Privacy Policy

1. Data controller

photex-design.com operates this informational site. For privacy enquiries contact info@photex-design.com.

2. Data we collect

We may process technical data such as browser type, approximate region derived from IP, and on-site events needed to run the service. If you email us, we process the contents of your message and metadata needed to reply.

3. Cookies

Essential cookies keep security and preference choices functioning. Optional analytics cookies, if ever enabled, will be described in our Cookie Policy and gated behind consent where required.

4. Purposes

We use data to secure the site, remember consent choices, measure aggregate performance, and respond to correspondence. We do not sell personal information.

5. Sharing

Hosting, security, or email providers may process data under contract solely to deliver the site. Outbound links to licensed operators are controlled by their own privacy notices.

6. Retention

Server logs and inbox messages are retained only as long as needed for security, troubleshooting, or legal compliance, then deleted or anonymised.

7. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, or portability regarding personal data we control. UK users may complain to the ICO if concerns remain unresolved.

8. Lawful bases (UK GDPR)

Where UK GDPR applies, we rely on lawful bases such as legitimate interests (site security, fraud prevention, audience measurement in aggregate), contract (responding to emails that form or precede a contract), and consent where we store non-essential cookies or similar technologies after you opt in via our banner.

9. International transfers

If processors outside the UK receive personal data, we require appropriate safeguards such as UK-approved standard contractual clauses or adequacy regulations, and we assess transfer risk in line with ICO guidance.

10. Automated decision-making

We do not use solely automated decision-making that produces legal or similarly significant effects concerning individuals based on browsing this informational site.

11. Children

The site is not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe a minor has submitted information, contact us so we can delete it promptly where feasible.

12. Security

We implement administrative and technical measures appropriate to the risk, including transport encryption where supported, access controls on administrative interfaces, and monitoring for abuse. No method of transmission over the internet is completely secure; you should also protect your devices and accounts.

13. Marketing

We do not sell email lists. If we ever send editorial newsletters, sign-up would be explicit and each message would include an unsubscribe mechanism compliant with the Privacy and Electronic Communications Regulations where applicable.

14. Complaints

Contact info@photex-design.com in the first instance. UK data subjects may lodge a complaint with the Information Commissioner’s Office (ICO) if they consider processing infringes data protection law.

15. Data minimisation

We collect only data reasonably necessary for the purposes described. Server logs are rotated or summarised according to operational schedules designed to limit retention of identifiable technical data.

16. Processor oversight

We perform diligence on subprocessors that may access personal data, review contractual data processing terms, and require confidentiality and security commitments.

17. Breach notification

Where we determine a personal data breach poses a risk to individuals, we will notify regulators and affected users as required by applicable law, describing likely consequences and mitigation steps.

18. Research and analytics

Aggregate statistics may be derived from technical logs to understand device mix, rough geography, and page popularity. Such statistics do not identify individuals when presented internally or to partners in summary form.

19. Third-party embeds

If we embed content from other domains in the future, those providers may collect data under their own notices. We will describe material embeds in this policy when deployed.

20. Policy changes

We may update this Privacy Policy to reflect operational, technical, or legal developments. Material changes will be posted on this page with an updated overview in the introductory paragraph where helpful.