Privacy Policy

Effective date: July 2026​​​​​​​

Welcome to Photo Costas.
I am Costas Kariolis, an independent outdoor and travel photographer trading as Photo Costas. This website showcases my photography and provides information about photographic prints, commissioned artwork, image licensing and related photography services.

Your privacy is important to me. This Privacy Policy explains what personal information is collected, why it is collected, how it is used, and the choices and rights you have regarding your information. By using this website, you acknowledge that you have had the opportunity to read this Privacy Policy.

Who is responsible for your information?
Photo Costas (operated by Costas Kariolis) is the data controller responsible for your personal information. For the purposes of UK data protection law, the data controller is:
Photo Costas
Costas Kariolis
Email: enquiry@photocostas.co.uk  

Information I collect
Depending on how you use the website, I may collect the following information you provide. You may choose to provide information when you:
•    contact me by email
•    submit an enquiry through the website
•    request information about photographic prints
•    enquire about commissioned artwork
•    enquire about image licensing
•    communicate regarding photography services

This information may include:
•    your name
•    email address
•    telephone number (if provided)
•    postal or delivery address (where required)
•    details contained within your enquiry or correspondence

You are under no obligation to provide personal information, although some services cannot be provided without it.

Information collected automatically
When you visit the website, certain technical information may be collected automatically, including:
•    IP address
•    browser type and version
•    operating system
•    pages visited
•    referring website
•    date and time of access
•    device information
•    cookie and analytics information (where applicable)

This information helps maintain the security, performance and functionality of the website.

How your information is used
I use personal information only where necessary to operate my photography business and provide requested services. This may include:
•    responding to enquiries
•    communicating about photographic prints
•    discussing commissioned artwork
•    managing image licensing requests
•    arranging photography services
•    recording and reconciling payments made by direct bank transfer
•    organising delivery of prints
•    maintaining business records
•    protecting copyright and intellectual property
•    improving the website
•    maintaining website security
•    complying with legal obligations

I do not sell your personal information to third parties.

Contacting Photo Costas
When you contact me by email or through the website enquiry form, I use the information you provide only to respond to your enquiry and manage any ongoing discussion. If your enquiry does not proceed, your correspondence may be retained for a reasonable period for administrative purposes before being securely deleted. I will not add you to a marketing mailing list unless you have specifically asked to receive marketing communications.

Lawful basis for processing
Under UK GDPR, I rely on one or more of the following lawful bases:

Contract
Where processing is necessary to provide requested photography services, commissioned artwork, image licensing or print fulfilment.

Legitimate Interests
Where processing is necessary for the normal operation of my photography business, including:
•    responding to enquiries
•    maintaining correspondence
•    protecting copyright
•    improving website functionality
•    maintaining website security
•    preventing fraud

Legal Obligation
Where I must retain or disclose information to comply with applicable law.

Consent
Where consent is required, such as optional marketing communications or non-essential cookies, you may withdraw your consent at any time.

Sharing your information
Personal information is shared only where necessary. This may include:

Professional print laboratories
If you request a photographic print, I may provide the information necessary for a trusted professional print laboratory to produce and deliver your order. This would normally be limited to your name, delivery address and order details.

Payments
At present, payments for photographic prints, commissioned artwork and other photography services are made by direct bank transfer. If you choose to pay by bank transfer, I will use the information you provide (such as your name, payment reference and any relevant correspondence) only to identify, reconcile and record your payment, fulfil your order and comply with legal and accounting obligations. I do not collect or store your online banking login credentials or payment card information through this website.

Website service providers
Website hosting, security, analytics and technical support providers may process limited information on my behalf where necessary to operate the website.

Legal requirements
Information may be disclosed where required by law or where necessary to establish, exercise or defend legal claims. I do not sell or rent personal information to third parties.

International transfers
Where any service provider processes information outside the United Kingdom, appropriate safeguards will be used in accordance with UK data protection law.

Data retention
I keep personal information only for as long as reasonably necessary. Typical retention periods include:

General enquiries – normally up to 24 months after our last communication.

Customer records relating to completed work – retained where necessary for accounting, tax and legal obligations.

Commission records and licensing correspondence – retained where appropriate to maintain records of agreements, copyright and authorised image use.

Website security logs – retained only for operational and security purposes.

Where information is no longer required, it is securely deleted or anonymised.