Privacy policy - Goofy Pup Studios

Goofy Pup Studios Privacy Policy

Last Updated 30/08/2026

This privacy notice tells you what to expect us to do with your personal information:

Contact details

What information we collect, use, and why

Lawful bases and data protection rights

Where we get personal information from

How long we keep information

Who we share information with

Sharing information outside the UK

How to complain

Our Contact details

goofypupstudios@gmail.com

What information we collect, use, and why

We collect or use the following information to provide services and goods, including delivery:

Names and contact details

Addresses

Payment details (including card or bank information for transfers and direct debits)

Website user information (including user journeys and cookie tracking)

Photographs or video recordings

Information relating to compliments or complaints

We collect or use the following personal information for dealing with queries, complaints or claims:

Names and contact details

Address

Payment details

Purchase or service history

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for.

Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.

Your right to erasure - You have the right to ask us to delete your personal information. Read more about the right to erasure.

Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information.

Your right to object to processing - You have the right to object to the processing of your personal data.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.

Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time.

For information about the above, please see the following link:

https://ico.org.uk/for-organisations/advice-for-small-organisations/privacy-notices-and-cookies/create-your-own-privacy-notice/your-data-protection-rights/#roa

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information to provide services and goods are:

Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

(only used in the event of complaints that are not able to be solved between goofy pup studios and the client)

Where we get personal information from

Directly from you

How long we keep information

Data Retention

Goofy Pup Studios only retains personal information for as long as it is reasonably necessary for the purposes for which it was collected, unless we are required by law to retain it for a longer period.

Where you make an enquiry but do not go on to book a photography session, your personal information will normally be deleted from the Goofy Pup Studios Pixieset Studio Manager within 3 months of our last meaningful communication, unless there is a legitimate reason for us to retain it for longer.

Where you make a booking, we may retain information relating to your booking, correspondence, invoices, payments and other business records for longer where this is necessary for accounting, tax, legal or regulatory purposes. As a UK business, Goofy Pup Studios is required to retain certain business and financial records for HM Revenue & Customs (HMRC). Where applicable, these records will normally be retained for at least 5 years after the 31 January submission deadline for the relevant tax year, or for any longer period required by law.

Personal information that is no longer required for legal, tax, accounting, contractual or legitimate business purposes will be securely deleted or anonymised.

Completed Galleries

Following your photography session, your final photographs will be uploaded to a secure online gallery provided by Pixieset, where you will be able to view and access the images included with your package and any additional images or products purchased.

Goofy Pup Studios will retain completed galleries for 3 months following your session. This allows you time to access and download your photographs and allows us to assist with reasonable requests relating to your gallery or purchased images. Please ensure you download, store and back-up your images as we cannot guarantee access to them after this time.

After this period, galleries may be removed from Pixieset. This does not affect any personal or financial information that Goofy Pup Studios is legally required to retain for accounting, tax or other legal purposes.

Goofy Pup Studios may retain appropriate copies or backups of photographs for longer where reasonably necessary for business continuity, protection against data loss, or where you have separately provided consent for your photographs to be used for marketing purposes (provided on completion of your booking questionnaire).

Retention of photographs does not extend the period for which other personal information is retained where that information is no longer required.

For more information on how long we store your personal information or the criteria we use to determine this please contact us using the details provided above.

Marketing Communications

If you choose to opt in to receive marketing communications from Goofy Pup Studios, I may use your name and email address to send you occasional emails about upcoming photography session dates, seasonal or special sessions, special offers, promotions, print or product offers, and other relevant Goofy Pup Studios news.

Marketing communications will only be sent where you have actively given your consent to receive them. You are not required to consent to marketing communications in order to book or use my photography services.

I will retain your marketing information for as long as it is reasonably necessary for the purpose of providing you with marketing communications. I will review marketing contact information periodically and, where appropriate, remove or anonymise information that is no longer needed for this purpose. As a general policy, I will review marketing subscribers after 24 months to consider whether their information remains relevant and whether it is reasonable to continue retaining it for marketing purposes.

