1.1 OUR PRIVACY MISSION STATEMENT
“At Deborah Heynes Photography, we value the trust placed in us by customers and suppliers who give us their personal data. Data security is one of our highest priorities and we aim to be as clear as possible about what we do with personal data and why we do it.”
1.2 OUR PRIVACY STATEMENT FOR DEBORAH HEYNES PHOTOGRAPHY
Your privacy is really important to us, and we understand how important it is to you. Our aim is to be as clear and open as possible about what we do and why we do it. Deborah Heynes Photography is committed to the privacy of all its users and customers.
1.3 WHO ARE WE
“We” or “us” are Deborah Heynes, trading as Deborah Heynes Photography, a self-employed professional Equine Photographer, whose address is Two Acres, Underlane, Newmills, Launceston, Cornwall, PL15 8SN.
1.3 WHO THIS POLICY APPLIES TO
This policy applies to both service users and website visitors. These terms have the following meanings;
Website visitors: anyone visiting our website.
Service User: anyone that receives our services, whether this is provided directly by us or via a third party.
Services: Any assistance we provide to you which includes but is not limited to photoshoots and provision of image and image products.
2. INFORMATION MANAGEMENT AND USE
2.1 INFORMATION WE COLLECT
Our web system collects some information about each visitor. We may employ third party experts to help us look at this information. However, we make sure that anyone we employ treats all information with the same sensitivity and security that we treat it.
As a Photographer, we also collect information about our clients in the form of digital images. These images are stored on securely-held external hard-drives, and in order to provide continued services for our clients are kept for as long as Deborah Heynes Photography remains trading.
We will only hold information that is relevant to provide you with the services you have undertaken with us. This information will only be held for as long as reasonably necessary. The information we typically hold for individuals will be their first and last name, contact address, contact telephone number and email address.
2.2 HOW WE USE YOUR INFORMATION
We may use your Information to (but not limited too):
• Create and manage your account, when you purchase from us;
• Provide commercial quotes for our products and services;
• Process your purchase transactions;
• Update you on the status of your orders;
• Provide you with customer support;
• Subscribe you to a newsletter, if you have opt-ed in;
• Communicate with you about and manage your participation in contests, offers or promotions;
• Solicit your opinion or feedback,
• Evaluate and improve the quality of our products, services and websites;
• Secure our systems and applications;
• Allow for the provisioning of services; and
• Enforce our legal rights or comply with legal requirements.
2.3 VISITORS TO OUR WEBSITES
When someone visits our website we use a third party service, Google Analytics, to collect standard internet log information. We do this to find out things such as the number of visitors to the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do want to collect personally identifiable information through our website, we will be up front about this. We will make it clear when we collect personal information and will explain what we intend to do with it.
We use a third party service, Wix.com, to publish our website and blog. We use a standard Wix.com service to collect anonymous information about users’ activity on the site, for example the number of users viewing pages on the site, to monitor and report on the effectiveness of the site and help us improve it.
2.5 SOCIAL MEDIA
We personally manage all our social media interactions.
If you send us a private or direct message via social media the message will be stored by the social media provider, in line with their own privacy policies. It will not be shared with any other organisations.
2.6 WHO WE SHARE THE INFORMATION WITH
We will not sell, distribute or lease your personal information to third parties. We may need to disclose your information for internal business analysis purposes, or to share your information with our suppliers to place orders on your behalf.
Before passing on any information to third parties in order to provide services or training we will always get consent from the individual or client before doing so.
2.7 DATA COLLECTION AND PURPOSE SPECIFICATION
We collect the personal data that you may volunteer while using our services. We do not collect information about our visitors from other sources, such as public records or bodies, or private organisations. We do not collect or use personal data for any purpose other than the specific services.
2.8 STORAGE OF DATA
We will not store your personal information for any longer than we need to, however we may be obliged by law to store your communications and personal information, and we may need to show details of these to government or authorised officials upon request. Like many websites, we use log files to monitor the effectiveness of our website.
The data we collect from you will be stored within the UK. By providing us with this data, you agree to this storing and/or processing.
All our data is stored on our secured servers or on secure servers that are operated by a third party.
If we have provided you with a password which enables you access to to our website, you are responsible for keeping this password confidential.
Unfortunately, the transmission of data and information via the internet is not completely secure. Although we do our very best to protect your personal data, we cannot guarantee the security of your data transmitted to our website; the transmission is at your own risk.
We have implemented security policies, rules and technical measures to protect the personal data that we have under our control from:
• Unauthorised access
• Improper use or disclosure
• Unauthorised modification
• Unlawful destruction or accidental loss
• Unlawful processing
We always respect the confidentiality of our visitors’ personal data. We ensure that your personal data will not be disclosed to State institutions and authorities except if required by law, other regulation or for funding purposes.
2.10 ACCESS TO THE PERSONAL DATA WE MAY HOLD ABOUT YOU
You can ask us whether we are keeping personal data about you upon request, which you can indicate by:
• Post: Deborah Heynes Photogoraphy, Two Acres, Underlane, Newmills, Launceston, Cornwall, PL15 8SN.
We will provide you with a readable copy of the personal data which we keep
about you, within one month of receipt of this request – although we will
before require proof of your identity. This can be extended by two months
where the request for rectification is complex. We will provide this
information free of charge.
We will however charge a reasonable fee when a request for information is manifestly unfounded or excessive, particularly if it is repetitive. We may also charge a reasonable fee to comply with the requests for further copies of the same information. This fee is based on the administrative cost to provide this information.
We allow you to challenge the data that we hold about you and, where appropriate, you may have the data erased, rectified or amended if it is incorrect or inaccurate. We reserve the right to refuse to provide our visitors with a copy of their personal data if the request is manifestly unfounded or excessive, but we will give reasons for our refusal. We do, however, allow you to challenge our decision to refuse to provide you with a copy of your personal data. You have the right to complain to the supervisory authority and to a judicial remedy without undue delay and at the latest within one month.
2.11 ERASURE OF DATA
You have a right to have your personal data erased to prevent processing in the following specific circumstances:
• Where the personal data is no longer necessary in relation to the purposes for which it was originally collected/processed.
• If you wish to withdraw consent.
• If you object to the processing and there is no overriding legitimate interest for continuing the processing.
• The data was unlawfully processed in accordance with the GDPR.
• The personal data has to be erased in order to comply with a legal obligation.
• The personal data is processed in relation to the offer of information society services to a child.
3. POLICY MANAGEMENT
3.1 NOTIFICATION OF CHANGES TO THIS POLICY
3.2 PRIVACY SUPPORT
Post: Two Acres, Underlane, Newmills, Launceston, PL15 8SN.
We try to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.
This privacy notice was drafted with brevity and clarity in mind. It does not provide exhaustive detail of all aspects of Deborah Heynes Photography’s use of personal information. However, we are happy to provide any additional information or explanation needed. Any requests for this should be sent to the address below.