Privacy Policy
1. Who is responsible for your data?
My name is Anna Kharchenko. I operate By Anna Photography and am the data controller responsible for processing your personal data as described in this policy.
If you have any questions about how I use your data, you can contact me at:
Email: privacy@byannaph.com
2. What data do I collect?
There is no contact form on my website. You can freely browse photographs and follow links to my social media profiles.
If you consent to analytics, the website may collect the following information:
- pages you visit;
- links and buttons you click;
- how far you scroll down a page;
- approximate duration of your page visit;
- device type and browser viewport size;
- referrer information (how you arrived at the website);
- whether you have visited the website before.
To associate related events, the website may generate a pseudonymous Visitor ID and a Session ID. These identifiers do not contain your name, but they help distinguish unique visits over time.
The server hosting the website may also process technical information required for its operation and security. This may include your IP address, request timestamps, and server log files.
I do not ask you to submit your name, phone number, or other contact details via any form on this site, as no such form exists.
3. When does analytics tracking begin?
Upon your first visit, the website invites you to accept, decline, or customise analytics tracking.
Analytics tracking that requires consent will only commence after you have explicitly permitted it.
If you decline analytics, the website will not transmit records of your page views, clicks, or other events that belong to analytics tracking.
4. Why do I use this information?
I use this information for the following purposes:
- Improving the website: to understand how visitors interact with pages and make the website more user-friendly.
- Analytical reporting: to review aggregate traffic statistics.
- Website security and operation: to ensure reliable site performance, detect errors, and protect against misuse.
- Remembering your choices: to ensure the website respects your cookie and privacy preferences.
5. What is the lawful basis for processing?
I process personal data only where there is an appropriate lawful basis under UK data protection law.
Where applicable law requires consent for the deployment of analytics cookies or similar technologies, I obtain your consent before tracking begins.
For website security and reliable operation, data may be processed where necessary for legitimate operational interests, in accordance with applicable law.
6. Who may process this data?
To operate the website and analyse its usage, I use the following service providers:
- Render — hosts the website and its back-end infrastructure. Technical data may be processed for service delivery and security.
- Google Sheets — used to store analytics event records securely.
- Looker Studio — used to review and analyse aggregated statistics.
- Google Analytics 4 — may be used for analytics measurement if enabled.
Access to my analytics spreadsheets is strictly restricted and not made publicly accessible.
The website also contains links to Instagram, Telegram, and WhatsApp. Following these links takes you to external services governed by their own respective privacy policies.
7. Are data transferred outside the United Kingdom?
Some service providers may process data in countries outside the United Kingdom. Depending on the settings and operations of Render and Google services, data may be processed internationally.
Where such transfers occur, appropriate UK legal transfer mechanisms are applied to ensure your data remain protected.
8. How long is data retained?
The retention period depends on the category of data.
Data stored in your browser remain until cleared by you or removed by the system. Retention of analytics records in the back-end system and Google Sheets is governed separately.
Retention period for detailed analytics records: 12 months.
After this period expires, detailed individual event records are deleted or irreversibly aggregated so that individual visitors can no longer be identified.
9. How is data protected?
I restrict access to analytics records and ensure credentials and datasets remain secure and private.
While no online transmission or storage system can be guaranteed 100% secure, appropriate technical measures are taken to safeguard information against unauthorized access or disclosure.
10. What are your data protection rights?
Under UK GDPR, you may have the right to:
- request access to the personal data held about you;
- request correction of inaccurate personal data;
- request erasure of your personal data;
- request restriction of processing;
- object to processing based on legitimate interests;
- request data portability where applicable;
- withdraw consent at any time, where processing relies on consent.
To exercise any of these rights, please contact privacy@byannaph.com.
11. How to manage your cookie preferences
You can review or adjust your privacy preferences at any time by clicking this link:
You can toggle analytics tracking on or off. Withdrawing consent stops the collection of new analytics events but does not affect the lawfulness of processing carried out prior to withdrawal.
12. How to lodge a complaint
If you have any concerns regarding how your data is handled, please contact me first so I can resolve the matter.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):
https://ico.org.uk/make-a-complaint/
13. Contact details
Anna Kharchenko
By Anna Photography
Website: https://www.byannaph.com
Email: privacy@byannaph.com