This privacy policy explains how Proof My Photos (“we”, “us”, “our”) handles personal data when you use our website and services.
Proof My Photos is operated by SECRET SERVICE LIMITED, a company registered in England and Wales under company number 12945794 . We are not registered for VAT. We help professional photographers publish portfolios, share client proofing galleries, and offer guests print and digital downloads. For platform account, billing and hosting matters we act as a data controller. Where a photographer uploads photographs of people, manages client or guest accounts, or collects delivery details for orders, that photographer is typically the controller of those personal data, and we act as their processor (or sub-processor) under UK GDPR.
Our usual lawful bases under UK GDPR are contract (providing the service you asked for), legitimate interests (securing and improving the platform in ways that do not override your rights), and legal obligation where records must be kept for tax or regulatory reasons.
Photographers are responsible for having a lawful basis to upload and share images that identify people (for example consent, contract or legitimate interests appropriate to the shoot). Guests and clients should treat shared galleries as private unless the photographer says otherwise. We process those images only to host, display, watermark (where configured), fulfil orders and support the photographer’s instructions.
We may share personal data with:
We do not sell personal data.
Some processors may store or access data outside the UK. Where that happens we will rely on an appropriate transfer mechanism (such as the UK International Data Transfer Agreement or adequacy regulations) once those arrangements are finalised with counsel.
We keep account and order records for as long as needed to provide the service and meet accounting or legal requirements. Photographers control gallery content and may delete images subject to outstanding orders or technical constraints. Closed accounts are removed or anonymised within a reasonable period after closure, except where we must retain records.
Under UK GDPR you may have rights to access, rectify, erase, restrict or object to processing, and to data portability. To exercise rights about platform account data, contact us via Contact. For images or guest/client data held in a studio gallery, contact the photographer first: they are usually the controller. You can also complain to the Information Commissioner’s Office.
See our Cookie policy. We currently use necessary cookies only.
Privacy questions for SECRET SERVICE LIMITED (company number 12945794), trading as Proof My Photos: use the contact page. This draft does not yet name a formal Data Protection Officer; update this section once DPO arrangements are confirmed with counsel.