Privacy Policy
Sue Morris Wildlife Images is committed to respecting your privacy and protecting your personal information.
This privacy policy explains what personal information I collect, why I collect it, how it is used and the rights you have in relation to it.
Last updated: 29 July 2026
Who Is Responsible for Your Personal Information?
Sue Morris Wildlife Images is the data controller responsible for the personal information collected through this website.
You can contact me using the following details:
- Name: Sue Morris
- Email: suemorrisphotography@mac.com
- Telephone: 07910 819 076
What Personal Information I Collect
Depending on how you use the website, I may collect the following information:
- Your name, email address, telephone number and other contact details.
- Information included within an enquiry or message you send.
- Billing, delivery and order information when you make a purchase.
- Information about the products or services you purchase or enquire about.
- Comments, reviews or other information you choose to submit.
- Technical information such as your IP address, browser, device type and operating system.
- Information about how you use the website, including pages visited, referral sources and interactions with the website.
- Your marketing and cookie preferences.
Please do not provide sensitive personal information unless it is necessary for your enquiry.
How I Collect Your Information
I may collect personal information when you:
- Complete an enquiry or contact form.
- Contact me by email or telephone.
- Create an account or place an order.
- Leave a comment or review.
- Subscribe to marketing communications.
- Browse or interact with the website.
I may also receive limited information from service providers involved in processing payments, delivering orders, securing the website or providing website analytics.
Why I Use Your Personal Information
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and providing requested information | Taking steps at your request before entering into a contract and my legitimate interests in responding to enquiries |
| Processing and delivering orders | Performance of a contract |
| Managing payments, refunds, accounts and financial records | Performance of a contract and compliance with legal obligations |
| Providing customer service and managing our relationship with you | Performance of a contract and legitimate interests |
| Operating, maintaining and securing the website | Legitimate interests in protecting the website, its users and my business |
| Preventing fraud, spam, misuse and unauthorised access | Legitimate interests and compliance with legal obligations |
| Understanding how visitors use the website | Your consent where required |
| Sending marketing communications | Your consent or another lawful basis permitted under applicable marketing rules |
| Establishing, exercising or defending legal claims | Legitimate interests and compliance with legal obligations |
Where I rely on legitimate interests, I consider whether the use of your information is necessary and whether your rights and interests outweigh those interests.
Enquiry Forms
This website uses Gravity Forms to process website forms. Information submitted through a form is used to respond to your enquiry and provide any information you have requested.
Form submissions may be stored temporarily within the website database and may also be sent to me by email. Access is restricted to authorised individuals and service providers who require access to operate or support the website.
Website database copies of form submissions are normally deleted after 30 days. Copies held within email or customer records may be retained for longer where reasonably necessary to manage your enquiry or provide services.
Orders and Payments
When you place an order, I may collect your name, contact details, billing address, delivery address and details of the products purchased.
Payments are processed securely by the payment provider shown during checkout. I do not normally receive or store your complete debit or credit card details.
Information may be shared with payment providers, delivery companies and other service providers where necessary to process and fulfil your order.
Who I Share Your Information With
I do not sell or rent your personal information.
I may share information with trusted service providers where this is necessary to operate the website or provide products and services, including:
- Website hosting, maintenance and technical support providers.
- Email and communication providers.
- Payment processors.
- Delivery and postal service providers.
- Analytics providers, where permitted by your cookie preferences.
- Spam prevention, fraud prevention and website security providers.
- Accountants, legal advisers, insurers and other professional advisers.
- Government bodies, regulators, courts or law enforcement authorities where disclosure is required by law.
Service providers may only use personal information for the services they provide and must handle it securely and lawfully.
International Data Transfers
Some service providers may process or store information outside the United Kingdom.
Where personal information is transferred internationally, I will take reasonable steps to ensure that an appropriate legal transfer mechanism and suitable safeguards are in place. This may include UK adequacy regulations, approved contractual safeguards or another transfer mechanism permitted by data protection law.
How Long I Keep Your Information
I only retain personal information for as long as it is reasonably required for the purpose for which it was collected.
Typical retention periods include:
- Website form submissions: normally deleted from the website database after 30 days.
- General enquiries: retained for as long as reasonably necessary to respond and manage any follow-up.
