Privacy statement

Privacy Statement for Jay's Focus Media

This statement explains how I look after your information and images: what personal information Jay's Focus Media collects, why, how long it's kept, and your rights under UK data protection law. Last updated: 29 October 2026.

At a Glance

  • I only collect what I need to quote, shoot, deliver and invoice your work.
  • I never sell your information or use it for advertising.
  • Identifiable people only appear in my portfolio with written consent.
  • Your images are backed up for 12 months after delivery, then securely deleted.
  • Your data stays in the UK wherever possible, and you can ask to see, correct or delete it at any time.

Who I Am

Jay's Focus Media is a photography, video and drone business run by Jason Oliver as a sole trader, based in Suffolk, England. I am the data controller for the personal information described here, which means I decide how it is used and I'm responsible for protecting it.

Business
Jay's Focus Media (Jason Oliver, sole trader)
Contact
The contact form on this website (choose ‘Ask a question’)
ICO registration
[ICO REGISTRATION NUMBER]
Law
UK GDPR and the Data Protection Act 2018

What I Collect

  • Contact Details. Your name, email address, phone number and, for shoots at your home or premises, the address.
  • Booking Details. The service, date, location, shot list, and notes you give me, such as names of family members or pets to include.
  • Payment & Business Records. Invoices, payments received and correspondence. I don't store card details; payments are handled by your bank or the payment provider.
  • Photographs & Video. Images of you, your family, guests, staff, pets, property and products taken during a shoot, including aerial footage.
  • Consent Records. Model releases and any consent you give for portfolio or marketing use.
  • Messages. Enquiries and messages you send through the website contact form or social media.

I don't collect information I don't need. I don't use facial recognition, and I don't sort or tag images by people's identity.

Where Your Information Comes From

Most information comes directly from you, when you get in touch, book or attend a shoot. Sometimes it comes from someone else:

  • The Person Who Booked. For example, a couple planning a wedding, a family member booking a portrait session, or an estate agent arranging access to a property.
  • Your Employer. When a business books headshots, team photos or event coverage that includes you.
  • The Shoot Itself. Guests at an event, or people and vehicles captured by chance in the background or from the air.

When I receive your details from someone else, I only use them for that booking.

Why I Use It & on What Lawful Basis

PurposeLawful basis
Replying to your enquiry and preparing a quoteLegitimate interests (responding to people who contact me), or steps before a contract
Planning, carrying out, editing and delivering your shootContract
Invoicing and keeping tax and accounting recordsLegal obligation
Keeping backup copies of your images for the period belowContract and legitimate interests (protecting your images against loss)
Showing identifiable images of people in my portfolio, website or social mediaConsent, which you can withdraw at any time
Showing property, product or landscape images with no identifiable peopleLegitimate interests (promoting my business), subject to our agreement
Protecting the website and enquiry form from spam and abuse, including the hCaptcha checkLegitimate interests (security)
Defending or making legal claimsLegitimate interests

I won't send you marketing emails unless you've asked to receive them, and every message will include a way to stop.

Images of People, Children & Drone Footage

  • Portfolio Use. I only use identifiable images of you, your family or your guests in my portfolio, website or social media with your written consent. Saying no doesn't affect your booking.
  • Children. I photograph children only with the agreement of a parent or guardian. I never publish a child's name, school or location, and I don't use images of children for marketing without the explicit written consent of a parent or guardian.
  • Business Clients. When a business books a shoot that includes staff or customers, the business is responsible for telling those people and getting any consent needed for how it uses the images.
  • Drone Flights. I fly in line with Civil Aviation Authority rules and plan flights to avoid capturing people who aren't involved. If people, vehicle number plates or neighbouring gardens are captured by chance, I crop, blur or remove them before images are published. If you think you've been captured, contact me and I'll check and act on your request.
  • Sensitive Details. Images can sometimes show things like health, religion or beliefs, for example, at a christening. I treat every image as confidential and only use it for the purpose agreed.

Backing Up Your Images & How Long I Keep Information

Your images are protected from the moment they're taken. Memory cards are kept until every file has been copied to two separate places: an encrypted local drive and an encrypted cloud backup in a different location. Cards are only cleared after both copies have been checked.

After delivery, I keep backup copies for the periods below. During that time, if you lose your files, I'll send them again free of charge. When the period ends, I securely delete my copies, so please download your images promptly and keep your own copies in at least two places.

