You can ask us to limit how we use your data
Right to data portability: You can ask for your data in a portable, machine-readable format
Right to object: You can object to processing based on legitimate interests or for direct marketing
Rights related to automated decision-making: We do not use automated decision-making or profiling

To exercise any of these rights, please contact us at the email address listed in Section 1. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

7. How We Protect Your Data
We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. These include:
Use of secure, password-protected systems for storing client data and images
Secure online client galleries protected by unique access links
Use of reputable, GDPR-compliant third-party service providers
Limiting access to personal data to only those who need it to fulfil their role

Please be aware that no method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Data Breach Procedures
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:
Notify the Information Commissioner’s Office (ICO) within 72 hours of becoming aware of the breach, where required
Notify affected individuals without undue delay if the breach is likely to result in a high risk to their rights and freedoms
Keep a record of the breach and the steps taken in response

9. Links to Third-Party Websites
Our website may contain links to third-party websites (such as Spotlight, casting directories, or social media platforms). This privacy policy applies only to nickgregan.com. We are not responsible for the privacy practices of any third-party sites and encourage you to read their privacy policies before providing any personal data.

10. Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal obligations. The most current version will always be available on our website at https://nickgregan.com/privacy-policy. The date at the top of this page indicates when the policy was last updated.

11. How to Make a Complaint
If you have concerns about how we handle your personal data, please contact us in the first instance at the email address in Section 1 and we will do our best to resolve the matter.

If you remain unsatisfied, you have the right to lodge a complaint with the UK’s data protection authority:

Information Commissioner’s Office (ICO)
Website: https://ico.org.uk
Helpline: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF