Jason Baxter Media Ltd

Introduction Jason Baxter Media Ltd (referred to as "we", "us" or "our") is committed to protecting your privacy and handling your personal data in a transparent manner. This policy explains how we collect, use, store and disclose personal data when you use our photography shop and website.
Data controller The data controller is: Jason Baxter Media Ltd.
Contact For questions about this policy or to exercise your data protection rights, contact us via our contact page: https://www.jasonbaxter.media/#contact
Personal data we collect We may collect and process the following personal data:

Identity and contact: name, email address, postal address, telephone number.
Purchase and payment: order history, payment details (note: payment card data is processed by our payment provider; we do not store full card numbers).
Images: photographs containing identifiable persons provided by schools, parents or pupils.
Technical and usage data: IP address, browser type, device identifiers, cookies and analytics data.
Communications: correspondence, complaints, or support requests.

Purposes and legal bases for processing We process personal data for purposes including:

Fulfilling orders and delivering products (contractual necessity).
Managing accounts, payments, refunds and customer service (contractual necessity/legitimate interest).
Hosting, operating and improving the website and services (legitimate interest).
Complying with legal obligations (legal requirement).
Marketing communications from Jason Baxter Media Ltd where you have given consent by registering to purchase school photography.

Photographs and special categories Photographs of pupils are often sensitive. We will only use and publish photographs where we have lawful basis (consent where required, or legitimate interest with appropriate safeguards). For under-13s and other minors, parents/guardians should provide any required consents in line with school policies.
Sharing and disclosure We may share personal data with:

Service providers (payment processors, delivery firms, IT and hosting providers).
Schools or authorised representatives where relevant.
Legal and regulatory bodies if required by law. We do not sell personal data to third parties.

International transfers Where we transfer personal data outside the UK, we ensure appropriate safeguards (e.g., adequacy decisions or standard contractual clauses) are in place.
Data retention We retain personal data only as long as necessary for the purposes described and to meet legal, tax and accounting requirements. Retention periods will vary by data type; contact us for specifics.
Security We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and accidental loss, destruction or damage.
Your rights Subject to applicable law, you have rights including:

Access to the personal data we hold about you.
Correction of inaccurate or incomplete data.
Deletion (right to be forgotten) where lawful.
Restriction or objection to processing in certain circumstances.
Portability of data you provided to us.
Withdraw consent where processing is based on consent. To exercise rights contact us via: https://www.jasonbaxter.media/#contact. You also have the right to complain to the UK Information Commissioner’s Office (ICO).

Cookies and tracking We use cookies and similar technologies to operate the website and improve user experience. Information about cookies and how to manage them is available on our website (provide a cookies page or banner).
Changes to this policy We may update this policy from time to time. The date of the latest revision will be displayed on the policy page.

Payment and pricing

Display clear pricing inclusive of VAT where applicable. Show delivery charges and any additional fees at checkout.

Complaints

Provide a straightforward complaints process and specify the contact point: https://www.jasonbaxter.media/#contact
Inform customers of their right to escalate to the UK Alternative Dispute Resolution bodies or the courts if necessary, and provide ICO contact details for data protection complaints.

Privacy policy