Privacy policy

Whitney Lloyd Photography acknowledges and understands the importance of our clients personal data and cares about how this data and information is processed. We respect the privacy of everybody who visits our website ( and will only process data and share data in ways that are detailed in this policy and in a manner that is consistent with our obligations and rights under law. The data protection declaration of the Whitney Lloyd Photography is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). We have tried to make this policy as transparent and easy to understand as we could but have linked to other sources of more detailed information on GDPR, Data Protection and more Privacy Policy laws when necessary.  Your acceptance of our privacy policy is deemed to occur upon your first use of our website; therefore if you do not accept and agree to this you must stop using our website immediately. 

Your Rights

  • a) Right of confirmation
  • The right to be informed about how data is processed and used and for what purposes.
  • b) Right of access
  • The right to have access to any personal data held.  
  • c) Right to rectification
  • The right for any inaccurate personal data rectified or completed if it is incomplete.
  • d) Right to erasure (Right to be forgotten)
  • The right to have personal data erased.
  • e) Right of restriction of processing
  • The right to request the restriction or suppression of personal data.
  • f) Right to data portability
  • The right to data portability allows individuals to obtain and reuse their personal data for their own purposes across different services.
  • g) Right to object
  • The right to object processing of personal data in certain circumstances.
  • h) Automated individual decision-making, including profiling
  • The rights with respect to automated decision making and profiling.
  • i) Right to withdraw data protection consent
  • The right to withdraw consent at any time. 
  • j) Right to complain to a supervisory authority
  • The right to make a complaint about your use of personal data

For further and more detailed information regarding your rights please visit the ICO Website:

The Personal Data we collect

By directly contacting and working with Whitney Lloyd Photography  you agree access to some or all of following personal data information to be shared with the company;



Email Address

Contact Telephone or Mobile Numbers

You give consent for us to contact you using this information and store the data for a necessary amount of time as long as it is required for the fulfilment of any contract/booking/agreement made. By visiting our website you agree to the use of Cookies, please see information below on what Cookies are and what they are used for.


The Internet pages of Whitney Lloyd Photography use cookies. Cookies are text files that are stored in a computer system via an Internet browser.

Many Internet sites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows visited Internet sites and servers to differentiate the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognised and identified using the unique cookie ID.

Through the use of cookies, the Whitney Lloyd Photography can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.

By means of a cookie, the information and offers on our website can be optimised with the user in mind. Cookies allow us, as previously mentioned, to recognise our website users. The purpose of this recognition is to make it easier for users to utilise our website. The website user that uses cookies, e.g. does not have to enter access data each time the website is accessed, because this is taken over by the website, and the cookie is thus stored on the user’s computer system. Another example is the cookie of a shopping cart in an online shop. The online store remembers the articles that a customer has placed in the virtual shopping cart via a cookie.

The data subject may, at any time, prevent the setting of cookies through our website by means of a corresponding setting of the Internet browser used, and may thus permanently deny the setting of cookies. Furthermore, already set cookies may be deleted at any time via an Internet browser or other software programs. This is possible in all popular Internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be entirely usable.

Name and Contact of the controller

Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:

Whitney Lloyd



The legitimate interests pursued by the controller

Where the processing of personal data is based on Article 6(1) lit. f GDPR our legitimate interest is to carry out our business in favour of the well-being of all our employees and the shareholders.

Purposes for which data is processed

Digital Photographs and Printed Products:

We process personal data to be able to provide finished products to client; this includes the processing of data with third parties in order to obtain printed products such as Albums, Photobooks, Presentation material and Printed Photographs – All third party supplier details as well as their privacy policies are detailed below. Personal Data may also from time to time be shared with online Blogs or Magazines by which on every instance the client will be required to provide consent beforehand and will be contacted by Whitney Lloyd Photography requesting this data to be shared. 

  • i) DS COLOUR LABS which is situated in the UK and provides photographic prints to Whitney Lloyd Photography. You can access their privacy policy here:
  • ii) QT Albums which is situated in Poland and provides presentation material, printed products and photo albums to Whitney Lloyd Photography. You can access their privacy policy here:
  • iii)Pixiset which is situated in Vancouver and allows Whitney Lloyd Photography to manage online accessible storage of clients photographs in a password protected album. You can access the Pixieset privacy policy here:
  • Iiii)Pixellu which is situated across 10 countries provides a selection of online services designed to help streamline the work load for wedding photographers. Whitney Lloyd Photography uses their services to provide digital online photo slideshows to clients. You can acces the Pixellu privacy policy here:
  • iv) WeTransfer which is situated in Amsterdam & Los Angeles is used when transferring data files directly to clients. You can access the WeTransfer privacy policy here:
  • v) Studioninja which is situated in Australia is an online provider for contracts, e-signatures and forms and allows its users to manage paperwork and acquire signatures for contracts. Whitney Lloyd Photography uses this service to manage agreements with clients. You can access the Studio ninja privacy policy here:

Carrying out services:

We use personal data (contact numbers, email addresses, addresses) to communicate with clients to be able to arrange meetings to discuss their bookings, to ensure satisfaction of finished products, to be able to successfully and safely deliver said products, 


We process personal data (photographs) through this website ( , social media platforms such as Instagram, Facebook and Pinterest. We do this pursue our legitimate interests of carrying out our services. The legal basis for this and privacy policies of the aforementioned social media platforms are detailed below:

Data protection provisions about the application and use of Facebook:

The data protection guideline published by Facebook, which is available at, provides information about the collection, processing and use of personal data by Facebook. In addition, it is explained there what setting options Facebook offers to protect the privacy of the data subject. In addition, different configuration options are made available to allow the elimination of data transmission to Facebook. These applications may be used by the data subject to eliminate a data transmission to Facebook.

Data protection provisions about the application and use of Instagram:

Further information and the applicable data protection provisions of Instagram may be retrieved under and

Data protection provisions about the application and use of Jetpack for WordPress:

The applicable data protection provisions of Automattic may be accessed under The applicable data protection provisions of Quantcast can be accessed under

Data protection provisions about the application and use of Pinterest:

The data protection guideline published by Pinterest, which is available under, provides information on the collection, processing and use of personal data by Pinterest.

Legal basis for the processing

Art. 6(1) lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Article 6(1) lit. b GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of enquiries concerning our products or services. Is our company subject to a legal obligation by which processing of personal data is required, such as for the fulfillment of tax obligations, the processing is based on Art. 6(1) lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6(1) lit. d GDPR. Finally, processing operations could be based on Article 6(1) lit. f GDPR. This legal basis is used for processing operations which are not covered by any of the above mentioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a client of the controller (Recital 47 Sentence 2 GDPR).

Changes to this Privacy Policy

From time to time this policy may have changes made to it so it is good practice to check back to this page regularly to ensure you remain in agreement and are kept up-to-date. 


Any questions relating to this policy please send an email to