InformationHow long I keep it
Edited, delivered photos and videos12 months from the delivery date
Unedited original files (raw photos and footage)3 months from the delivery date
Online delivery gallery or download linkAvailable for 30 days from delivery
Enquiries that don't lead to a booking12 months from our last contact
Website security logs, including IP addresses30 days
Contracts, invoices and payment records6 years after the end of the tax year they relate to, to meet HMRC record-keeping and legal requirements
Portfolio images used with your consentUntil you withdraw consent
Model releases and consent recordsFor as long as the image is used, plus 6 years

Longer archiving can be arranged as an add-on before the backup period ends. Holiday-let and business clients on a retainer keep access for as long as the retainer runs. If you'd like your images deleted sooner, ask me and I'll do it unless I need to keep a record for legal or tax reasons.

I take reasonable care to protect backups but can't guarantee against every possible loss, such as damage to storage beyond my control. My liability for lost files is limited to the fee you paid for the shoot.

Who I Share Information With

I never sell your information. I only share it with trusted services that help me run the business, under contracts that require them to keep it secure and use it only on my instructions:

  • Cloud storage and backup provider
  • Online gallery and file delivery service
  • Amazon Web Services, which runs the website enquiry form in its London (UK) region
  • hCaptcha (Intuition Machines, Inc.), which checks that the enquiry form is being used by a person rather than a spam bot
  • Email and website hosting providers
  • Accounting software and my accountant
  • A second shooter or editor, only when agreed with you in advance

I may also share information when the law requires it, for example, with HMRC. Some providers store data outside the UK. When they do, I make sure it's protected by a UK adequacy decision or approved contract terms.

How I Keep It Secure

  • Computers, drives and phones are encrypted and password protected.
  • Business accounts use strong, unique passwords and two-factor authentication.
  • Delivery galleries use private links, with passwords where needed.
  • Only I have access to client files unless you've agreed otherwise.

If a data breach is likely to put your rights at risk, I'll report it to the Information Commissioner's Office within 72 hours, and I'll tell you without delay if the risk to you is high.

Your Rights

You have the right to:

  • Access a copy of the information I hold about you
  • Correct information that's wrong or incomplete
  • Have information deleted where there's no good reason to keep it
  • Restrict how I use your information while a concern is resolved
  • Object to uses based on legitimate interests, including any marketing
  • Receive your information in a common format to pass to someone else
  • Withdraw consent at any time, such as for portfolio use. I'll remove images from my website and social media within 30 days. Printed materials already produced can't be recalled.

To use any of these rights, send a request through the contact form, choosing ‘Ask a question’. It's free, and I'll reply within one month. I may ask you to confirm your identity first.

Your Choices

  • Giving Your Details. You don't have to, but I need your name and a way to contact you to reply to an enquiry, and booking details to carry out a shoot. Without them I can't provide the service.
  • Portfolio & Reviews. Saying no to portfolio use, or to your review being quoted on my website, never affects your booking. Reviews are only quoted with your permission, using your first name and town unless you agree otherwise.
  • Marketing. I only send news or offers if you've asked for them, and every message has a way to stop.
  • Automated Decisions. I don't make decisions about you by automated means or use profiling.

This Website & Cookies

  • This website doesn't use advertising or analytics cookies, and doesn't track you.
  • It remembers whether you last viewed Business or Personal offerings, stored only on your own device. Clearing your browser data removes it.
  • Fonts load from Google Fonts, so Google receives your device's IP address when the page loads.
  • The enquiry form sends your details over an encrypted connection to my enquiry service, run on Amazon Web Services in London. Your enquiry is emailed to me with a copy to you, and stored securely for 12 months before being deleted automatically.
  • To protect the form from abuse, technical logs including your IP address are kept for 30 days.
  • To block spam, the enquiry form uses hCaptcha. It loads only once you start filling in the form, and it may collect information about your device and browser, including your IP address, and use cookies or similar storage to tell people from bots. hCaptcha is a US company, and its privacy policy explains how it handles this information.
  • Links to YouTube, Instagram, LinkedIn and TikTok take you to those sites, which have their own privacy policies.

Questions, Complaints & Changes

If you have a question or concern about how I've handled your information, please contact me through the contact form first and I'll do my best to put it right.

You can also complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.

I review this statement at least once a year and when my services or suppliers change. It was last updated on 29 October 2026 and will next be reviewed by October 2027.