Business Name: João Abreu Photo
Last Updated: 9 March 2026

João Abreu Photo (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website,
contact us, purchase products, or use our photography services.

This policy is designed to comply with the UK General Data Protection Regulation (UK GDPR)
and the Data Protection Act 2018.

By using our website or services, you agree to the practices described in this policy.

1. Who We Are

João Abreu Photo is the data controller responsible for your personal data.

Business Name: João Abreu Photo
Address: London, United Kingdom
Email: info@joaoabreu.co.uk
Phone: +44 7577301988
Website: https://joaoabreu.co.uk/contact/

If you have any questions about this Privacy Policy or your personal data, please contact us using the details above.

2. Personal Data We Collect

We may collect and process different types of personal data depending on how you interact with us.

Information You Provide

When you contact us, book services, or make a purchase, we may collect:

• Full name
• Email address
• Phone number
• Billing address
• Shipping address
• Event details (e.g., wedding date, location, session details)
• Account login information (if applicable)
• Payment and transaction details
• Messages or inquiries sent through the website

Photography and Media Data

As a photography business, we may collect and process:

• Photographs or images taken during sessions or events
• Event-related information provided by clients
• Identifiable images of individuals appearing in photographs

Automatically Collected Data

When visiting our website, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Pages visited and navigation paths
• Time and date of access
• Referring website

3. How We Use Your Information

We use your personal data for the following purposes:

• To respond to inquiries and customer support requests
• To manage bookings for photography services
• To process and deliver e-commerce orders
• To process payments and manage transactions
• To deliver digital or physical photography products
• To manage client accounts
• To improve our website and services
• To comply with legal and tax obligations
• To detect fraud or misuse of our website
• To send marketing communications where permitted

4. Legal Basis for Processing

Under UK GDPR, we process personal data based on one or more of the following legal bases:

Contractual Necessity

Processing required to provide photography services or fulfil orders placed through our website.

Legitimate Interests

To operate and improve our business, maintain our portfolio, manage client relationships, and ensure website security.

Consent

Where you have given permission for marketing emails or certain uses of photographs.

Legal Obligations

To comply with legal, financial, or regulatory requirements.

5. Use of Photographs and Portfolio

As part of our photography services, we may use selected images for:

• Portfolio display on our website
• Social media promotion
• Marketing materials
• Professional showcases

Where appropriate, we will request client consent before publicly displaying photographs.
Clients may request that certain images not be used for promotional purposes by contacting us.

6. E-Commerce and Payment Processing

When you make a purchase through our website, we may collect information necessary to process your order, including:

• Billing and shipping information
• Transaction details
• Purchase history

Payments are typically processed through secure third-party payment providers.
We do not store full payment card details on our servers.

These providers process your data according to their own privacy policies and applicable data protection laws.

7. How We Share Your Information

We may share your personal data with trusted third parties when necessary to operate our business, including:

• Payment processors
• Website hosting providers
• Cloud storage providers
• Order fulfilment services
• Photo delivery platforms
• Professional advisers (accountants, legal advisors)
• Government authorities when legally required

All third parties are required to process personal data securely and in accordance with data protection laws.

8. International Data Transfers

Some of our service providers may operate outside the United Kingdom.
When this occurs, we ensure appropriate safeguards are in place, including:

• UK-approved Standard Contractual Clauses
• Transfers to countries with adequate data protection standards

9. Data Retention

We retain personal data only for as long as necessary for business and legal purposes.

Typical retention periods may include:

• Customer orders and invoices: up to 6 years
• Client contact details: up to 6 years after the last interaction
• Photographs and digital files: retained for archival and portfolio purposes unless otherwise agreed

10. Your Data Protection Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Restrict processing of your data
• Object to processing based on legitimate interests
• Request transfer of your data to another service
• Withdraw consent at any time

You also have the right to file a complaint with the Information Commissioner’s Office (ICO):

https://ico.org.uk

11. Data Security

We implement appropriate technical and organisational security measures to protect personal data from:

• Unauthorised access
• Loss or theft
• Misuse or disclosure

However, no method of online transmission can be guaranteed to be completely secure.

12. Cookies

Our website may use cookies and similar technologies to:

• Ensure proper website functionality
• Analyse website traffic
• Improve user experience
• Support e-commerce features such as shopping carts

You can manage cookie preferences through your browser settings.

A detailed Cookie Policy may also be provided on our website.

13. Third-Party Links

Our website may contain links to third-party websites or services.
We are not responsible for the privacy practices or content of those websites.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically.
When updates occur, the revised policy will be posted on this page with the updated revision date.

15. Contact Information

João Abreu Photo
London, United Kingdom
Email: info@joaoabreu.co.uk
Phone: +44 7577301988
Contact Page:
https://joaoabreu.co.uk/contact/