Privacy Statement

Last updated: 29 October 2026

Cherry & Bow respects your privacy. This statement explains the personal information we collect, why we use it, who may receive it, how long we keep it and the rights available to you.

1. Who is responsible for your information?

Justyna Ciemierz, trading as Cherry & Bow, is responsible for personal information used for our boudoir photography, booking and website services.

Cherry & Bow
Room 8, 48 Loons Road
Dundee, DD3 6AP
Email: hello@cherryandbow.co.uk
Telephone: 07305 796 808

2. Information we collect

Depending on how you interact with us, we may collect your name, email address, telephone number and contact preferences; enquiry messages and consultation answers; session, package, date and payment records; photographs and image selections; product orders and delivery details; marketing choices and image-use permissions; and information needed to handle a complaint or legal claim.

Contact and consultation forms also record technical details such as IP address, browser user agent and referring page for submission security, rate limiting and troubleshooting. We record whether you chose to receive optional marketing. Payment is handled through the payment provider; we do not receive or store your complete card number or security code.

Boudoir photographs may be highly personal. We use them to provide the service and deliver the images you order. We do not use photographs for facial recognition or biometric identification.

3. How we receive information

Most information comes directly from you through our website forms, email, telephone, consultations, booking details, payments and photography sessions. We may also receive payment status from PayPal and technical data from website services that support maps, fonts, hosting or security. If you provide information about another person, make sure you are authorised to do so.

4. Why we use information

Enquiries, consultations and bookings

We use contact information and details you provide to answer enquiries, discuss your ideas, prepare for a session, confirm a booking and deliver the agreed service. This is necessary to take steps at your request before a contract and to perform the contract.

Payments, records and security

We use transaction and booking records to administer payments, maintain business and tax records, protect the website, prevent misuse and resolve disputes. The relevant bases include contract, legal obligations and our legitimate interests in running and protecting the business.

Photography and delivery

We create, select, edit, store and deliver photographs and products to fulfil your booking. We may retain limited records where reasonably needed for reorders, complaints, insurance or legal claims.

Private image use and portfolio permissions

We do not treat a boudoir booking as permission to publish photographs. Any portfolio, website, social-media, advertising, exhibition, competition or printed-sample use requires separate written permission. You may refuse, and where permission is based on consent you can withdraw it as explained in our Image Disclaimer.

Marketing

We send optional promotional messages only where you have agreed to receive them or where applicable law permits. You can unsubscribe at any time. Booking, payment and service messages are not marketing.

5. Sensitive information and intimate images

Please do not send medical or other sensitive details unless they are relevant to planning a safe and comfortable session. Where you choose to provide such information, we use it only for the stated purpose and on an appropriate legal basis. Access to private boudoir images is limited to people who need it to provide the service, unless you authorise another use or disclosure is required by law.

6. Who may receive information?

We share only what is reasonably needed with our website hosting, database, backup, email and IT support providers; PayPal for payments where used; Google services needed for fonts or embedded maps; print, album or delivery suppliers where you order physical products; and professional advisers, insurers, regulators, courts or authorities where needed or required by law. We do not sell personal information or private gallery images.

Some service providers may process technical information outside the UK. Where this happens, we use appropriate safeguards required by applicable data-protection law.

7. How long we keep information

We keep information only as long as reasonably necessary. Our usual retention periods are: enquiries that do not become bookings, up to 12 months after the last meaningful contact; booking, contract, payment and accounting records, normally six years; private gallery access, normally 30 days unless extended; working and delivered image files not approved for portfolio use, normally up to 12 months after gallery access expires, subject to orders, complaints or legal claims; and marketing records until you unsubscribe, plus a minimal suppression record to respect that request. At the end of the relevant period, data is deleted, destroyed securely or anonymised. Backup copies may remain until the next normal overwrite cycle.

8. Security

We use access controls, protected administrative access, secure payment components, password protections and other measures appropriate to the information. No internet service is completely secure. Keep passwords and private gallery links safe and contact us promptly if you suspect unauthorised access.

9. Your rights

Depending on the circumstances, you may ask to access or correct your information, request erasure or restriction, object to processing based on legitimate interests or direct marketing, receive certain data in a portable format, or withdraw consent where processing relies on consent. Some rights are limited where we must retain records by law or need them for legal claims. To make a request, email hello@cherryandbow.co.uk. We may ask for reasonable proof of identity.

10. Complaints and changes

Please contact us first if you have a privacy concern. You may also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or by telephone on 0303 123 1113. We may update this statement when our services or legal requirements change; the latest version will appear on this page.