Privacy & Cookie Policy

How I handle your information

Last updated 3 September 2026

This policy explains what personal information I collect through this website, why I collect it, and what I do with it. It also explains the cookies this site uses and how you control them.

Who I am

Andy Dufton Photography is run by Andy Dufton, a wedding and portrait photographer based in York, North Yorkshire. I am the data controller for the information described here.

Information I collect through this website

The only information you actively give me through this site is what you type into the enquiry form:

  • Your first and last name
  • Your email address
  • Your phone number (optional)
  • The type of enquiry, and your message

I use this solely to reply to you and to discuss photographing your wedding or session. I do not use it for marketing lists, and I do not sell or share it with anyone for their own purposes. The lawful basis is my legitimate interest in responding to people who contact me, and — where we go on to work together — performance of our contract.

Enquiries are delivered to my inbox by email. This website does not keep a database of enquiries.

Information collected automatically

This site is hosted by Vercel. Like any web host, their servers record technical details of each request — such as your IP address, browser type and the page requested — to serve the site and keep it secure. If you accept analytics cookies (see below), Google Analytics also records how the site is used.

Cookies

No cookies are set when you first arrive. Nothing analytics-related loads on this site unless you choose “Accept” on the cookie banner.

If you accept, Google Analytics 4 sets the following cookies to measure how many people visit the site and which pages they look at. It does not tell me who you are.

  • _ga — distinguishes one browser from another. Expires after about two years.
  • _ga_<property id> — keeps track of a visit. Expires after about two years.

Google acts as my processor for this, and the data may be processed outside the UK under the safeguards Google puts in place. Google’s own privacy information is at policies.google.com/privacy.

Your accept-or-decline choice is remembered in your browser’s local storage rather than in a cookie, so declining leaves no cookie behind at all.

Changing your mind

You can change your cookie choice whenever you like, and withdrawing is as easy as giving. If you decline after previously accepting, the Google Analytics cookies are removed from your browser.

Things this site deliberately does not do

  • Fonts are served from this website, not from Google. Loading a page sends no request to Google’s font servers.
  • The homepage video is a link to YouTube, not an embedded player, so YouTube sets nothing in your browser unless you click it and go there.
  • There are no accounts, no payments and no advertising or tracking pixels on this site.

Who else may see your information

  • Vercel — website hosting.
  • Resend — delivers the enquiry form to my inbox.
  • Google — analytics, only if you accept cookies.
  • Aposlo Studios Ltd — builds and maintains this website for me, and may see enquiry emails in the course of supporting the contact form.

Each of these acts on my instructions. None of them use your information for their own purposes.

Your photographs

If you book me, the photographs I take of you are personal information too. I use a selection of images from weddings and sessions in my portfolio — on this website, in printed samples and on social media — where you have agreed to that in our booking paperwork. If you would rather I did not, or you change your mind later, tell me and I will take them down.

How long I keep things

Enquiries that do not lead to a booking are kept in my email while they are useful and then deleted. Where we work together, I keep booking records and your images for as long as I need them for the contract, my accounts and my portfolio.

Your rights

Under UK data protection law you can ask me for a copy of the information I hold about you, ask me to correct it or delete it, object to how I am using it, or ask for it in a portable form. Email me and I will deal with it.

If you are unhappy with how I have handled your information you can complain to the Information Commissioner’s Office at ico.org.uk.

Changes to this policy

If this policy changes I will update it here and change the date at the top of the page.