top of page

GDPR statement

Please read carefully

What is the GDPR?

The GDPR is the General Data Protection Regulation which replaced the Data Protection Act when it came into force on 25th May 2018. It's purpose is to ensure that organisations have strict policies and practices in place for managing and handling personal data.

At a glance

✔ In the majority of cases, we do not store personal data about pupils that we are photographing. Exceptions and how we deal with them, are detailed below

✔ If you have any questions about Deana Hall Photography and the GDPR, please contact us at

How does the GDPR affect school photography?

For the most part, when we take school photographs, we don't collect any personal data of the students or staff who we are photographing. Each image is assigned a image number. This is the 3 digit reference parents see on their order forms. 

After the photographs have been taken, they are then encrypted and sent to our laboratory. The school is left a USB with images contained in folders to be uploaded on to the MIS system. During this process, at no time do we link an image to any personal data, or receive any personal data about the pupils. 

If for any reason a job does require us to collect personal data, we will work within the GDPR requirements.

How does this affect schools?

In the majority of cases for school photography, we act as the data controller. We are committed to working closely with all of our schools to ensure that we assist them with GDPR compliance. If you are a school and would like to discuss this with us, please contact us at

How does this affect parents?

If you are a parent and would like to know more about how your child's image please contact us at

What happens next?

We are committed to being fully compliant with the GDPR, whilst ensuring the level of service and relationship with our clients is maintained to the highest possible standard. We will be releasing official documentation with regards to the GDPR soon, to ensure we can be clear about our data processes and continue to work effectively with all our schools. 

If you have any further questions regarding GDPR, please contact us at

Subject Access Requests

If you have a Subject Access Request, please contact us at


If you have any questions or concerns regarding this policy, please contact us at

bottom of page