3 Peaks Photos Privacy Notice

Controller and contact

3 Peaks Photos is the controller for the personal data processed through the public website and related customer support flows. Use the contact page if you need to reach us about a privacy question, order issue, or image request.

What we collect

• Only the minimum account and sign-in details needed to let you register or sign in.
• Basket, order, and download records when you buy images.
• Payment status and provider references, but not full card details.
• Support messages, contact form submissions, and any follow-up emails.
• Technical logs and basic security information needed to run and protect the site.
• Cookies and similar browser storage used for sessions, consent, and site preferences.
• Mountain-sport event photographs and event information that may identify participants.
• Search inputs you provide, such as participant number, event, route, or other details used to help find matching photos.

Why we use it

We aim to minimise the personal data we process and we do not run third-party advertising or track you for advertising purposes. We only ask for the minimum information needed to let you search, buy, download, get support, and use the site securely.

Where we ask for extra information, we will make clear when it is optional. For example, you may choose to provide details so we can notify you if a photographer later adds, updates, or improves images from an event, but this is not required for basic browsing, searching, or purchasing unless we clearly say otherwise in that flow.

• To sell and deliver digital downloads, which is part of our contract with you.
• To operate the gallery, keep the site secure, prevent abuse, and support customers, which are legitimate interests.
• To meet accounting and record-keeping obligations where applicable.
• To use optional analytics only if you have consented to them.

Who we share it with

We use selected providers for hosting, image delivery, storage, transactional email, security, authentication, and payment processing. We only share what is needed for those services.

Payments are processed by a third-party payment provider where that service is used at checkout. We do not receive or store your full card details. Optional analytics and performance monitoring may use third-party tools after you consent.

Retention

• Order and accounting records are kept for as long as needed for business, tax, and legal purposes.
• Basket/session data is kept only as long as needed for the checkout flow or a short guest session.
• Support messages are kept long enough to resolve the issue and review follow-up if needed.
• Consent choices are stored so we remember your preference until you change it.

Cookies and browser storage

The detailed cookie and storage audit lives in the Cookies page. In short, we use necessary storage for the cart, checkout, sign-in, theme preference, remembered sign-in email, and your consent choice. We only create cookies or similar storage where they help you use the site, remember choices, keep the site secure, or understand site performance.

Your rights

• You can ask for access, correction, deletion, restriction, portability, or objection where the law gives you those rights.
• You can withdraw consent for optional analytics at any time through Cookie settings.
• You can contact us if you think an image or record should be reviewed.

Children and participant images

Mountain-sport events may include younger participants. We take care with identifiable participant images and will review removal or safeguarding requests where that is appropriate and legally possible.

Complaints

If you are unhappy with how we handle your data, please contact us first so we can try to fix the problem. You also have the right to complain to the ICO.