Privacy Policy
Candid Studio
Last updated: 8th February 2026
Candid Studio (“I”, “my”, “me”, “we”) is committed to protecting your privacy and personal data. This policy explains how I collect, use, and protect your information when you visit my website or use our services.
1. Who I Am
Candid Studio is operated by:
Rebecca Lloyd
Trading as Candid Studio
Based in South Wales, UK
Email: hello@candidstudio.co.uk
Website: www.candidstudio.co.uk
I am the “data controller” for the purposes of UK data protection law.
2. What Information I Collect
I may collect and process the following personal information:
Information You Provide
When you contact us, book a session, or complete a form, you may provide:
- Name
- Email address
- Phone number
- Business name
- Website/social links
- Any information you include in messages or questionnaires
Automatically Collected Information
When you visit our website, I may collect:
- IP address
- Browser type
- Device information
- Pages visited
- Time spent on the site
This is collected using cookies and analytics tools.
3. How I Use Your Information
I use your personal data to:
- Respond to enquiries
- Provide our services
- Manage bookings and payments
- Send relevant emails about your enquiry or work with us
- Improve our website and services
- Comply with legal obligations
I will never sell your data.
4. Lawful Basis for Processing
Under UK GDPR, I rely on the following legal bases:
- Contract – to provide services you’ve booked
- Legitimate interests – to run and improve our business
- Consent – where you’ve opted in to marketing
- Legal obligation – where required by law
5. Marketing Communications
I will only send you marketing emails if:
- You have opted in, or
- You have previously enquired about our services and have not opted out
You can unsubscribe at any time using the link in our emails or by contacting us.
6. How I Store and Protect Your Data
Your data is stored securely using trusted third-party systems and password-protected devices.
I take appropriate technical and organisational measures to protect your information from unauthorised access, loss, or misuse.
7. How Long I Keep Your Data
I keep your personal data only for as long as necessary:
- Enquiry data: up to 24 months
- Client records: up to 7 years (for legal and tax purposes)
- Marketing data: until you unsubscribe
After this, data is securely deleted.
8. Sharing Your Data
I may share your information with trusted third parties where necessary, including:
- Payment providers
- Booking systems
- Email marketing platforms
- Website hosting providers
- Cloud storage services
These providers only process data on our instructions and must meet GDPR standards.
I do not share your data for marketing purposes.
9. Cookies
Our website uses cookies to improve your experience and analyse website traffic.
Cookies may collect anonymous data such as:
- Pages visited
- Time on site
- Device type
You can manage cookies through your browser settings.
For more information, please see our Cookie Policy [if you have one].
10. Your Data Protection Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Restrict processing
- Object to processing
- Request data portability
- Withdraw consent
To exercise these rights, contact us at: [your email]
11. Third-Party Links
Our website may contain links to other websites.
I am not responsible for the privacy practices of third-party sites. Please review their policies separately.
12. Photography & Client Work
If you book photography or creative services with us, additional terms regarding image usage and confidentiality may apply. These will be outlined in your contract.
13. Changes to This Policy
I may update this Privacy Policy from time to time.
Any changes will be posted on this page with an updated “last updated” date.
14. Contact Us
If you have any questions about this Privacy Policy or how your data is handled, please contact:
Rebecca Lloyd – Candid Studio
Email: hello@candidstudio.co.uk