Privacy notice
What this site collects, why, how long it is kept and how you ask for it to be deleted.
Updated 08 September 2026
Who is responsible
London Royal Photography, a photography studio based in London, is the controller of personal data processed through this site under the UK GDPR and the Data Protection Act 2018.
What is collected
From the contact form: a name or working name, an email address, and whatever you write in the message. Nothing else is required. Visit statistics are anonymous and aggregated — this site uses no tracking cookies and therefore shows no consent banner.
Photographs
Client images are published only with specific, written, current permission. Every published file has an associated release record carrying its scope of use and any end date. Once permission is withdrawn, the image comes down. All delivered files have their metadata stripped, GPS coordinates included.
How long
Contact form messages: 24 months. Original session files: 90 days after delivery, unless you ask otherwise. Image release records: for as long as the image is published, and for 6 years afterwards, as evidence of consent.
Your rights
You may request access, correction, erasure, restriction or portability of your data, and withdraw consent at any time. Requests are answered within 30 days — and image removal requests within 48 hours. If you are not satisfied with the response, you may complain to the Information Commissioner's Office (ico.org.uk).
Under review
This document is a working version, drafted from current legislation, and will be reviewed by a solicitor specialising in data protection before the site leaves testing.
Image and testimonial authorisations
How you authorise
When the studio asks to show your photographs or your words, you receive a private link. You choose each use separately, sign by typing your name and receive a receipt by e-mail. The studio receives the same receipt.
What the website stores
Only the receipt number, your initial, the items, the uses, the dates and a fingerprint of the receipt. Your name and your e-mail are used once to write and send the receipt, and are not stored on the website. The receipt records the time, network address and browser used to sign, as evidence.
Proof and retention
The fingerprint is time-stamped by an independent timestamping authority, which receives the fingerprint only. The studio keeps the receipt for as long as the authorisation is in use and for six years afterwards, the period for legal claims in England and Wales.
Withdrawing
The same link lets you withdraw at any time with one tap. What was covered leaves the website immediately. You can also write to the studio.
Cookies and measurement
What is strictly necessary
Your cookie choice is kept in this browser (key lrp_consent) for a year. It is the only thing the site stores on your device before any permission.
The booking page loads the Cal.com calendar, the service you are asking for by opening it.
With your permission
If you accept, the site loads Google Tag Manager and Google Analytics 4, which set the cookies _ga, _ga_* and _gcl_au to recognise the same browser between visits. Google keeps this data for 14 months. Google Signals and ad personalisation are off.
If the studio advertises on Google, conversions are measured from these same events, with no extra code.
Meta (Facebook and Instagram) is not in use. If it is ever activated, that will appear here and in the choice banner before anything is sent.
Without permission
The site counts visits per page and day on the studio's own server, with no cookie and no identifier. The network address is used at that moment, inside the server, only to identify the country, and then discarded; the country database is local (IP Geolocation by DB-IP) and nothing is sent to third parties. The device type (phone, tablet or computer) is added to the day's total. Only totals exist: per day, page, language, source, country and device type.
To change your choice
Use the "Cookies" link in the footer or the button below. Withdrawing permission deletes the Google cookies and reloads the page.
A working version, drafted from current legislation. It will be reviewed by a solicitor specialising in data protection before launch.