Privacy Notice

James Morris Photography
Version: 26 October 2026
Contact: hello@jamesmorris.uk

1. Who we are

James Morris Photography provides architectural and related commercial photography services. James Morris is the controller of personal data handled for the business. For privacy enquiries or to exercise your rights, email hello@jamesmorris.uk.

2. What information we collect

We may hold names, job titles, business and personal contact details, correspondence, quotations, contracts, invoices and payment records; project and property addresses; access instructions; signed property releases, agreed restrictions and evidence of permissions; and photographs or related project information that identify individuals. Website visits may generate technical information and analytics data, subject to applicable cookie choices. We do not intentionally collect more personal information than is needed for these purposes.

3. Where information comes from

Information may come directly from you, commissioning clients, architects, property owners or their representatives, professional introductions, publicly available business websites and directories, and interactions with our website. Where information is supplied by someone else, we aim to provide appropriate privacy information where required.

4. Purposes and lawful bases

We use personal data to:

• respond to enquiries, quote for and deliver commissions, and administer licences, invoices and accounts (contract where applicable, legitimate interests and legal obligation);
• arrange property access and document permissions, restrictions and publication arrangements (legitimate interests and, where applicable, contract);
• retain evidence and manage or defend legal claims (legitimate interests and legal obligation where applicable);
• maintain professional relationships and conduct proportionate business-to-business outreach (legitimate interests, subject to PECR and opt-out rights); and
• analyse website use where permitted (consent for non-essential cookies and related analytics where required).

We assess the appropriate lawful basis for each processing activity. Consent to use cookies is separate from contractual permission in a property release.

5. Photographs and property releases

A photograph of a building is not necessarily personal data. Where images or associated records identify people, we assess privacy and data-protection obligations. Signed releases and related correspondence may be retained to demonstrate the scope and duration of permission and protect the legitimate interests of the photographer, commissioning client and authorised licensees. Signing a property release does not itself mean consenting to direct marketing. Photographic copyright and usage permissions are governed separately by the relevant photographic agreement and licence.

6. Marketing and professional contacts

We may contact relevant professional organisations and business contacts about architectural photography services where lawful. We do not assume that all email marketing is permitted simply because an address is publicly listed: the rules differ for corporate subscribers and sole traders or partnerships. You can object to direct marketing at any time by emailing hello@jamesmorris.uk; we will stop such marketing and may retain minimal suppression details to honour your request.

7. Website, analytics and cookies

Our website uses essential cookies where necessary for its operation and optional analytics cookies to help us understand how visitors use the site. Analytics cookies are only enabled when you accept them. You can accept or reject optional cookies through our cookie banner and change your preferences at any time using the cookie settings control on the website. For further detail, see our Privacy & cookies information.

8. Storage and sharing of personal information

Personal information is held in secure electronic and physical records for the purposes of operating James Morris Photography. We use external service providers for website hosting, business email, cloud storage and website analytics. These providers may process personal information on our behalf where necessary to deliver their services. We do not sell personal information. We only disclose it where necessary for legitimate business purposes, to meet legal obligations or as otherwise permitted by law.

9. International transfers

We use established cloud-based service providers to store and process personal information. Some information may be stored or processed outside the UK. These providers maintain arrangements intended to protect personal information in accordance with applicable data protection laws.

10. Retention

We retain personal data only as long as reasonably necessary for the relevant purpose. Accounting and transaction records are generally kept for at least six years where required by tax and accounting obligations. Project records, releases, licences and correspondence may be retained longer where necessary to evidence continuing permissions, contractual rights and potential claims, subject to periodic review. Marketing contacts are reviewed and removed or suppressed when no longer justified. Analytics retention is governed by the configured service settings. No fixed period is promised for every record type.

11. Security

We use proportionate technical and organisational safeguards for our devices, cloud accounts, local storage and paper records, including access controls and appropriate backup practices. No method of storage or transmission can be guaranteed completely secure. We will assess and report personal-data breaches where required by law.

12. Your rights

Depending on the circumstances, you may have rights to access, rectify or erase personal data; restrict or object to processing; data portability; and to withdraw consent where processing relies on consent. These rights are not absolute, particularly where records must be retained to comply with law or establish or defend legal claims. We normally respond within one month, subject to lawful extensions. You may complain to the UK Information Commissioner’s Office, although we welcome the opportunity to address concerns first.

13. Changes and contact

We may update this notice as our services, technology and legal obligations change. The current version should be available at jamesmorris.uk. Privacy enquiries: hello@jamesmorris.uk.

Last updated: 26 October 2026