SALLY DREAMS PRIVACY POLICY

Privacy Policy

Sally Dreams Photography

Last updated: June 2026

Who I am

My name is Sally Wright. I operate as Sally Dreams Photography, a personal brand photography business based in Ibiza, Spain, working with clients in the UK and internationally. I am the data controller responsible for your personal data.

You can contact me at: sally@sallydreams.com

As I work both in the UK and within the EU, I am committed to complying with both the UK General Data Protection Regulation (UK GDPR) as amended by the Data (Use and Access) Act 2025, and the EU General Data Protection Regulation (EU GDPR) where applicable.

What data I collect and why

I collect only the information I need to provide my photography services to you. This includes:

  • Your name and contact details (email address and mobile number) — to communicate with you before, during, and after your shoot
  • Your address — where relevant for in-home shoots or to send products and USB drives
  • Session planning information — details you share with me to help plan your shoot (goals, brand information, styling preferences, and so on)
  • Payment information — processed securely through my payment provider; I do not store card details

The lawful basis for processing this data is contract performance — I need it to deliver the services you have engaged me for. Where I send you relevant follow-up communications (such as session offers or product discounts related to your booking), I do so on the basis of legitimate interests.

Your photographs

When I photograph you, the images produced may constitute personal data under GDPR as they depict identifiable individuals.

I store your images on password-encrypted hard drives and with an online gallery provider that is GDPR-compliant.

I ask all clients to confirm their preferences regarding image use as part of the booking process. Subject to your agreement, I may share selected images on my website, Instagram, and other marketing channels to showcase my work. If you would prefer your images to remain private, I am happy to accommodate that — please simply let me know.

You can withdraw your consent to image use at any time by contacting me directly.

How I store and protect your data

Your personal information is stored on a password-protected device and, where applicable, within secure third-party platforms. I do not share your data with anyone outside of the following categories, and only where strictly necessary:

  • IT and administrative service providers
  • Professional advisers (legal, financial, insurance)
  • Laboratory or printing partners (who may require your name and address to fulfil product orders)
  • Regulatory or government bodies where legally required

I will retain your data for as long as is reasonably necessary for the purposes for which it was collected, typically for the duration of our working relationship and for a period of up to three years thereafter for administrative purposes.

Your website visit

My website uses cookies and analytics tools to understand how visitors use the site. This helps me improve the content and experience I offer. No personally identifiable information is stored through cookies. You will be given the option to accept or decline non-essential cookies when you visit the site.

Your rights

Under UK GDPR and EU GDPR, you have the right to:

  • Access the personal data I hold about you
  • Correct any inaccurate information
  • Request deletion of your data, subject to any legal obligations I have to retain it
  • Object to or restrict how I process your data
  • Data portability — to receive your data in a structured, commonly used format

To exercise any of these rights, simply contact me at the email address below.

How to raise a concern or complaint

If you have any concern about how I have handled your personal data, please contact me directly in the first instance. I take all privacy matters seriously and will respond without undue delay — and in any case within 30 days of receiving your complaint.

Contact: sally@sallydreams.com

If you are not satisfied with my response, you have the right to escalate your complaint to the relevant supervisory authority:

  • UK clients: The Information Commissioner’s Office (ICO) — ico.org.uk
  • EU clients: The Spanish Data Protection Authority (AEPD) — aepd.es

Third-party links

My website may include links to external sites. I am not responsible for the privacy practices of those sites and recommend you review their own privacy policies.

Updates to this policy

I may update this policy from time to time to reflect changes in my services or in data protection law. The current version will always be published on my website, with the date of last update shown at the top.

For any questions about this policy, please contact: sally@sallysallydreams.com