CCTV & Photography Policy

Last updated: October 2026

This page explains the promises I make about cameras at my stall, photos, social media, and opt-out requests. If anything here is unclear, ask me at the stall or email data@spectrumwoodwright.co.uk

Spectrum Woodwright Ltd is the data controller for all CCTV footage and photos covered by this page. ICO registration: ZC154318.

Why I use CCTV at my stall

My stall is full of handmade, high-value pieces, and markets can be busy. The cameras are there to deter and investigate theft, to keep customers, myself and anyone helping me safe, and to let me keep an eye on the stall while I'm serving. I also review footage by hand to understand which pieces people pick up and when the stall is busy. It isn't there because I think you're a thief.

What the cameras cover

My stall and the area directly in front of it. They're positioned to avoid neighbouring stalls and the card terminal keypad, with physical privacy shutters where needed. If something happened near my stall and you need help, come and talk to me, though the cameras are unlikely to have caught anything beyond it.

What I don't do

No audio is recorded.
No facial recognition, ever. Face grouping is switched off on every device and account I use.
I have never used, and will never use, my footage or photos to train AI or facial recognition.
CCTV footage never goes online. It's recorded to SD cards on a private, offline network with no internet connection.
Photos taken by myself on my phone are backed up to a secure encrypted private storage. Only I can access them, and they're covered by the same two-week pause, opt-out and takedown rules below.

How long I keep footage and photos.

Recording is triggered by movement.
I review and clear footage weekly. The maximum I'll ever keep it is 45 days.
If footage shows a theft or safety incident, I export that clip and keep it until the police or insurance matter is closed. If an incident is never reported, the clip is deleted after a maximum of 6 months.
If you make a request, complaint or opt-out, I pause deletion of the relevant footage until it's resolved.
Photos I take at markets that I don't use are deleted within 3 months. Photos I publish stay up unless you ask me to take them down.

Who sees it

Only me. I'll share an incident clip with the police or my insurer when it's needed to investigate a specific incident, and I keep a log of every disclosure.

Children

Families visit my stall, so children may appear in footage. Footage is handled the same way for everyone, and I never publish a recognisable child without a parent's clear permission.

Lawful basis

I rely on legitimate interests: protecting my stock, keeping people safe, and understanding my stall. I've assessed and documented this balance, and camera use is kept to what's needed for those purposes.

Photography & social media

Same-day posts I only post on the day using photos taken in "press mode": I'll be wearing a lanyard marked for photography and using a phone with a camera-marked case, taking photos openly. These show the stall, products and people who've said yes. I avoid faces where I can and check with anyone clearly in shot.

Everything else waits two weeks Any other photo or footage, including clips from the cameras, isn't posted or used for at least two weeks after it's taken. Some people need their location kept private in real time, and this pause protects them.

Children I always ask a parent before publishing a recognisable child.

Film cameras Sometimes I hand customers a film camera to take candid shots. I'll ask before using any of those photos.

Timelapses

Occasionally I make timelapses from the cameras. I check every frame for identifiable people and blur them using deface, open-source software that runs entirely offline. It uses a pre-trained face detection model to find faces and blur them. It doesn't identify anyone, doesn't learn from my footage, and sends nothing anywhere. If anyone has opted out for a market, I don't make a timelapse of that market at all.

Opting out

You can opt out of appearing in anything I publish, for any market, without giving a reason:

tell me at the stall, or
use the opt-out form, or
email data@spectrumwoodwright.co.uk

Just give me the market, date and roughly when you were there. If you add a detail like "pink hat", I'll be able to ensure I exclude you; otherwise I'll work to exclude everyone from that time window. Contact details are optional. An opt-out covers publishing: footage is still held for security and deleted on the normal schedule.

Takedowns If something's already been posted and you want it removed, tell me straight away. I aim to remove content the same day. At the latest, it'll be down within 4 days, weekends included.

Your rights and how to ask

You can ask for a copy of footage or photos of you, ask me to delete them, or object to how I use them. I'll respond within one month. When I share footage with you, I'll blur other people. Email data@spectrumwoodwright.co.uk or ask me at the stall.

Full details of your rights are in my Privacy Policy.

Complaints

If you're unhappy with how I've handled your information, please tell me first: email data@spectrumwoodwright.co.uk, message me on social media, or speak to me at the stall. I'll acknowledge your complaint within 30 days, look into it promptly, and tell you the outcome.

You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.