"I believe in total transparency—both in front of the camera and behind the scenes. While the formal policy below covers all the legal details required by law, my promise to you is simple: I treat your personal information and photographs with the exact same respect, care, and confidentiality I’d expect for my own."

Privacy Policy

Last Updated: 30/07/2026

1. WHO WE ARE

Andrew Michael Stone Photography (TEDSTONE) (“we", "us", "our") operates as a sole trader photography and visual storytelling business operating out of Exeter / Devon, United Kingdom. We are the 'data controller' responsible for your personal data.

Contact:andrew@stonestudio.photography | A full postal address is provided on formal contracts, client agreements, or upon written request. For data privacy requests, access inquiries, or formal correspondence, please contact Andrew Stone directly via email or through our website contact form.

2. DATA WE COLLECT ABOUT YOU

We may collect, use, and store the following personal data:

  • Contact Details: Name, email address, phone number, and postal address.

  • Visual Data: Still photographs, video recordings with audio, and aerial (drone) footage.

  • Technical Data: IP address, browser type, and site usage metrics via Squarespace analytics.

3. HOW WE COLLECT YOUR DATA

We collect data directly from you via website contact forms, booking agreements, model releases, email correspondence, and during photo/video sessions.

4. LAWFUL BASIS FOR PROCESSING

Under UK GDPR, we rely on the following legal bases to process your data:

  • Contractual Performance: To fulfil our service obligations to you (booking, photography shoot sessions, delivering final media, and executing release agreements).

  • Legitimate Interests: To archive work, market our services (where permitted), maintain business records, and host a client portfolio.

  • Legal Obligation: To maintain accurate accounting and tax records.

5. SQUARESPACE HOSTING & THIRD PARTIES

Our website is built and hosted on the Squarespace platform. Squarespace provides the infrastructure that allows us to present our portfolio and communicate with you. Squarespace collects technical data to power site functionality and analytics. We do not sell your personal data. We only share data with essential service providers (e.g., cloud gallery hosting, accounting software) bound by UK data protection compliance.

6. INTERNATIONAL DATA TRANSFERS

Where data is transferred outside the UK (for example, through secure cloud storage or website analytics providers based in the US), we ensure protection is provided via UK Adequacy Regulations or the UK Extension to the EU-US Data Privacy Framework (UK-US Data Bridge).

7. DATA RETENTION

  • Client & Model Contact Records: Retained for up to 7 years to satisfy accounting and legal liability requirements.

  • Portfolio & Visual Media: Retained indefinitely for historical archiving and commercial licensing records, subject to contractual agreements.

8. YOUR LEGAL RIGHTS

Under UK GDPR, you have the right to request access, correction, or erasure of your personal contact data, or object to direct marketing communications.

Note: Rights regarding visual media (photographs/video) governed by signed Model Release Agreements are subject to contract law and contractual license terms. A Model Release Agreement will be provided once sessions are booked.

To exercise your rights, please contact us at [mailto:andrew@stonestudio.photography. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO)

at www.ico.org.uk.