Privacy Policy

Boudoir by Sarah Tate Photography

Last updated: September 2026

Who we are

Boudoir by Sarah Tate Photography (“we”, “us”, “our”) is a boudoir and makeover photography studio based at The Old Barn, Hailsham Road, Heathfield, East Sussex, TN21 8AD.

This policy applies to our websites: www.boudoirbysarahtatephotography.co.uk and www.sarahtate.co.uk.

You can contact us by email at sarah@sarahtate.co.uk or by phone on 07967 509907. We are the data controller for the personal information described in this policy.

The information we collect

We collect personal information in the following ways:

  • Enquiry and contact forms — your name, email address, phone number and the details of your message when you get in touch with us.

  • Bookings — when you book a session through our online scheduling system (Acuity Scheduling), we collect your name, contact details and appointment information.

  • Photographs and images — the images we take of you during your session, including boudoir and intimate photography.

  • Payment information — when you purchase a session, product or gift voucher, payment is processed securely by PayPal or our card payment provider. We do not see or store your full card details.

  • Testimonials — if you choose to share feedback or a testimonial, we may store this and, with your separate agreement, publish it.

  • Website usage data — our website, hosted on Squarespace, uses cookies and analytics to understand how visitors use the site. See "Cookies" below.

How we use your photographs

We know the images we take are personal and sensitive, so we treat them with particular care:

  • Your images are used to produce the products, prints, albums or digital galleries you have ordered as part of your session.

  • We will only use your images in our portfolio, on our website, on social media, or in marketing materials if you have given us separate, explicit written consent to do so, via a model release form which you sign at your ordering session.

  • Where you have consented to social media use, your images may be shared with our external social media management company, who post and manage content on our behalf. They only receive the specific images you have consented to, for this purpose.

  • You can withdraw this consent at any time by contacting us, and we will remove your images from public use as soon as reasonably possible.

  • Your images are stored securely and are only accessible to Sarah Tate and anyone assisting with your session who is bound by confidentiality.

  • We do not sell, license or otherwise share your images with third parties for their own marketing purposes.

Why we process your information

We rely on the following legal bases under UK GDPR:

  • Contract — to arrange and deliver the session, products or vouchers you have booked or purchased.

  • Consent — for using your images in marketing.

  • Legitimate interests — to respond to enquiries, maintain business records, and keep our website secure and functioning.

Who we share your information with

We use a small number of trusted service providers to run our business, each of whom only receives the information they need to perform their service:

  • Squarespace — our website host and booking form provider.

  • Acuity Scheduling — our online appointment booking system.

  • PayPal and our card payment provider — to process payments securely.

  • Our professional photo lab — who print and produce your photo albums, so we share the specific images needed to fulfil your order with them.

  • Our social media management company — who manage our social media accounts on our behalf, and only use images you have separately given consent to be used on social media.

We do not sell your personal information to anyone.

Cookies

Our website uses cookies for essential site functionality and analytics, to help us understand how visitors use the site and improve it. You can control cookies through your browser settings; blocking cookies may affect how parts of the site work.

How long we keep your information

  • Enquiry and contact form details: kept securely on our booking system.

  • Booking and payment records: kept as required for accounting and tax purposes (typically 6 years).

  • Photographs: session images are kept for 3 months, after which they are securely deleted, unless you have given consent for us to keep and use specific images in our portfolio or marketing (see "How we use your photographs" above).

Keeping your information secure

We take appropriate technical and organisational measures to protect your personal information and images against unauthorised access, loss, or misuse, including secure storage and limited access to anyone outside Sarah Tate Photography.

Your rights

Under UK GDPR, you have the right to:

  • Ask us what personal information we hold about you, and request a copy of it.

  • Ask us to correct inaccurate information.

  • Ask us to delete your information or images, including withdrawing consent for marketing use at any time.

  • Ask us to restrict or object to certain processing.

  • Request that we transfer your information to another organisation, where technically possible.

To exercise any of these rights, contact us at sarah@sarahtate.co.uk. If you are unhappy with how we have handled your information, you also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

Our services and age

Our photography services are intended for adults. We do not knowingly collect personal information from, or photograph, anyone under the age of 18 in the context of our boudoir services.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. The "Last updated" date at the top of this page shows when it was last revised.

Contact us

If you have any questions about this policy or how we handle your information, please contact Sarah at sarah@sarahtate.co.uk or 07967 509907.