Eriena Photography

Last updated: April 2026

This Privacy & Cookie Policy explains how Eriena Photography ("we", "us", "our") collects, uses, and protects information when you visit this website. We are committed to handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR).

1. Who We Are

Eriena Photography is a sole-trader equestrian photography business based in Central Scotland. We are the data controller for information collected through this website. You can contact us via our contact page.

2. What Data We Collect

Account & order information

When you register or place an order we collect your name, email address, and order details. This is necessary to fulfil your purchase and provide customer support.

Contact form submissions

If you use our contact form we collect your name, email address, and message content in order to respond to your enquiry.

Analytics data (with your consent)

With your consent, we collect anonymous usage data via Google Analytics — see Section 4 below.

3. How We Use Your Data

To process and fulfil orders for digital image licenses
To send order confirmations and download links by email
To respond to enquiries submitted via the contact form
To maintain the security of your account
To understand how the site is used and improve it (analytics, with consent only)

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Cookies

Cookies are small text files stored on your device. We use two categories:

Strictly necessary cookies

These are essential for the site to function and cannot be disabled. No consent is required for these under PECR.

Name	Purpose	Expiry
`eriena_session`	Maintains your login session, shopping cart, and CSRF form protection	Browser session
`XSRF-TOKEN`	Protects forms against cross-site request forgery attacks	Browser session
`eriena_cookie_consent`	Stores your cookie preference so we do not ask again	12 months

Analytics cookies (optional — requires your consent)

With your consent we use Google Analytics to collect anonymous information about how visitors use this site (pages visited, session duration, approximate location). This helps us understand what is working well and improve the site. These cookies are only set after you click Accept on the cookie banner.

Name	Purpose	Expiry
`_ga`	Distinguishes unique users (anonymous)	2 years
`_gid`	Distinguishes unique users (anonymous)	24 hours
`_gat`	Throttles analytics request rate	1 minute

Google Analytics data is processed by Google LLC. For more information see Google's Privacy Policy.

Managing your preferences

You can change your cookie preference at any time using the Cookie Settings link in the footer. You can also delete or block cookies via your browser settings, though this may affect how the site works.

5. Your Rights

Under UK GDPR you have the right to:

Access — request a copy of the personal data we hold about you
Rectification — ask us to correct inaccurate data
Erasure — ask us to delete your data where we no longer have a lawful basis to hold it
Object — object to processing based on legitimate interests
Withdraw consent — withdraw analytics consent at any time via Cookie Settings

To exercise any of these rights please contact us. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

6. Data Retention

Order and account data is retained for as long as your account is active and for a reasonable period thereafter to comply with legal obligations. Contact form enquiries are retained only as long as necessary to respond to your enquiry.

7. Changes to This Policy

We may update this policy from time to time. The current version will always be available at this page. Significant changes will be notified on the website.