Privacy Policy

Last updated: 17 September 2026

This policy explains what personal data is collected when you visit innasoul.photography or get in touch about a photo session, why, and what your rights are.

Who is responsible for your data

Inna Soul Photography, a photographer based in London, United Kingdom, is the data controller. For anything in this policy, write to innasoul.photography@gmail.com.

What I collect and why

When you use the contact form or email me

• Your name, email address, the session type and date you have in mind, and whatever you write in your message.
• Used to reply to you and, if you book, to arrange and deliver your session.
• Legal basis: taking steps at your request before entering into a contract, and then performing that contract.

When you book a session

• The correspondence about your booking, and payment and invoicing records.
• Legal basis: performance of our contract, and my legal obligation to keep accounting records.

When you browse the site

• The hosting provider records technical request data (IP address, browser type, pages requested, time) to deliver the site and keep it secure.
• The contact form is protected against automated abuse: requests are rate-limited by IP address, and a verification check (Cloudflare Turnstile) looks at technical signals from your browser to tell people from bots.
• Privacy-friendly, cookieless statistics (Vercel Web Analytics) count page views in aggregate. They do not identify you or follow you across sites.
• Legal basis: my legitimate interest in running a secure, working website.

I do not buy data about you, build profiles, or make automated decisions about you.

Cookies

The site works without optional cookies.

• Language preference – a cookie named NEXT_LOCALE remembers whether you chose Russian or English. It is strictly necessary for that feature.
• Analytics – Google Analytics is used only if you agree in the banner that asks for it. If you agree, Google sets cookies (_ga, _ga_*) to distinguish visitors. You can change your mind at any time through "Cookie settings" in the footer; analytics then stops and its cookies are removed. If no banner has appeared, Google Analytics is not in use.

Who receives your data

Your data is never sold. It is handled by the service providers that run the site and my correspondence, each only for its own task:

• Vercel – website hosting, security and cookieless statistics.
• Cloudflare – the verification check on the contact form.
• Google – email (messages from the contact form are delivered through Gmail) and, only with your consent, Google Analytics.
• Meta (Instagram) – the home page shows recent photos from my Instagram account. The images are loaded from Instagram's servers, which therefore see your IP address, as with any embedded content.

Some of these providers process data outside the United Kingdom, mainly in the United States. Where they do, the transfer relies on the UK–US data bridge or on standard contractual clauses approved for UK transfers.

Beyond that, data is shared only if the law requires it.

How long data is kept

• Enquiries that do not lead to a booking are deleted once the conversation is clearly over.
• Booking and payment records are kept for as long as UK tax law requires, normally six years.
• Hosting logs are kept by the hosting provider for a short period and then deleted automatically.

Your rights

Under UK data protection law you can ask to:

• see the personal data I hold about you and receive a copy;
• have inaccurate data corrected;
• have your data deleted, or its use restricted;
• object to processing that is based on legitimate interests;
• receive the data you gave me in a portable format;
• withdraw consent at any time, where processing is based on consent.

Write to innasoul.photography@gmail.com and I will answer within one month. If you are unhappy with the answer, you can complain to the Information Commissioner's Office at ico.org.uk.

Photographs from your session

How your photographs may be used, for example in my portfolio or on social media, is agreed with you as part of your booking and is not covered by this website policy.

Changes to this policy

If the way the site handles data changes, this page is updated and the date at the top changes with it.