Privacy and Rights - Howard Photography

What the site collects

Login email addresses, one-time login codes, account roles, and account status.
An authentication cookie when you sign in, so protected pages can recognise your session.
Contact form details: name, email, subject, message, and submission time.
Admin and security telemetry, including request path, user agent, IP address, and access status for suspicious probes, rate limits, and admin-area events.
Media access metadata, such as which users or roles are allowed to view user-specific, tiered, or custom-access images.

Why it is used

To send login codes, authenticate users, and manage user-specific, tiered, or custom image access.
To respond to contact messages and manage enquiries.
To operate, secure, troubleshoot, and improve the site.
To prevent abuse, spam, unauthorised admin access, and hostile scanning.

Cookies

The site uses essential cookies only. A CSRF cookie helps protect forms from cross-site request forgery. If you sign in, an authentication cookie keeps your session active. These cookies are needed for security and account access; they are not used for advertising.

Retention

Contact messages and account records are kept while they are needed for enquiries, access management, or site administration. Security telemetry is kept for a limited operational period and may be deleted sooner when no longer needed.

Your rights

You can ask to access, correct, delete, or restrict use of your personal data. You can also ask for a copy of data linked to you, or object to certain processing where applicable.

To make a request, use the contact form and include the email address your request relates to. I may need to verify that you control that email address before changing or disclosing account data.

Third-party services

The site may use hosting, email delivery, database, storage, and image-service providers to run the portfolio and admin tools. These services process data only as needed to provide the site.