Privacy Policy - ©Visions Enlight Ltd 2026

PRIVACY & COOKIE POLICY

Last Updated: 27 October 2026

1. INTRODUCTION AND DATA CONTROLLER DETAILS

1.1. Who We Are (Data Controller): Welcome to Visions Enlight Ltd (“Company”, “we”, “us”, or “our”). For the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, Visions Enlight Ltd is the Data Controller responsible for your personal data. We are registered in England and Wales under company number 17170058, with our registered office at 28 Conway Rd, Cannington, Bridgwater, Somerset, TA5 2NP, United Kingdom.

1.2. ICO Registration: Visions Enlight Ltd is officially registered as a fee-paying Data Controller with the UK Information Commissioner’s Office (ICO) under registration reference ZC228464

1.3. How to Contact Us Regarding Privacy: If you have any questions about this Privacy Policy or wish to exercise any of your legal data protection rights, please contact our Data Protection Lead (Jeremy Eaton, Director) by email at enquiries@visionsenlight.com, by phone at +447506968603, or by post at 28 Conway Rd, Cannington, Bridgwater, Somerset, TA5 2NP, United Kingdom.

2. THE PERSONAL DATA WE COLLECT ABOUT YOU

2.1. Identity and Contact Data: When you submit an enquiry via our website forms (including SureForms), book a photography or drone session, or place an order, we collect your first name, last name, email address, telephone number, billing address, and (where physical Print on Demand goods are ordered) your shipping/delivery address.

2.2. Bespoke Car Photography, Imaging & Gallery Access Data: When you book a Bespoke Photography For Your Car light painting session, event shoot, Kirlian aura photography session, thermal inspection, or aerial drone survey, we collect and generate:

(a) Session & Location Data: Shoot location details, vehicle make/model details (and vehicle registration plates where visible during capture, which can be obscured for public portfolio use upon request), and site safety/airspace permission records.
(b) Unique Identifier / Gallery Access Codes: A unique, confidential transaction/gallery access code linked to your email address and order record, allowing you to securely unlock and view your private shoot images on visionsenlight.com.
(c) Photographic & Imaging Files: Digital photographs, light painting files, thermal radiometric data, Kirlian electro-photographs, and aerial drone media captured during your commissioned session.

2.3. Transaction and Payment Data: Details of services, digital downloads, and physical Print on Demand products you have purchased from us, alongside partial payment confirmation references. We never store your full debit or credit card numbers on our servers; all card payments are encrypted and processed directly by PCI-DSS compliant third-party payment processors (such as Stripe or PayPal via SureCart) or via direct UK Bank Transfer (BACS).

2.4. Technical and Usage Data: When you visit visionsenlight.com, our hosting servers and analytics/security tools automatically collect technical data, including your Internet Protocol (IP) address, browser type and version, time zone setting, operating system, login/access code attempts, and page interaction logs.

2.5. Marketing and Communications Preferences: Your preferences in receiving marketing updates or newsletters from us (which we only send with your explicit opt-in consent or as permitted under the UK Privacy and Electronic Communications Regulations) and your communication history with us.

3. HOW AND WHY WE USE YOUR PERSONAL DATA (LAWFUL BASES)

3.1. Performance of a Contract (Article 6(1)(b) UK GDPR): We process your Identity, Contact, Transaction, and Gallery Access Data because it is necessary to:

(a) Confirm and Carry Out Bookings: Schedule and perform your bespoke car photography, light painting, event, Kirlian, thermal, or drone imaging session.
(b) Issue Unique Identifier Codes & Deliver Digital Downloads: Generate and email your Unique Identifier Code after upfront payment clears so you can unlock your private gallery and download your high-resolution images.
(c) Fulfil Print on Demand (PoD) Orders: Transmit your chosen image file, name, and delivery address to our Print on Demand fulfilment partner so your bespoke prints or wall art can be manufactured and shipped to you.

3.2. Legal and Regulatory Compliance (Article 6(1)(c) UK GDPR): We process and retain booking records, invoices, tax records (for HM Revenue & Customs), and mandatory flight logs/site safety assessments (for the UK Civil Aviation Authority) to comply with our statutory legal obligations.

