PRIVACY POLICY (UK GDPR)

1. Commitment to Data Minimization

P4NDA Shoots is committed to safeguarding personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We operate strictly under a principle of data minimization: we only collect information necessary to coordinate trackside media coverage, issue invoices, and securely deliver digital client assets.

2. Information We Collect

• Contact Particulars: Full name, email address, phone number for circuit coordination.
• Event Scope: Target race dates, circuits, vehicle liveries, and racing series categories.
• Invoicing & Transactions: Billing addresses and payment reference identifiers. We do NOT store credit or debit card numbers on our servers; all payment transactions are handled through PCI-DSS Level 1 compliant processors (such as Stripe).
• Client Portal Accounts: Hashed authentication credentials and access logs for private client proofing galleries.

3. Photographic Metadata & EXIF Handling

When processing public gallery photographs, we intentionally strip sensitive geolocation coordinates (GPS latitude/longitude) to protect client privacy and vehicle storage locations. Only technical optical parameters (focal length, shutter speed, aperture, ISO) are retained for educational and archival indexing.

4. Data Retention & Erasure

Enquiry contact details are retained only for the duration of the active booking negotiation and associated championship season. Clients may request full erasure of their client portal account and associated contact metadata at any time by contacting privacy@p4ndashoots.co.uk.

5. Your Statutory Rights

Under UK GDPR, you have the right to request access to the personal data we hold about you, request rectification of inaccurate data, object to processing, and lodge a complaint with the UK Information Commissioner's Office (ICO).