What we do with your information.

Tilt Your Head is the data controller for the information described on this page. That means we decide what is collected and why, and we are the people you hold to account for it.

Nothing here is collected speculatively. Each row exists because the work cannot happen without it.

A photograph of an identifiable person is personal data under UK GDPR, and we treat it that way. This is the part most studios leave vague, so here it is in full.

• Delivering your images. We photograph you, edit the selected frames and deliver them to you. That is the contract, and it needs no separate permission.
• Using your images in our portfolio, on this site or on social media is a separate thing, and it is opt-in. We ask, and if the answer is no, the answer is no. Saying no does not change your price or how your session runs.
• You can change your mind. If you previously agreed to portfolio use and no longer want it, email us and we will take the images down from anything we control. We will tell you honestly where we cannot. A printed magazine or a client’s own campaign is beyond our reach once published.
• Commissioned work. If a company booked the shoot, that company decides how the images are used within the terms of its commission.
• Under 18s. We only photograph someone under 18 with the permission of a parent or guardian, who must be contactable throughout, and we do not use those images publicly.
• Where they live. Your images sit on our own storage and on the delivery gallery we send you. We do not sell images, licence them to stock libraries, or feed them to anyone training an AI model.

We do not sell your data and we do not share it for anyone else’s marketing. These are the services that necessarily handle some of it in order for the site and the studio to work.

A cookie is a small file a website stores in your browser. This site sets a small number of them.

• Essential. Squarespace sets a crumb cookie so forms cannot be submitted by another site on your behalf. Without it the enquiry form does not work.
• Analytics. Squarespace sets ss_cvr and ss_cvt to count visits and tell a returning visitor from a new one.
• Third party. The Google map, the Google fonts and the Meta tag described above are all loaded from other companies’ servers, and those companies may set their own cookies.

You can block or delete cookies in your browser settings at any time; every major browser lets you do this per site. Blocking analytics and third-party cookies will not stop you using this website or contacting us.

• Enquiries that did not become bookings: deleted after two years, or sooner if you ask.
• Newsletter: we keep your email address until you unsubscribe. After that we keep only the fact that you opted out, so we do not email you again by mistake.
• Financial records: six years after the end of the relevant tax year, because HMRC requires it. We cannot delete these on request.
• Photographs: your delivered images are kept while there is a working reason to: reprints, reissues, a second brief. If you want them deleted from our storage, ask, and we will confirm when it is done.
• Retouched files: kept for 24 months after delivery. Original raw files are kept for 12 months. Download and back up your images when you receive them.

Under UK GDPR you have the following rights. Using any of them is free, and we will not treat you differently for it.

• Access: ask for a copy of what we hold about you.
• Rectification: have anything inaccurate corrected.
• Erasure: ask us to delete what we hold, where no legal duty makes us keep it.
• Restriction: ask us to stop using something while a dispute about it is sorted out.
• Portability: get the data you gave us in a form you can take elsewhere.
• Objection: object to processing we do on the basis of legitimate interests, including marketing.
• Withdraw consent: where we relied on your consent, such as the newsletter or portfolio use of your images.

Email contact@tiltyourhead.co.uk and we will deal with it within one month.

Tell us first if you can. It is usually quicker. But you have the right to go straight to the regulator, and you do not need our permission.

We may update this page as the studio changes. The date at the top always tells you which version you are reading.

Data requests are answered within one month, as the law requires.