Privacy Policy

This policy explains how Bursill Albums collects, uses, and protects your personal information when you visit bursill.com, make an enquiry, or place an order.

Who I am

Bursill Albums is a trading name of BURSILL IMAGES LTD, company number 09017942. Registered Office: S11, The Atkins Building, Lower Bond Street, Hinckley, Leicestershire, LE10 1QU.

I am the "data controller" for the information described in this policy. That means I decide how and why your information is used, and I am responsible for looking after it.

• Email: info@bursill.com
• Phone: 07881 438911

If you have any questions about this policy or about how I handle your information, contact me using the details above. You can reach a real person, there is no separate privacy department.

What information I collect

When you enquire or order

• Your name, email address, telephone number, and delivery address
• Details of what you are asking for: album type, size, materials, occasion, deadlines
• Correspondence between us, including emails and messages
• Order and payment records (I do not see or store your full card details, see "Payments" below)

Photographs and files you send me

To design an album or carry out restoration work, you send me photographs. These images are personal information, both yours and, usually, other people's. They may show your family, your wedding guests, children, or relatives who have died. I treat them with the same care I would treat my own family photographs. I only use images you send me to carry out the work you have asked for. I do not sell them, license them, or pass them to anyone other than the manufacturer producing your album.

When you visit the website

• Pages viewed, time spent, referring website, approximate location (city level), device and browser type
• Cookie data, where you have consented to it, see my Cookie Policy

When you use my enquiry form

My forms are protected by Google reCAPTCHA v3, which tells real visitors apart from automated spam. Unlike older versions it does not ask you to identify traffic lights; it works quietly in the background by watching how you interact with the page.

To do that it collects your IP address, your browser and device characteristics, your screen resolution and language, how long you spend on the page, and your mouse movements, scrolling or touch events. That information is sent to Google, which returns a score indicating how likely you are to be a person. I see only the score, never the underlying data. reCAPTCHA loads only on pages that contain a form, not across the whole site.

Google's Privacy Policy and Terms of Service govern what they do with it. My lawful basis is legitimate interests: without it my inbox fills with automated submissions and genuine enquiries get lost among them.

If you would rather not be assessed this way, do not use the form. Email me at info@bursill.com or telephone instead; both reach me just as well, and I will never treat an enquiry differently for arriving that way.

Why I use it, and my legal basis

I will never publish your photographs without asking you. If I would like to show your album, a spread, or a restoration as an example of my work, I will ask for your permission first, and you are free to say no. A refusal will never affect the price you pay or the service you receive. If you agree and later change your mind, tell me and I will remove the images.

Who I share it with

I share the minimum necessary, with:

• Album manufacturers. To produce your album, I send your final design files and delivery address to the manufacturer, currently Graphistudio (Italy), and a trade printer in the United Kingdom. They act on my instructions and may not use your files for anything else.
• Payment providers. Stripe processes card payments. Your card details go directly to them and are never held by me.
• Website and email providers. My website and my email accounts are both hosted by Ingle. Email runs on standard IMAP accounts through that hosting. Google provides Analytics and Ads, and the reCAPTCHA spam check on my forms. Mailchimp holds my mailing list and sends the occasional notice to people who have subscribed.
• Image processing tools. Some of the software I use to restore, denoise, enlarge, or colourise photographs processes images on the provider's servers rather than on my own computers. Where that is the case, I use only tools whose terms prohibit the use of customer images for training their models, and I do not upload client material to free or consumer AI services. If you would prefer that no such tools are used on your photographs, tell me and I will work by hand. How I Use Artificial Intelligence explains this in full.
• My accountant, for bookkeeping and tax returns.
• Couriers, to deliver your album.

I may also disclose information where I am legally required to do so, for example, in response to a court order.

I do not sell your personal information to anyone, for any purpose.

Sending information outside the UK

Some of the organisations above are based outside the UK. Files sent to Graphistudio go to Italy, which the UK Government recognises as providing an adequate level of data protection. Some of my website and email providers are based in the United States, and transfers to them are protected by the UK Extension to the EU-US Data Privacy Framework or by the International Data Transfer Agreement, depending on the provider.

How long I keep things

• Enquiries that don't become orders: 12 months, then deleted.
• Photographs and working design files: 12 months after your album is delivered, so that I can produce reprints, replacement copies, or additional albums without asking you to send everything again. After that I delete them, unless you have asked me in writing to keep them for longer.
• Order and payment records: six years after the end of the relevant tax year, as required by HMRC.
• Marketing contacts: until you unsubscribe.

If you want your images deleted sooner than the period above, just ask.

Keeping your information safe

Your files are held on two password-protected hard drives at my studio and in a password-protected cloud account, accessible only to me. Backups are taken at the end of every working day. File transfers use secure links rather than open attachments where possible.

No system is perfect, but if a breach occurs that is likely to put your rights at risk, I will tell you and the Information Commissioner's Office without undue delay.

Children's information

My services are sold to adults. However, the photographs you send me frequently include children, this is unavoidable in wedding, family, and heritage work. I handle those images on the same basis as all other material you supply: only for the job in hand, never published without permission from a parent or guardian, and deleted according to the retention period above.

Your rights

Under UK data protection law you may:

• Ask for a copy of the information I hold about you
• Ask me to correct anything inaccurate
• Ask me to delete your information (this may prevent me completing an order in progress)
• Ask me to restrict how I use it, or object to certain uses
• Ask for your information in a portable, machine-readable format
• Withdraw consent at any time, where consent is my basis for using it

To exercise any of these, email info@bursill.com. I will respond within one month. There is no charge.

If you are unhappy with how I have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk, by calling 0303 123 1113, or by writing to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. I would rather you came to me first so that I can put it right.

Changes to this policy

If I change how I handle personal information, I will update this page and change the date at the top. Where the change is significant, I will tell existing customers by email.