You can withdraw your consent and unsubscribe from marketing communications at any time by using the unsubscribe link provided in any marketing email or by contacting me directly. If you withdraw your consent, I will stop using your information for marketing purposes.

Where necessary to ensure that I do not send marketing communications to someone who has previously opted out, I may retain a limited record of your email address on a suppression or “do not contact” list. This information will only be retained for the purpose of preventing further unwanted marketing communications and will not otherwise be used for marketing.

I use Pixieset to manage my photography bookings, client galleries and marketing communications. Your marketing contact information may therefore be processed by Pixieset on my behalf for the purpose of sending these communications. Pixieset acts as a service provider/data processor in relation to this processing. Further information about how Pixieset processes personal information can be found in its own privacy policy.

Who we share information with

Data processors

Pixieset

This data processor does the following activities for us: We use Pixieset for online bookings, client forms, payment details, invoices and online photography galleries. Information you provide through the Goofy Pup Studios booking process may therefore be processed and stored by Pixieset on my behalf. Pixieset's own Privacy Policy explains how it processes personal information and the information it may collect when clients use services provided through its platform.

For more information, Pixieset’s privacy policy can be found at https://pixieset.com/privacy/

Stripe

This data processor does the following activities for us: We use Stripe to securely process online payments made through the Pixieset booking system. Your payment information is processed by Stripe in accordance with Stripe's own privacy policy. Goofy Pup Studios does not receive or store your full payment card details. Stripe may process information associated with a transaction, such as your name, email address, billing information, payment details and transaction information, in order to process the payment and prevent fraud.

For more information, Stripe’s privacy policy can be found at https://stripe.com/gb/privacy

Hostinger

This data processor does the following activities for us: Our website is hosted by Hostinger. As part of providing its website hosting services, Hostinger may collect, store and process certain personal information relating to visitors and users of our website on our behalf.

This may include information provided through our website, together with technical information generated when you visit or use the website, such as your IP address, browser and device information, and information relating to your use of the website. Hostinger's Privacy Policy states that information relating to visitors and users of its customers' websites may be processed solely on behalf of, and at the direction of, the customer.

Where Hostinger processes personal information on our behalf for the purposes of providing website hosting services, Goofy Pup Studios is the data controller and Hostinger acts as a data processor. We remain responsible for determining how and why your personal information is processed and for providing the appropriate privacy information.

Hostinger states that personal information may be stored and processed by Hostinger, its authorised affiliates and service providers in the United Kingdom, the Netherlands, Lithuania, Cyprus and other jurisdictions where necessary to provide its services or where required by law. Hostinger also states that, in certain circumstances, personal information may be transferred to countries outside the UK, EU or EEA, subject to appropriate safeguards under applicable data protection law.

Hostinger also describes security measures designed to protect personal information, including physical, electronic and procedural measures, secure HTTPS access and monitoring for vulnerabilities and attacks.

For further information about how Hostinger processes personal information, including its use of service providers, international data transfers and security measures, please see the Hostinger Privacy Policy.

https://www.hostinger.com/uk/legal/privacy-policy

Loxley Colour

Where you purchase physical prints, wall art, albums or other photographic products through Goofy Pup Studios, your photographs and any information necessary to fulfil your order may be securely provided to Loxley Colour, a professional photographic printing laboratory based in the UK. Loxley Colour uses this information solely for the purpose of producing and fulfilling the photographic products ordered on your behalf. Depending on the product and delivery arrangements, this may include your photographs, name, contact details and delivery address.

Loxley Colour may process and store this information for as long as reasonably necessary to fulfil the order and provide its services. Your information will not be provided to Loxley Colour for independent marketing purposes by Goofy Pup Studios.

Loxley Colour is based in the United Kingdom and provides professional photographic printing, framing and photographic product services to professional photographers. By purchasing a physical photographic product through Goofy Pup Studios, you acknowledge that your information and photographs may be shared with Loxley Colour where this is necessary to fulfil your order.

For more information, Loxley colour’s privacy policy can be found at https://www.loxleycolour.com/help/privacy

Others we share personal information with

Professional or legal advisors- only in the event of complaints that are not able to be solved between goofy pup studios and the client.

