top of page

privacy policy

Introduction

​

Roots & Tales (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website Roots & Tales (the “Website”), interact with us, or use our services.

​

We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using this Website, you agree to the collection and use of information in accordance with this policy.

​

Who we are

​

Roots & Tales is a UK-based creative photography business offering 1:1 and group services.

Data Controller: Holly Shepherd, Founder of Roots & Tales (info@rootsandtales.co.uk)

​

The data we collect​

​

We may collect, use, store and transfer different kinds of personal data, including:

​

a) Information you provide directly

  • Name

  • Email address

  • Phone number (if provided)

  • Any details you submit via contact forms, bookings, or email

​

b) Information collected automatically

  • IP address

  • Browser type and device information

  • Pages visited and time spent on the Website

​

c) Marketing and communications data

  • Your preferences in receiving marketing communications from us

 

Personal data means any information that can identify you directly or indirectly.

​

How we use your personal data

​

We will only use your personal data when the law allows us to. Most commonly, we use your data to:

​

  • Respond to enquiries or messages

  • Provide services, workshops, or bookings

  • Send updates or newsletters (if you opt in)

  • Improve the Website and user experience

  • Comply with legal obligations

​

We rely on the following lawful bases:

  • Consent (e.g. email marketing)

  • Contract (to deliver services you request)

  • Legitimate interests (to operate and improve our business)

​

Sharing your information

​

We do not sell your personal data. We may share your data with trusted third parties where necessary, including:

​

  • Website hosting providers

  • Email marketing platforms

  • Analytics providers (e.g. Google Analytics)

​

These providers only process your data on our instructions and must keep it secure.

We may also disclose your data if required by law.

​

Data security

​

We take appropriate technical and organisational measures to protect your personal data from loss, misuse, or unauthorised access. Access to your data is limited to those who have a genuine business need.

​

Data retention

​

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including legal or accounting requirements.

​

Your legal right

​

Under UK data protection laws, you have rights including:

​

  • The right to access your personal data

  • The right to correct inaccurate data

  • The right to request deletion

  • The right to restrict or object to processing

  • The right to data portability

  • The right to withdraw consent at any time

​

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

​

Cookies

​

Our Website uses cookies to distinguish you from other users and improve your experience. Cookies may include:

​

  • Essential cookies (site functionality)

  • Analytics cookies (understanding website usage)

  • Preference cookies

​

You can control cookies through your browser settings.

​

Third party links

​

Our Website may include links to third-party websites. We are not responsible for their privacy policies, and we encourage you to read them separately.

​

Changes to this policy

​

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last updated” date.

​

Contact us

​

If you have any questions about this Privacy Policy or how we handle your data, please contact Holly at Roots & Tales: info@rootsandtales.co.uk.

​

Last updated May 2026.

bottom of page