Last updated: 1 June 2026.
This privacy policy explains how Paul Aylin, trading as Aylin Photography (“I”, “me”, “my”) collects and uses your personal data through this website, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Who I am (data controller)
Paul Aylin, trading as Aylin Photography, is the data controller for personal data collected through this website.
Contact: paul@aylin.net
What data I collect
- Contact form — your name, email address, subject, and the content of your message.
- Technical data — my web host (Hostinger) and the site’s security/caching tools may automatically log basic technical information (such as IP address and browser type) to keep the site secure and running.
- (For print orders, I also collect order and delivery details and process payments through theprintspace and Stripe. For commissioned shoots, photos are delivered through Pixieset.)
How I use your data, and my lawful basis
- To respond to your enquiries sent via the contact form — lawful basis: my legitimate interest in replying to you, and/or taking steps at your request before entering a contract.
- To operate, secure and maintain the website — lawful basis: legitimate interests.
Who I share it with
I do not sell your personal data. I share it only with the service providers that help me run the site:
- Hostinger — web hosting; stores the website and its data.
How long I keep it
Enquiries and form submissions are kept only as long as needed to deal with your message and for a reasonable period afterwards, then deleted.
Your rights
Under UK data protection law you have the right to access, correct, delete, or restrict the processing of your personal data, and to object to processing. To exercise any of these rights, email paul@aylin.net.
Cookies
Please see the separate Cookie Policy for details of the cookies this site uses and how to manage your choices.
Complaints
If you are concerned about how I handle your data, please contact me at paul@aylin.net. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator, at ico.org.uk.
Changes to this policy
I may update this policy from time to time. The “last updated” date above shows when it last changed.