Privacy Policy


Last updated: 8 October 2026


1. Who is responsible for your information


James Wolfisz, trading as James Wolfisz Photography, is the controller of personal information used to run this photography business.


Address: 37 Turpins Chase, Welwyn, AL6 0RP, United Kingdom.


Email: james@jameswolfisz.com.


This policy explains how I handle information about enquiries, clients, website visitors and people appearing in photographs.


2. Information collected


I may collect your name, email address, telephone number, billing and delivery addresses; enquiry and booking correspondence; pet and session information; image selections; order and payment records; marketing preferences and consent records. Photographs may contain identifiable people or information linked to their owner. Please avoid sending unnecessary sensitive personal information.


My Pixieset website, galleries and store may collect technical information such as IP address, browser and device details, access times, gallery activity and checkout information. Payment details are handled by Stripe or PayPal; I receive information needed to confirm and administer transactions rather than storing full card details myself.


Information usually comes directly from you, your interaction with the website or a session. If another person books or orders on your behalf, I may receive relevant contact and delivery details from them. Please only provide other people's details where you are entitled to do so and let them know about this policy.


3. Why information is used and the lawful basis


  • Enquiries, quotes, bookings, sessions, galleries, orders and delivery: taking steps at your request before a contract or performing the contract with you.
  • Accounting and legally required records: compliance with legal obligations.
  • Security, fraud prevention, managing business correspondence, reasonable image archiving for reorders, and establishing or defending claims: legitimate interests in securely operating the business and protecting its rights, balanced against your rights. Where photographs include people who are not parties to the booking, legitimate interests may support taking and supplying the agreed private photographs.
  • Promotional use of client photographs and marketing emails: your separate consent. Neither is a condition of booking.


Contact and order information needed for a booking or purchase must be provided so I can fulfil it. Without that information I may be unable to proceed. Optional marketing and promotional permissions can be refused.


4. Service providers and sharing


Information is shared only as needed for the relevant purpose with:


  • Pixieset, acting as a processor for client information used to provide the website, enquiry forms, client galleries, store and related communications; its subprocessors support hosting, content delivery, security, email and service monitoring as required;
  • Google/Gmail, for business email correspondence;
  • Stripe and PayPal, for payment processing, refunds, transaction security and dispute handling;
  • Loxley Colour, for production and, when delivering directly to you, your name, delivery address and necessary contact details;
  • Delivery companies where required to fulfil an order;
  • Professional advisers or public authorities where necessary for advice, legal obligations or claims.


Providers may act as processors or, for some activities such as payment regulation and fraud prevention, as independent controllers. Their own privacy notices explain those independent uses. I do not sell your personal information.


5. International processing


Some providers, including Pixieset, Google and payment providers, may process information outside the UK. The destinations and safeguards depend on the provider and service used.


Pixieset has confirmed that uploaded content is stored on Amazon Web Services (AWS) infrastructure and that it uses third-party providers to support its services. Pixieset's published privacy policy states that information may be transferred, stored or processed outside your country and that it uses recognised mechanisms to protect international transfers. Its public explanation refers to EU Standard Contractual Clauses and Canada's PIPEDA framework.


The information supplied to me does not identify the particular AWS regions or UK transfer mechanism applicable to my account. I therefore do not represent that your information is stored exclusively in the UK, or that a specific transfer safeguard has been independently verified. You can contact james@jameswolfisz.com for the available provider information. Pixieset's privacy policy and Data Processing Addendum are available at https://pixieset.com/privacy/ and https://pixieset.com/dpa/.


6. Retention


  • Enquiries that do not lead to a booking: normally 12 months after the last substantive contact.
  • Online client galleries: normally 90 days after delivery.
  • Finished image files: normally three years after delivery for reorders.
  • RAW files and working edits: normally 12 months after delivery.
  • Relevant booking, order and complaint records: normally six years after completion or resolution, to administer the agreement and address potential claims.
  • Tax and accounting records: at least five years after the 31 January submission deadline for the relevant tax year, or longer where legally required.
  • Marketing subscriber details: until you unsubscribe, withdraw consent or the list is reviewed and your record is no longer needed. A minimal suppression record may be kept to ensure you are not contacted again.
  • Promotional photographs and consent records: while the permitted use continues, with periodic review; relevant consent or withdrawal evidence may be retained as necessary to demonstrate compliance or address a dispute.


Records may be kept longer where a specific legal obligation or active dispute requires this. Relevant files will then be restricted to that purpose. Backup deletion follows a secure rotation process; deleted information is not deliberately restored for ordinary use. Where retention ends, information is deleted or anonymised as appropriate.


7. Marketing and promotional permission


Marketing emails are sent only after you actively opt in. Booking messages and order updates are service communications and are separate from marketing. Each marketing email will include a way to unsubscribe, or you can email james@jameswolfisz.com. Withdrawing consent will not affect your booking or the lawfulness of previous processing.


Promotional image permission is requested separately and identifies the intended use. You can withdraw it by email. I will stop new use and remove images from channels I control where reasonably practicable; printed material already distributed and copies independently shared by others cannot always be recalled.


8. Cookies and technical information


This website uses Pixieset's built-in features. I have not added Google Analytics, a Meta pixel or other separate tracking integrations. This does not mean the platform uses no cookies or technical tracking.


Cookies are small files stored on your device. Pixieset uses cookies and similar technologies for functions such as security, sessions, preferences and transactions. Strictly necessary cookies support essential functions and do not require consent where the relevant legal exemption applies; this does not mean they cannot process personal information.


The Website cookie banner lets you accept all optional cookies, decline them or select your preferences through Manage. Pixieset has confirmed that declining blocks non-essential advertising, personalisation and analytics cookies on the Website. Essential cookies remain active. The optional categories relate to tailored advertising, remembering choices and measuring website usage respectively; their inclusion in the banner does not mean every category is active on every page.


Pixieset's broader cookie policy is available at https://pixieset.com/cookies/. It describes platform cookie purposes and providers, but is not a verified inventory of the individual cookies or expiry periods on this website. Pixieset has not supplied an account-specific inventory. The scope of the Website banner across separately hosted client galleries and store pages has not been confirmed.


You can also manage or delete cookies through your browser settings. Blocking necessary cookies may affect the operation of galleries or checkout. Please contact james@jameswolfisz.com if you need help with cookie choices.


9. Security


I use appropriate technical and organisational measures to protect information, including access controls and secure handling of files. No system is completely risk-free. Please keep private gallery access details secure and do not share them more widely than intended.


10. Your rights


Depending on the circumstances and legal basis, you may ask to access your information, correct it, erase it, restrict its use or receive certain information in a portable format. You can withdraw consent at any time where consent is the basis for use.


You have the right to object to use based on legitimate interests, and an absolute right to object to use of your personal information for direct marketing.


Rights are subject to applicable conditions and exceptions: for example, some accounting or claims records may need to be retained. Contact james@jameswolfisz.com to make a request. I may need proportionate information to verify your identity. I will respond within the period required by law, normally one month, and explain any lawful extension or refusal.


You can complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/ or on 0303 123 1113. You do not need to contact me before doing so, although I welcome the opportunity to resolve a concern.


11. Changes


I will update this policy if the way information is handled changes and provide further notice where required. The date above identifies the latest revision.