Legal
Privacy Policy
Last updated: 23 February 2026
1. Who We Are
This website is operated by Neil Bradshaw Photography, a sole trader based in Ireland. You can contact us at hello@neilbradshaw.net.
As the operator of this site, Neil Bradshaw is the data controller for any personal data collected through it.
2. What Data We Collect
We collect the following personal data when you create an account or interact with this site:
- Email address — required to create an account and send you a sign-in link.
- Name (optional) — if you choose to provide it during signup.
- IP address — logged by our hosting infrastructure for security and GDPR consent audit purposes.
- Marketing preferences — whether you have opted in to receive emails about new prints, darkroom tips, and updates.
- Usage data — tool usage within The Lab (roll log, saved recipes) if you use those features.
We do not collect payment information, passport numbers, national insurance numbers, or other sensitive financial or identity data.
3. Legal Basis for Processing
| Purpose | Lawful Basis |
|---|---|
| Account creation and authentication | Contract — necessary to provide the service you requested |
| Marketing emails (new prints, updates) | Consent — opt-in only, with double confirmation |
| Security and fraud prevention | Legitimate interest |
| GDPR consent records | Legal obligation — required to demonstrate compliance |
4. Cookies
This site uses only essential cookies required for authentication (session management). We do not set analytics, advertising, or tracking cookies.
| Cookie | Purpose | Duration |
|---|---|---|
sb-* | Supabase authentication session | Session / 7 days |
Your cookie consent preference is stored in your browser's
localStorage (not a cookie) and is not transmitted to our servers.
5. How We Use Your Data
- To send you a sign-in link when you log in.
- To give you access to The Lab tools (chemical calculator, development timer, reference library).
- To store your roll log and saved recipes if you use those features.
- To send you marketing emails if you opted in — only after you confirm via double opt-in.
- To maintain a GDPR audit trail of your consent choices.
We never sell, rent, or share your data with third parties for their own marketing purposes.
6. Third-Party Processors
We use the following sub-processors. All process data under appropriate GDPR safeguards.
| Processor | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage | EU (Ireland / Frankfurt) |
| Cloudflare | CDN, DNS, DDoS protection | EU edge nodes |
| MailerLite | Marketing email delivery (opt-in subscribers only) | EU |
7. Data Retention
| Data | Retention Period |
|---|---|
| Account data (email, name, preferences) | Until you delete your account |
| Roll log, saved recipes | Until you delete them or your account |
| GDPR consent audit records | 7 years (legal obligation — anonymised after account deletion) |
| Security logs (IP, user agent) | 90 days |
8. Your Rights Under GDPR
As a data subject in the EU/EEA, you have the right to:
- Access — request a copy of all personal data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion of your account and personal data ("right to be forgotten").
- Data portability — receive your data in a machine-readable format (JSON).
- Restriction — ask us to stop processing your data in certain circumstances.
- Object — object to processing based on legitimate interest.
- Withdraw consent — unsubscribe from marketing emails at any time.
You can exercise most of these rights from your account settings. For data access or deletion requests, email us at hello@neilbradshaw.net. We will respond within 30 days.
You also have the right to lodge a complaint with the Irish supervisory authority, the Data Protection Commission.
9. Security
We take reasonable technical and organisational measures to protect your data, including: encrypted connections (HTTPS), hashed passwords, Row Level Security on the database, and rate limiting on authentication endpoints.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated by updating the "Last updated" date and, where appropriate, notifying you by email.
11. Contact
For any privacy-related questions or requests, contact:
Neil Bradshaw Photography
hello@neilbradshaw.net