Robert Salisbury Photography
Last updated: 10 October 2026
WHO IS RESPONSIBLE FOR YOUR INFORMATION
Robert Salisbury operates Robert Salisbury Photography as a sole trader and is responsible for the personal information collected through https://robertsalisbury.photography.
For privacy enquiries or requests, email robertsalisburyphotography@gmail.com.
INFORMATION COLLECTED
When you place an order, the shop collects your name, email address, billing and delivery addresses, order details, and any telephone number or additional information you provide. Payment status and transaction references are also recorded.
If you contact me, I receive the contact details and message you provide. If you create a customer account, the website stores the information needed to manage that account.
Technical information, including IP addresses and browser details, may be processed to operate the website, protect it against misuse, and generate visitor statistics.
WHY YOUR INFORMATION IS USED
Your information is used to process and deliver orders, provide customer support, handle refunds and enquiries, and manage customer accounts. The legal basis is fulfilling a contract with you, or taking steps you request before entering into one.
Records needed for tax and accounting are processed to meet legal obligations. Website security, fraud prevention, understanding how the site is used, and responding to general enquiries rely on legitimate interests in running and protecting this small photography business. Where consent is required for an optional service, you can withdraw it by contacting me.
The contact and address details requested at checkout are needed to fulfil your order. Without them, I cannot complete the purchase or deliver your print.
PAYMENTS
Payments are processed through WooPayments, which works with Stripe. Information needed to process and support your payment, including billing and transaction details, is shared with the payment providers. The website does not store your full card number or card security code.
Payment providers may use automated checks to identify suspicious transactions and may decline a payment. Contact me if you believe a payment has been declined incorrectly.
Further information:
Automattic privacy policy: https://automattic.com/privacy/
Stripe privacy policy: https://stripe.com/gb/privacy
HOSTING AND SERVICE PROVIDERS
The website is hosted by Krystal. Website and order information is stored as part of the site’s hosting and database. Krystal’s privacy policy is available at https://krystal.io/legal/privacy-policy.
Customer correspondence is handled through Gmail. Website backups are made using UpdraftPlus and stored in Google Drive; these backups may contain order records, customer account information, and other personal information held by the website.
Google therefore processes information associated with email correspondence and backup storage. Its privacy policy explains how it handles this information:
https://policies.google.com/privacy
Information may also be handled by delivery companies and professional advisers where needed to deliver your purchase or meet legal obligations. Information is shared for the relevant delivery, support, or professional service.
Google and the payment providers operate internationally and may process information outside the UK, including in the United States. Their privacy policies above explain their international processing and transfer safeguards, including applicable adequacy arrangements and standard contractual clauses. Contact me if you need further information about the safeguards relevant to your information.
WEBSITE STATISTICS
This website uses Independent Analytics to understand which pages people visit and how they reach the site. Its statistics are stored in the website’s WordPress database. It does not use analytics cookies.
Independent Analytics processes an IP address to derive approximate location and creates a hashed visitor identifier using technical information. It does not retain the original IP address in its analytics records.
COOKIES
The shop uses cookies and similar technologies for functions such as remembering your basket, maintaining sessions, and managing logins. Payment services may use additional technologies to process payments and prevent fraud.
You can manage cookies through your browser settings. Blocking cookies needed by the shop may prevent the basket, login, or checkout from working correctly.
WooCommerce’s standard basket cookies include woocommerce_cart_hash and woocommerce_items_in_cart, which last for the browser session, and wp_woocommerce_session_, which normally lasts for two days and connects your browser to your basket information. Which cookies are set depends on the shop features you use.
Stripe may set cookies such as __stripe_mid and __stripe_sid to help detect and prevent payment fraud. Its cookie policy provides more information about these technologies:
https://stripe.com/gb/legal/cookies-policy
WooCommerce cookie information:
https://woocommerce.com/document/woocommerce-cookies/
HOW LONG INFORMATION IS KEPT
Order and transaction records needed for tax are retained for at least five years after the 31 January Self Assessment submission deadline for the relevant tax year. Records may need to be kept longer where a return is filed late, HMRC is checking the records, or they are needed to resolve refunds, disputes, or legal claims. Enquiry correspondence is retained for as long as needed to respond and handle related follow-up. Correspondence that forms part of an order, complaint, or dispute is retained with the relevant records.
Account information is retained while an account remains active or is needed to provide the service. Personal information is kept only for as long as it is needed for the purposes described above; when those purposes and any applicable legal retention requirements have ended, it is deleted or anonymised. Database backups are scheduled daily, with the seven most recent backups retained. Website file backups are scheduled weekly, with the four most recent backups retained. Older backups are removed as new backups are created under these settings. Information deleted from the live website may remain in an existing backup until that backup is removed.
YOUR RIGHTS
Depending on the circumstances, you can request access to your personal information, correction of inaccurate information, deletion, restriction of its use, or a portable copy of information you have supplied.
You also have the right to object to processing based on legitimate interests. Where processing relies on consent, you can withdraw that consent without affecting earlier lawful processing.
Some information may need to be retained to meet legal obligations or deal with claims. To make a request, email robertsalisburyphotography@gmail.com. I may need to verify your identity before disclosing or changing personal information.
COMPLAINTS
Please contact me if you have concerns about how your information is handled. You may also complain to the UK’s Information Commissioner’s Office:
https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113.
CHANGES TO THIS POLICY
This policy will be updated when the website or its handling of personal information changes. The date above identifies the latest revision.