Privacy Policy

Privacy Policy (Switch Photography / Switch Gone Dark)

Last updated: 18th August 2026



1) Who we are


Switch Photography (also trading as Switch Gone Dark) is a photography business based in Hampshire, South East England (UK).

For data protection purposes, we are the data controller for personal data collected through this website and our services.


Contact details

  • Name: Tom Stallybrass “Tom”, also known as “Switch”
  • Email: Switchgonedark@gmail.com
  • Website: switchphotography.co.uk


2) What personal data do we collect?


Depending on how you interact with us, we may collect:


Enquiry & booking details

  • Name, email address, phone number (if provided)
  • Your message/enquiry details (shoot type, preferred dates, location ideas, mood/vibe)
  • Age confirmation (e.g., whether you are 18+ for boudoir enquiries)


Session & client management

  • Appointment details, communications, and planning notes
  • Invoicing/receipt information (and any required accounting records)
  • Contract forms, model release permissions (where applicable)


Photos & galleries

  • Photographs and/or video of you (personal data, because you can be identified)
  • Image selections/favourites, download activity, and gallery comments (if you use an online gallery)


Website usage data (cookies/analytics)

  • Basic technical data like IP address, device/browser type, pages visited, and referral source (depending on your cookie choices)


3) How we collect your data


We collect data when you:

  • Submit the contact/booking form on this website
  • Contact us by email, phone, or social media
  • Book and attend a session
  • View or interact with an online gallery
  • Use our website (via cookies and similar technologies)


4) How we use your data and our lawful bases


UK GDPR requires a lawful basis for processing. Common bases include contract, legitimate interests, and consent.


We use your data for:


A) Responding to enquiries and managing bookings

  • To reply to you, confirm availability, and plan your session.

Lawful basis: Legitimate interests (running our business and responding to requests) and/or steps prior to entering a contract.


B) Delivering photography services

  • To provide the shoot, edit images, deliver galleries, and provide products/services you request

Lawful basis: Contract (to provide the service you book).


C) Admin, accounting, and record-keeping

  • Invoicing, receipts, bookkeeping, handling complaints, and keeping business records

Lawful basis: Legal obligation (where required) and/or legitimate interests.


D) Marketing (only where allowed)

  • Sending updates/offers only if you’ve opted in (or where permitted by law)
  • Showing portfolio work only with your permission (e.g., model release / written consent)

Lawful basis: Consent (especially for promotional use of identifiable images and marketing messages).


E) Improving the website and services

  • Understanding what pages people use, improving content and performance (depending on cookie choices)

Lawful basis: Legitimate interests and/or consent for non-essential cookies.


5) Boudoir sessions and sensitive content

Boudoir imagery is personal and private. We treat it with heightened care.

  • Boudoir sessions are strictly 18+.
  • We do not publish identifiable client images without your explicit permission (typically via a written model release).
  • You can set boundaries on poses, styling, and usage at any time.


6) Who do we share your data with

We only share data where necessary to run the website and deliver services. This may include:

  • Website & gallery hosting platform: Pixieset (hosting, contact forms, client galleries)
  • Email provider: Google Workspace (for email communications)
  • Payment providers: Stripe / PayPal / Square / Bank transfer provider
  • Professional services: accountants, insurers, legal advisers (where needed)
  • Assistants/contractors: (e.g., second shooters/retouchers) only if required and under confidentiality

We do not sell your personal data.


7) International transfers

Some service providers may process data outside the UK. Where personal data is transferred internationally, we take steps to ensure appropriate safeguards are in place (for example, adequacy regulations or approved contractual protections).


8) How long do we keep your data (retention)

We keep personal data only as long as needed for the purposes we collected it for, including legal, accounting, or reporting requirements. Typical retention periods may include:

  • Enquiries that do not become bookings: up to 24 months, after which they are deleted unless they need to be kept for a legal or dispute-related reason.
  • Client bookings & admin records: up to 3 years (often aligned with accounting/tax requirements)
  • Client galleries/images: as agreed with you, or until you request deletion (subject to contractual/legal limits)

If you want specific retention periods, we can tailor these to your workflow.


9) How we protect your data

We use appropriate technical and organisational measures such as:

  • Account security and access controls
  • Trusted service providers
  • Careful handling of private images and client galleries
  • No online system is 100% secure, but we work to protect your information.


10) Your data protection rights

You have rights under data protection law, including (in many cases):

  • The right to be informed about how your data is used
  • The right to request access to your personal data (a “subject access request”)
  • The right to request correction of inaccurate data
  • The right to request deletion in certain circumstances
  • The right to object to certain processing (e.g., some marketing)
  • The right to withdraw consent at any time (where consent is the basis)

To exercise your rights, email Switchgonedark@gmail.com


Complaints: If you’re unhappy with how we handle your data, you can complain to the UK supervisory authority, the Information Commissioner’s Office (ICO).


11) Cookies and similar technologies

We may use cookies and similar technologies for essential site functions and (if enabled) analytics/performance. You can manage your preferences via the cookie settings/banner.


12) Children’s privacy

This website and our boudoir services are not intended for children, and boudoir enquiries must be 18+. If you believe a child has provided personal data, contact us and we will take appropriate steps.


13) Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the “Last updated” date.