Privacy and Cookies Policy
This policy explains how Stilth Ltd collects, uses, stores and protects personal information when you visit this website, contact us or work with us.
Last updated: 22 July 2026
The organisation responsible for your information
Stilth is operated by Stilth Ltd. For UK data-protection purposes, Stilth Ltd is normally the data controller for personal information collected through this website and through our direct business activities.
Company details
Stilth Ltd
Company number: 16687220
19 Nest Avenue
Kirkby-in-Ashfield
Nottingham
England
NG17 7LU
Email: hello@stilth.co.uk
Website: stilth.co.uk
Personal information collected by Stilth
The information we collect depends on how you interact with Stilth. You are not required to provide personal information simply to browse most areas of the website.
Enquiries and correspondence
This may include:
- Your name
- Your email address
- Your telephone number, where provided
- Your business or organisation
- Information entered into the contact form
- Project details and requirements
- Email and telephone correspondence
Client and project information
This may include:
- Contact and business details
- Project briefs and planning information
- Contracts, quotations and proposals
- Locations and schedules
- Invoices and payment records
- Website login or account access supplied by the client
- Feedback, approvals and project correspondence
Photography and visual content
This may include:
- Photographs or video containing identifiable people
- Names and roles connected with a photography project
- Model-release or permission information
- Image captions and project descriptions
- Technical image metadata
- Client selection and approval information
Website and analytics information
This may include:
- Browser and device type
- Approximate geographic area
- Pages visited and time spent on the website
- The website or search result that referred you
- Interactions with website pages and links
- Cookie identifiers where you have consented
- Technical and security information
Supplier and collaborator information
This may include:
- Name and contact details
- Professional role and business details
- Availability and assignment information
- Invoices and payment details
- Contracts and project correspondence
Information from other sources
We may receive information from clients, project partners, publicly available business sources or people authorised to act on your behalf.
For group or event photography, the organisation commissioning the work may provide names, schedules, access requirements or other information needed to complete the assignment.
Why Stilth processes personal information
Responding to enquiries
To review your requirements, answer questions, arrange discussions and prepare quotations or proposals.
Delivering services
To plan and provide photography, website design, visual-content and related business services.
Managing projects
To organise schedules, locations, deliverables, approvals, photographers and other project requirements.
Client administration
To maintain contracts, invoices, payment records and other necessary business documentation.
Operating the website
To maintain website security, identify faults, monitor performance and understand how visitors use the website.
Improving Stilth services
To assess which services, pages and content are useful and improve how Stilth presents and delivers its work.
Portfolio and promotion
To display selected project work where the necessary contractual permission, consent or other appropriate basis is in place.
Legal and regulatory obligations
To comply with company, accounting, tax, insurance, data-protection and other applicable legal requirements.
Protecting the business
To prevent misuse, maintain security, resolve disputes and establish, exercise or defend legal claims.
The legal reasons we rely on
UK data-protection law requires Stilth to have an appropriate lawful basis whenever personal information is processed.
The lawful basis will depend on the information involved and why it is being used.
Our principal lawful bases
- Contract: where processing is necessary to take steps requested before a contract or to perform an agreed contract.
- Legal obligation: where information must be processed to comply with applicable company, tax, accounting or regulatory requirements.
- Legitimate interests: where processing is reasonably necessary to operate and protect the business, manage client relationships, improve services or respond to business enquiries.
- Consent: where you have made a clear choice, including consent to non-essential analytics cookies or particular uses of photography.
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that took place before consent was withdrawn.
What happens when you contact Stilth
Information submitted through the website contact form is sent to a Stilth business email account hosted through Google Workspace.
We use this information to respond to your enquiry, assess your requirements and prepare any requested quotation or proposal.
Submitting an enquiry does not automatically add you to a marketing mailing list.
Please avoid sending unnecessary sensitive information
Do not submit passwords, payment-card details, medical information or other highly sensitive personal information through the general contact form.
Where account access is required for a website project, Stilth will agree an appropriate method of providing that access.
Passwords and access credentials should be changed or removed when they are no longer required.
Google Analytics and Search Console
Stilth uses Google Analytics to understand how visitors find and use the website. This may include information about pages viewed, interactions, device type, browser, approximate location and referral source.
Google Search Console is used to understand how the website performs in Google Search, identify technical issues and review search queries that lead people to the website.
Analytics information is used to improve website performance, content and usability. It is not used by Stilth to identify visitors by name.
Your analytics choice
Google Analytics cookies should only be activated after you have accepted analytics cookies through the website’s cookie controls.
You may reject analytics cookies and continue to use the main features of the website.
You can change or withdraw your cookie choice through the cookie settings control available on the website.
Google Analytics event-level data is normally retained for up to 14 months within our Analytics property. Aggregated reports may remain available for longer.
How this website uses cookies
Cookies are small text files placed on a device when a website is visited. They can support essential website functions, remember preferences and provide information about website use.
Strictly necessary cookies
These support essential functions such as website security, administration, network management and remembering cookie choices.
The website cannot operate properly without some of these cookies. They do not require consent where they are genuinely necessary.
Analytics cookies
These help Stilth understand website visits and interactions so the website and its content can be improved.
Analytics cookies are non-essential and should only be used after you have given consent.