Suppliers and service providers- Listed below

Sharing information outside the UK

How We Share and Transfer Your Data Internationally

To deliver our photography services and process your orders securely, we share your data with trusted third-party platforms. Because these platforms operate globally, your information will be transferred and stored outside of the United Kingdom (UK) as detailed below:

We use Pixieset Media Inc. to host your digital galleries, manage client accounts, and deliver your images. When you make a booking or view your galleries, your personal data that you provide—including your name, address, contact telephone number and email address, IP address, image selections, and communications—will be transferred to Pixieset's servers. Pixieset is headquartered in Canada, a country that the UK Government formally recognizes as providing an adequate level of data protection. To fulfill orders and secure the platform, Pixieset may further transfer data to global service providers, primarily located in the United States (such as cloud hosting, security, and professional print labs). These subsequent transfers are legally protected by UK-approved Standard Contractual Clauses (SCCs) to ensure your information remains secure.

To securely process online payments through our website and galleries, we integrate third-party payment gateways provided by Stripe Payments Europe, Ltd. When you make a payment, your transaction details—including your name, billing address, email, and encrypted payment card details—are captured directly by Stripe. This financial data does not pass through or get stored on our personal servers. To process your transaction and meet global financial safety regulations, Stripe transfers this information internationally to its parent entity, Stripe, Inc., in the United States. These transfers are legally protected by Stripe’s active certification under the UK Extension to the EU-U.S. Data Privacy Framework and the execution of the UK International Data Transfer Addendum.

Please note that Stripe acts as an independent Data Controller for compliance and anti-fraud monitoring, and handles your financial details strictly in accordance with their own global privacy standards.

Direct Financial Processing Notice

Please note that when you make a payment through our website or galleries, your financial data is captured directly by Stripe via a secure encrypted pathway. We do not view, collect, or store your credit card numbers on our own servers. Stripe acts as an independent Data Controller for compliance and anti-fraud monitoring, and handles your financial details strictly in accordance with their own global privacy standards.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website to ensure our platform works correctly, to understand how visitors interact with our content, and to improve your overall browsing experience.

1. What Are Cookies?

Cookies are small text files that are automatically placed on your computer or mobile device when you visit a website. They are widely used to make websites function efficiently, remember your preferences, and provide analytics data to the site owner.

2. Your Control and Consent (Our Cookie Banner)

In compliance with the UK GDPR and UK privacy regulations, we operate an explicit consent model on our website. When you first visit our site, a cookie consent banner will appear.

Essential Cookies load automatically to keep the website secure and functional.

Non-Essential Cookies (such as analytics or tracking tools) are blocked by default. They will only be placed on your device if you explicitly click "Accept" on our banner.

If you click "Decline" or ignore the banner, no non-essential tracking cookies will be used during your visit. You can also clear or block cookies at any time through your web browser's native settings.

3. Types of Cookies We Use

The cookies deployed on our website via the Pixieset platform are categorized as follows:

Essential & Functional Cookies (Strictly Necessary): These cookies are required for core website operations. They enable security features (such as preventing cross-site request forgery via Pixieset's XSRF-tokens), allow client-exclusive gallery access, and keep you securely logged into your private proofing sheets or shopping carts. These do not require prior consent because the website cannot function properly without them.

Analytics & Performance Cookies: We use third-party analytics tools—notably Google Analytics (integrated via Pixieset)—to track anonymized data about how visitors find and use our site. This includes monitoring general traffic patterns, popular galleries, and geographic areas. This data helps us optimize our website design and content to better suit our clients. These cookies are only deployed if you choose to "Accept" them on our banner.

Marketing & Advertising Cookies: If integrated (such as a Meta/Facebook Pixel), these cookies track your interactions across our website to measure the effectiveness of our social media advertisements and to display relevant photography services to you in the future. These cookies are strictly blocked unless you provide explicit consent

How to complain

If you have any concerns about our use of your personal information, you can make a data protection complaint to us:

Email: goofypupstudios@gmail.com

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint