As the designer on your project, I might occasionally need access to sensitive information. This could include contact details, names, locations, photos - anything which GDPR would call 'personally identifiable information'. 

Please ensure that before passing on any sensitive information, you have gathered the appropriate permissions (e.g. if you are using photos of children, please ensure you have their parent or carer's consent). 

Any contact details shared with me in the course of a project (apart from the client's details) will be immediately deleted upon completion of the project. Photographs will be retained as part of the project files, but will never be used for any other purpose than to revisit that particular project in the future.

Data shared with me by a client will never be passed on to third parties, except with the express permission of the client beforehand (e.g. photographs passed to a trusted web developer).