Marketing cookies
Stilth does not currently use the website for targeted advertising or remarketing campaigns.
This policy and the website consent controls will be updated before any marketing or advertising cookies are introduced.
Cookies that may be used
| Cookie or category | Purpose | Typical duration |
|---|---|---|
| Cookie preference | Remembers whether analytics cookies have been accepted or rejected. | Normally 6–12 months |
| WordPress or hosting security cookies | Supports administration, website security and essential technical functions. | Session or limited duration |
_ga |
Used by Google Analytics to distinguish website visitors where analytics consent has been given. | Up to 2 years |
_ga_* |
Used by Google Analytics to maintain and measure website session information where consent has been given. | Up to 2 years |
The exact cookie names may change when website services or plugins are updated. The website’s cookie-management tool should provide the most current information about active cookies.
Who may receive personal information
Stilth does not sell personal information to data brokers or advertisers.
Information is shared only where reasonably necessary to provide services, operate the business, comply with the law or protect legitimate interests.
Recipients may include
- Google Workspace, Gmail, Google Analytics and Google Search Console
- Website hosting, domain and infrastructure providers
- WordPress and necessary website-service providers
- Photographers and trusted project collaborators
- Accountants, insurers and professional advisers
- Banks and payment-service providers
- IT, backup and security-service providers
- Regulators, courts, law-enforcement bodies or public authorities where legally required
Photographers and collaborators receive only the information reasonably required to complete their part of a project.
Information processed outside the United Kingdom
Some technology and service providers used by Stilth operate internationally. This means personal information may be processed or accessed in countries outside the United Kingdom.
Where this occurs, we use providers that apply appropriate safeguards for international transfers. These may include UK adequacy regulations, approved contractual clauses or other legally recognised transfer mechanisms.
Further information about a particular provider’s privacy and transfer arrangements can be requested by contacting Stilth.
How long information is retained
Stilth retains personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, insurance and dispute-resolution requirements.
Enquiries that do not become projects
Enquiry information will normally be retained for up to 24 months after the last meaningful communication.
Client and project records
Contracts, project correspondence and related business records may normally be retained for up to six years after completion to manage contractual obligations and possible legal claims.
Accounting and tax information
Invoices, payment records and relevant accounting information are generally retained for at least six years from the end of the financial year to which they relate, or longer where legally required.
Photography and project files
Project images and files are retained for the time needed to fulfil the contract, maintain the agreed licence, provide backup or support and resolve possible disputes.
Selected final images may be retained for a longer archive or portfolio period where the appropriate permission or contractual right exists.
Google Analytics
User-level event information is normally retained for up to 14 months, subject to the settings and retention rules applied by Google Analytics.
Deletion and anonymisation
At the end of the appropriate retention period, information will be securely deleted, anonymised or retained only where there is a valid legal or business reason.
Current and future marketing activity
Stilth does not currently operate a routine newsletter or automated email-marketing programme through this website.
Contacting Stilth about a project does not automatically subscribe you to promotional emails.
If marketing is introduced
If Stilth introduces a CRM, newsletter or email-marketing platform, this policy will be updated to explain the provider, information involved and lawful basis.
Where consent is required, marketing consent will be presented as a separate and optional choice. It will not be bundled into a general enquiry or service agreement.
Marketing messages will include an appropriate method of unsubscribing or objecting to further communications.
How personal information is protected
Stilth uses reasonable technical and organisational safeguards intended to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.
Measures may include
- Encrypted website connections
- Protected business accounts
- Multi-factor authentication where available
- Access limited to people who need the information
- Website software and security updates
- Backup and recovery arrangements
- Confidentiality requirements for collaborators
- Removal of access when it is no longer required
No internet or storage system can be guaranteed to be completely secure. Any suspected data-security issue should be reported to hello@stilth.co.uk.
Rights over your personal information
Depending on the circumstances, UK data-protection law may give you rights concerning information held about you.
Your rights may include
- The right to be informed about processing
- The right to request access to your information
- The right to correct inaccurate information
- The right to request deletion
- The right to restrict particular processing
- The right to object to processing
- The right to data portability where applicable
- The right to withdraw consent
Making a request
To exercise a data-protection right, email:
Please provide enough information to identify the relevant records and understand your request. Stilth may need to verify your identity before releasing or changing personal information.
Some rights are subject to legal exceptions. Information may need to be retained where there is an overriding legal obligation or valid need to establish, exercise or defend a legal claim.
Photography and information relating to children
Stilth’s website and general commercial services are not directed at children.
A commissioned photography project may involve children, for example at a business event, community activity, educational setting or family organisation. In those circumstances, the client and Stilth must agree the appropriate permission, safeguarding and image-use arrangements before photography takes place.
Children should not submit personal information through the website without the involvement of a parent, guardian or responsible organisation.
Contact Stilth about your information
Please contact Stilth first if you have a question or concern about how your personal information has been handled.
Email: hello@stilth.co.uk
Information Commissioner’s Office
You also have the right to raise a concern with the Information Commissioner’s Office, the UK regulator responsible for data protection.
Changes to this policy
This policy may be updated when Stilth changes its services, website technology, suppliers or processing activities, or when legal requirements change.
The latest version will be published on this page and the date at the top of the policy will be updated.