3.3. Legitimate Interests (Article 6(1)(f) UK GDPR): We process data where necessary for our legitimate business interests (provided your fundamental rights do not override those interests), including:

(a) Website Security & Anti-Scraping: Protecting visionsenlight.com and private client galleries from unauthorized access, brute-force attacks, bot scraping, and copyright theft.
(b) Customer Support & Enquiries: Responding to questions submitted via our contact forms, email, or telephone.
(c) Portfolio Display: Showcasing selected examples of our creative photography and imaging work to promote Visions Enlight Ltd (subject to your right to request registration plate masking or sign a prior confidentiality agreement).

3.4. Consent (Article 6(1)(a) UK GDPR): Where we rely on your consent—such as for optional marketing emails or non-essential cookies—you have the absolute right to withdraw your consent at any time by clicking the unsubscribe link in any email or emailing enquiries@visionsenlight.com.

4. DATA SHARING, PRINT ON DEMAND & THIRD-PARTY PROCESSORS

4.1. Strict No-Sale Policy: We never sell, rent, or trade your personal data or email address to third parties under any circumstances.

4.2. Trusted Service Providers (Data Processors): We share only the minimum necessary personal data with trusted third-party service providers who act under strict data processing agreements to help us operate our Website and fulfil your orders:

(a) Website Hosting & Email Infrastructure: GoDaddy.com, LLC (providing GoDaddy Web Hosting and GoDaddy Professional Email infrastructure for visionsenlight.com) and self-hosted WordPress content management software.
(b) E-Commerce, Checkout & Forms: SureCart and SureForms (alongside integrated payment gateways such as Stripe and PayPal) to securely process online payments, issue digital download links, and manage checkout email confirmations.
(c) Print on Demand (PoD) & Courier Partners: When you choose to order physical prints, canvases, or merchandise from your private gallery on visionsenlight.com, we securely transmit the specific image file(s) you selected along with your name, delivery address, and contact email/phone number (for courier tracking notifications) to our Print on Demand manufacturing partner and their designated postal/courier carriers. Our Print on Demand partners are strictly prohibited from using your photographs or personal details for any purpose other than manufacturing and delivering your order.
(d) Search & Social Media Integrations: Rank Math SEO, Google Search Console (for aggregated website performance diagnostics), and Meta Business Suite (where you interact with our official social media pages).

4.3. Professional & Regulatory Disclosures: We may share necessary information with our professional advisers (accountants, insurers, or legal advisers), HM Revenue & Customs (HMRC), the UK Civil Aviation Authority (CAA), or law enforcement authorities where required by UK law.

5. INTERNATIONAL DATA TRANSFERS

5.1. UK and EEA Priority: Wherever possible, we store and process your personal data within the United Kingdom or the European Economic Area (EEA).

5.2. Safeguards for Transfers Outside the UK: Some of our technology providers (such as GoDaddy or US-based cloud/payment infrastructure) may process data on servers outside the UK. Whenever your personal data is transferred outside the UK, we ensure a high degree of protection by relying on: (a) UK Adequacy Regulations (such as the UK Extension to the EU-US Data Privacy Framework); or (b) standard data protection clauses (International Data Transfer Agreements / UK Addendum to EU Standard Contractual Clauses) approved by the UK Information Commissioner’s Office.

6. DATA SECURITY & PRIVATE GALLERY PROTECTION

6.1. Technical and Organisational Security: We have implemented robust security measures to prevent your personal data and private shoot galleries from being accidentally lost, used, scraped, or accessed in an unauthorized way. These measures include SSL/TLS encryption (HTTPS) across visionsenlight.com, secure access controls, firewall protection, and Unique Identifier Code verification for client galleries.

6.2. Data Breach Procedures: We have established procedures to deal with any suspected personal data breach and will notify you and the UK Information Commissioner’s Office (ICO) of a breach where we are legally required to do so.

7. DATA RETENTION (HOW LONG WE KEEP YOUR DATA)

7.1. Retention Principles: We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, tax, accounting, or aviation reporting requirements.

