Privacy Policy

Last updated: 6th June 2025

1. Who We Are

Capture For All (“we”, “our”, “us”) is a UK-based school photography company providing photography services to schools, pupils, and their families.

Our website is: www.captureforall.co.uk

We are committed to protecting the privacy and security of personal data. This notice explains how we collect, use, and protect your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

We may collect and process the following personal data:

• Pupil photographs
• Pupil names and class information
• Parent or guardian contact details (e.g. name, email address, delivery address, phone number)
• School staff names (for coordination purposes)
• Order and transaction data

3. How We Collect Data

We collect personal data in the following ways:

• Directly from schools during photo day coordination
• Directly from parents/guardians through our website when placing an order
• Automatically, through cookies and tracking tools when you visit our website

4. Why We Process Your Data

We process your data for the following purposes:

• To take, produce and deliver school photographs
• To fulfil photo orders made by parents/guardians
• For internal business and performance analysis

5. Lawful Basis for Processing

Our lawful basis under the UK GDPR is:

Consent – We rely on explicit parental/guardian consent given to the school to take and process pupil photographs and related data.

You may withdraw your consent at any time by contacting your school, our us at hello@captureforall.co.uk

6. Sharing Your Data

We may share limited personal data with trusted third-party service providers below, solely for the purposes described above:

• Printing labs (to produce photographs)
• Delivery services (to fulfil orders)
• Payment processors (to process transactions securely)
• CRM and analytics platforms (to manage customer relationships and improve our service)

We ensure that all third parties meet the required data protection and security standards.

7. Data Retention

We retain personal data for up to 7 years to allow for order records, returns, customer support, and legal compliance.

After this period, personal data is securely deleted or anonymised.

8. Security of Your Data

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption during transmission and storage
• Access controls and secure systems
• Staff training on data protection

9. International Transfers

We do not transfer any personal data outside the UK or the European Economic Area (EEA).

10. Cookies and Website Tracking

Our website uses cookies and third-party tracking technologies to enhance user experience and analyse website usage. You will be asked to provide consent for cookies upon visiting our website.

For more information, please see our [Cookie Policy] (insert link).

11. Your Rights

Under the UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data (right to be forgotten)
• Withdraw consent at any time
• Object to or restrict certain types of processing
• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, please email: hello@captureforall.co.uk

12. ICO Registration

We are currently in the process of registering with the UK Information Commissioner’s Office (ICO).

13. Contact Us

If you have any questions about this privacy notice or how we handle your data, please contact us at:

Email: hello@captureforall.co.uk
Website: www.captureforall.co.uk