Privacy notice

Last updated: October 2026

Who I am

I am David Clements, a sole trader trading as DCD Photo Restoration & Video Tape Transfer (“DCD”, “I”, “me”). I provide photo restoration, video tape transfer and cine film digitisation services from Chorley, Lancashire.

You can contact me at:

I am the controller responsible for deciding how your personal information is used. This notice explains what I collect, why I use it, who I share it with and your choices and rights.

Information I use

Depending on your enquiry or order, I may use:

  • contact and delivery details, such as your name, email address, telephone number and postal address;

  • order and payment administration details, such as the work requested, quote, payment status, invoice and correspondence (I do not receive or store full card details when payment is handled by Mettle (By Natwest);

  • information and media you choose to send me, including photographs, tapes, films, scans, recordings, instructions and information visible or audible in them;

  • website form submissions and technical information needed to operate and protect the website; and

  • marketing preferences, if you choose to receive marketing.

Please send only material you are entitled to provide and avoid including sensitive personal information unless it is needed for the work. Photographs and recordings may contain information about family members or other people as well as you.

 

Why I use it and my lawful bases

I use information for these purposes:

Purpose – Usual lawful basis

  • Replying to enquiries, preparing quotes and carrying out your order | Necessary to take steps at your request before a contract and to perform the contract

  • Taking payment, issuing invoices, keeping tax/accounting records and meeting legal duties | Legal obligation; and, where appropriate, contract

  • Keeping job records, communicating about the order, handling queries or complaints and protecting or establishing legal claims | Legitimate interests in running and protecting my business, balanced against your rights; or legal obligation where applicable |

  • Sending optional marketing messages | Consent, or the limited existing-customer exception where all legal conditions are met |

  • Operating and securing the website | Legitimate interests or, where required, consent for non-essential cookies/technologies |

Where I rely on legitimate interests, those interests are the ordinary administration, security and protection of DCD’s services. You can ask me for more information or object where the law gives you that right.

 

Where information comes from

Usually I receive information directly from you. I may also receive it from a person who arranges or pays for work on your behalf, a delivery company, a payment provider, or website/communications tools used to operate DCD. If someone sends me another person’s material or contact information, I expect them to have authority to do so.

 

Who I share it with

I share only what is needed with service providers who help me run the business, such as:

  • Squarespace, which hosts the website and may provide forms, commerce and analytics;

  • Mettle (By Natwest) for payment processing;

  • Google Mail for correspondence, storing work files or delivering digital files;

  • Royal Mail/Other carrier for returning originals; and

  • professional advisers, insurers, banks or public authorities where needed for legitimate business, legal or regulatory reasons.

 

Customer media and file retention

I use your supplied originals and digital media only to quote for and perform the requested work, quality-check it, deliver the result, deal with a query or complaint, and meet any legal obligation. I will not use identifiable customer photographs, recordings or before-and-after examples for advertising, a portfolio, social media or other publicity unless I obtain your separate permission.

AI-assisted restoration: I may use Adobe Firefly tools, including generative AI features, to help restore or edit photographs. If I use a partner model available through Firefly, the image and prompt needed for the edit may be sent to that model to generate the result. Adobe says that content processed through Firefly is not used to train Adobe or partner generative AI models. I use the image only to carry out your requested work and do not use it for publicity without your separate permission. Please tell me before work begins if you do not want generative AI used on your images.

 

My current retention schedule is:

  • Original physical items: returned by Royal Mail/Other carrier, or kept for collection for 28 days after I tell you they are ready. If they are not collected, I will contact you and explain the next steps; I will not dispose of them without reasonable notice and an opportunity to arrange return/collection, except where the law requires otherwise.

  • Working scans, transfers and restoration files: 28 days after completion/delivery, then securely deleted from active storage. Any copies in routine backups will be overwritten/deleted under the backup cycle, normally within 28 days.

  • Final digital files / re-download copies: 28 days after delivery. After that, I may no longer be able to re-send them; you should make and keep your own copies.

  • Quotes, order correspondence and job records: 12 months after completion, unless needed for a live dispute or legal claim.

 

The UK GDPR does not prescribe one universal retention period. I review information and delete or anonymise it when I no longer need it.

 

Security and incidents

I take reasonable technical and organisational steps to protect information, including limiting access and using a securely protected Google and Adobe accounts. No method of storage or transmission is completely risk-free. If a personal data breach occurs, I will assess it, keep the required records and notify the ICO and affected people where the law requires.

 

Your rights

Depending on the circumstances, you may ask me to:

  • provide access to your personal information;

  • orrect inaccurate information;

  • delete information or restrict how I use it;

  • provide certain information in a portable format;

  • stop processing based on legitimate interests; or

  • withdraw consent, where consent is the basis for a particular use.

You can object at any time to use of your information for direct marketing. This does not affect processing already carried out lawfully. Some rights are subject to exceptions, for example where I must keep records to comply with law or establish a legal claim. To exercise a right, contact me using the details above. I may need to verify your identity. I will respond within the time required by law, normally one month.

You can complain to the Information Commissioner’s Office (ICO) at [ico.org.uk/make-a-complaint](https://ico.org.uk/make-a-complaint/). I would appreciate the chance to address your concern first.

 

Children

My services are intended to be ordered by adults. If you are under 18, please ask a parent or guardian to contact me and arrange the order.

 

Changes

I may update this notice when my services, tools or legal requirements change. The current version and date will appear on this page.