7.2. Specific Retention Periods:

(a) Private Online Client Galleries: Hosted on visionsenlight.com for 60 days from the date your Unique Identifier Code is issued (unless extended by agreement), after which online gallery access is removed.
(b) Master Photographic Archives: Unless you request complete erasure of private non-portfolio images, we may retain offline encrypted backups of master shoot files so we can supply replacement downloads or future print orders if you lose your copy.
(c) Financial, Booking & Tax Records: By law, we must keep basic customer, order, and invoice information (including your name, contact details, and transaction history) for 6 years after the end of the relevant company financial year for UK HMRC tax and accounting purposes.
(d) General Enquiries (No Booking Made): Contact form enquiries that do not result in a booking are routinely deleted after 12 months.

8. YOUR LEGAL RIGHTS UNDER UK GDPR

8.1. Summary of Your Data Protection Rights: Under the UK GDPR and Data Protection Act 2018, you have the right to:

(a) Request Access (Subject Access Request): Receive a copy of the personal data we hold about you.
(b) Request Correction (Rectification): Have any incomplete or inaccurate personal data we hold about you corrected.
(c) Request Erasure (“Right to be Forgotten”): Ask us to delete or remove your personal data where there is no compelling legal reason (such as HMRC 6-year tax retention rules) for us to continue processing it.
(d) Object to Processing: Object to our processing of your personal data where we are relying on a legitimate interest or for direct marketing.
(e) Request Restriction of Processing: Ask us to suspend the processing of your personal data in specific scenarios.
(f) Request Data Portability: Request the transfer of your personal data to you or to a third party in a structured, commonly used, machine-readable format.

8.2. How to Exercise Your Rights: To exercise any of these rights, please email enquiries@visionsenlight.com. You will not have to pay a fee to access your personal data (or to exercise any of the other rights), and we respond to all legitimate requests within one calendar month.

9. AERIAL DRONE, THERMAL & PUBLIC EVENT PRIVACY NOTICE

9.1. CAA & ICO Compliance for Aerial Drone Operations: When operating unmanned aircraft (drones) for commercial surveying or aerial photography, Visions Enlight Ltd adheres strictly to the UK Civil Aviation Authority (CAA) Drone and Model Aircraft Code and ICO CCTV/Drone surveillance guidance. We plan flight paths to minimise intrusion into neighbouring private properties, avoid recording uninvolved members of the public wherever practicable, and never conduct covert aerial recording.

9.2. Event Photography: When commissioned to photograph events, we capture imagery on the basis of legitimate interests and/or event organiser notices. If any individual attendee wishes to have a recognizable close-up photograph of themselves removed from our gallery or website, they may contact enquiries@visionsenlight.com and we will promptly action the request.

10. COOKIES AND TRACKING TECHNOLOGIES

10.1. How We Use Cookies: Our Website uses small text files called “cookies” to distinguish you from other users, keep your shopping basket and gallery session active, and help us improve our site.

(a) Strictly Necessary Cookies: Essential for the operation of visionsenlight.com, including WordPress security cookies, SureCart checkout session cookies, and private gallery authentication cookies. These do not require prior consent.
(b) Analytical & Functional Cookies: Used (only where enabled and consented to via our cookie banner) to recognise and count the number of visitors and see how visitors move around our Website.

10.2. Managing Cookies: You can set your browser to refuse all or some browser cookies, or adjust your preferences at any time via our Website cookie banner. Please note that if you disable strictly necessary cookies, the checkout and private client gallery pages may not function properly.

11. THIRD-PARTY LINKS

11.1. External Websites: Our Website may include links to third-party websites, plug-ins, and applications (such as social media platforms or external payment pages). Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and encourage you to read the privacy policy of every website you visit.

12. CHANGES TO THIS PRIVACY POLICY

12.1. Policy Updates: We keep our Privacy Policy under regular review. Any updates we make will be posted on this page with an updated “Last Updated” date at the top of the document.

13. HOW TO COMPLAIN TO THE REGULATOR (ICO)

13.1. Contact Us First: If you have any concerns about our use of your personal information, we would appreciate the chance to resolve your concerns directly—please email us at enquiries@visionsenlight.com and we will respond promptly.

13.2. Information Commissioner’s Office (ICO): You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues, via their website at www.ico.org.uk, by telephone on 0303 123 1113, or by post at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.