In Motion Photography

Privacy Policy

IN MOTION PHOTOGRAPHY

Midlands-Based Sports & Motorsport Photography

PRIVACY POLICY

Last updated: 2026

1. Who We Are

In Motion Photography is a sole trader photography business based in the Midlands, UK, specialising in sports and motorsport photography. Our website is located at inmotionphotography89.mypixieset.com ('the Website'). For the purposes of UK data protection law, the Photographer is the data controller in respect of your personal data.

For any data protection queries, please contact us via the contact form on our Website.

2. What Data We Collect

We may collect and process the following personal data about you:

Name and email address — when you make a purchase, submit an enquiry, or contact us.
Billing address and payment information — collected by our payment processor (Pixieset / Stripe) when you complete a purchase. We do not store your full card details ourselves.
Order history — details of images purchased and download activity.
Communications — any messages you send us via contact forms or email.
Usage data — standard website analytics such as pages visited, time on site, and device/browser type, collected via cookies or third-party analytics tools embedded in the Pixieset platform.

3. How We Use Your Data

We use your personal data for the following purposes:

To process and fulfil your order, including delivering your digital download.
To send you order confirmation and download link emails.
To respond to enquiries or customer service requests.
To comply with our legal and tax obligations.
To improve our website and understand how visitors use it.

We will only use your data for the purposes for which it was collected. We will not use your data for automated decision-making or profiling.

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we rely on the following legal bases for processing your personal data:

Contract — processing is necessary to fulfil your purchase or respond to a pre-contractual request.
Legal obligation — where processing is required to comply with a legal duty (e.g. tax records).
Legitimate interests — for website analytics and improving our services, where this does not override your rights and interests.
Consent — where you have explicitly opted in, such as signing up to receive updates or marketing emails (if applicable).

5. Marketing Communications

We will only send you marketing or promotional communications if you have given your explicit consent to receive them. You may withdraw your consent at any time by contacting us or clicking the unsubscribe link in any marketing email. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

6. Sharing Your Data

We do not sell your personal data to third parties. We may share your data with the following third parties only to the extent necessary to operate our business:

Pixieset — our website, gallery, and store platform, which processes order data, payments, and download delivery on our behalf. Pixieset acts as a data processor. You can view Pixieset's privacy policy at pixieset.com/privacy.
Stripe — payment processing. Card details are handled directly by Stripe and are not accessible to us. See stripe.com/gb/privacy.
HMRC and other regulatory bodies — where we are legally required to share information.

All third parties we work with are required to handle your data securely and in accordance with applicable data protection law.

7. International Transfers

Some of our third-party service providers (including Pixieset) may process data outside the UK or European Economic Area. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements, such as the use of standard contractual clauses or transfers to countries with an adequacy decision.

8. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this policy, or as required by law. Specifically:

Order and transaction records are retained for a minimum of 6 years in accordance with UK tax and accounting obligations.
Enquiry and communication records are retained for up to 2 years unless an ongoing relationship requires longer retention.
Marketing consent records are retained until consent is withdrawn and for a reasonable period thereafter.

When data is no longer needed, it is securely deleted or anonymised.

9. Your Rights

Under UK data protection law, you have the following rights in relation to your personal data:

Right of access — you can request a copy of the personal data we hold about you.
Right to rectification — you can ask us to correct inaccurate or incomplete data.
Right to erasure — you can ask us to delete your data in certain circumstances.
Right to restrict processing — you can ask us to limit how we use your data.
Right to data portability — you can request your data in a commonly used, machine-readable format.
Right to object — you can object to processing based on legitimate interests or for direct marketing.
Right to withdraw consent — where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us via the contact form on our Website. We will respond within one month. There is no charge for making a request. We may need to verify your identity before processing your request.

10. Cookies

Our Website is hosted on Pixieset, which may use cookies and similar tracking technologies to operate the site and gather analytics. Cookies are small text files stored on your device. Some cookies are essential for the site to function; others help us understand how visitors use the site.

By continuing to use the Website, you consent to the use of cookies in accordance with this policy. You can control or disable cookies through your browser settings, though this may affect the functionality of the Website.

11. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Payments are processed securely via Stripe and are encrypted using SSL/TLS. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

12. Children's Privacy

Our Website and services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated 'Last updated' date. We encourage you to review this policy periodically. Continued use of our Website following any changes constitutes acceptance of the updated policy.

14. Complaints

If you have a concern about how we handle your personal data and we are unable to resolve it to your satisfaction, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)

Website: ico.org.uk | Helpline: 0303 123 1113

We would, however, appreciate the opportunity to address your concern directly before you contact the ICO. Please reach out to us first via our Website.