- Customer and order records: retained while services are being provided and afterwards where required for accounting, tax, contractual or legal purposes.
- Financial and transaction records: may be retained for up to six years or longer where required by law.
- Marketing information: retained until you unsubscribe, withdraw consent or the information is no longer required.
- Comments and reviews: may be retained while they remain published or until removal is appropriate.
- Security and technical logs: retained for a limited period to maintain security, investigate problems and prevent misuse.
Information may remain within secure backups for a limited period before being automatically overwritten.
Website Analytics
Where enabled and permitted by your cookie preferences, this website may use Google Analytics to understand how visitors use the website.
Analytics information may include pages visited, time spent on the website, general geographical area, device information, browser information and how you reached the website.
This information is used to measure website performance, identify technical problems and improve the website. I do not use analytics information to intentionally identify individual visitors.
Cookies and Similar Technologies
Cookies are small files stored on your device when you visit a website. Similar technologies may include scripts, pixels and local storage.
This website may use the following categories:
- Strictly necessary cookies: required for security, website functionality, shopping baskets, account access or remembering your cookie preferences.
- Functional cookies: used to remember choices and provide enhanced website features.
- Analytics cookies: used to understand how the website is being used and improve its performance.
- Third-party cookies: may be set when content or services from another provider are included on the website.
Where consent is required, non-essential cookies and similar technologies will not be used until you have made your choice.
You can accept, reject or manage cookies using the cookie banner or cookie settings option available on the website. You can also control cookies through your browser settings, although disabling strictly necessary cookies may affect how the website works.
Comments
If comments are enabled and you leave a comment, the website may collect the information entered into the comment form together with your IP address and browser information to help identify spam and misuse.
An anonymised value created from your email address may be provided to the Gravatar service to check whether you use that service. You can read the Automattic privacy policy for further information.
Once a comment has been approved, your name, comment and profile image may be publicly visible.
How I Protect Your Information
I use reasonable technical and organisational measures to protect personal information against accidental loss, unauthorised access, alteration or disclosure.
These measures may include:
- HTTPS encryption when information is transmitted through the website.
- Password-protected administration systems.
- Access controls limiting information to authorised individuals.
- Website security monitoring, updates and malware protection.
- Secure backups and hosting infrastructure.
Although appropriate security measures are used, no website or electronic storage system can be guaranteed to be completely secure.
Your Data Protection Rights
Depending on the circumstances, you may have the following rights:
- Right of access: to request a copy of the personal information held about you.
- Right to rectification: to request that inaccurate or incomplete information is corrected.
- Right to erasure: to request deletion of your information where there is no lawful reason for it to be retained.
- Right to restriction: to request that the use of your information is restricted in certain circumstances.
- Right to object: to object to certain uses of your information, including direct marketing.
- Right to data portability: to request certain information in a structured, commonly used and machine-readable format where this right applies.
- Right to withdraw consent: to withdraw your consent at any time where consent is the lawful basis being used.
- Right to complain: to raise a concern about how your personal information has been handled.
These rights are not absolute and may be subject to legal exemptions.
To exercise your rights, please contact me using the details at the top of this policy. I may need to request information to confirm your identity before completing your request.
I will normally respond to a valid request without undue delay and within one month.
Marketing Communications
If you have agreed to receive marketing communications, you can unsubscribe at any time by using the unsubscribe link included within the email or by contacting me directly.
Withdrawing consent will not affect the lawfulness of any processing carried out before consent was withdrawn.
Automated Decision-Making
I do not use personal information to make decisions about you solely through automated processing where those decisions would have a legal or similarly significant effect.
Making a Complaint
If you have concerns about how your personal information has been used, please contact me first using the details at the top of this policy so that I can investigate the matter.
You also have the right to complain to the Information Commissioner’s Office, the UK regulator responsible for data protection.
- Website: Make a complaint to the ICO
- Telephone: 0303 123 1113
- Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Changes to This Privacy Policy
I may update this privacy policy when the website, services or legal requirements change. The latest version will always be published on this page with the date it was last updated.
Contact
If you have any questions about this privacy policy or how your personal information is handled, please contact:
Sue Morris
Email: suemorrisphotography@mac.com
Telephone: 07910 819 076