We take the privacy of our clients and contacts very seriously and we ask that you read this privacy notice carefully as it contains important information about who we are, how and why we collect, store, use and share personal information, your rights in relation to your personal information and how to contact us and supervisory authorities in the event you have a complaint.
Who we are
ABC Image collects, uses and is responsible for certain personal information that we receive about individuals. When we do so, we are regulated under the General Data Protection Regulation (GDPR) which applies across the European Union (including in the United Kingdom) and we are responsible as ‘controller’ of that personal information for the purposes of those laws.
Our service is not directed to minors under the age of 16, and we do not knowingly collect personal data from persons under the age of 16 without obtaining parental consent. By providing us with your data, you warrant that you are over 16 years of age.
Our details are:
Full name of legal entity: ABC Image
Email address: firstname.lastname@example.org
Postal address: 61 Dundale Road, Tring, Hertfordshire HP23 5BX
The personal information we collect and use
Personal data means any information capable of identifying an individual. In the course of our business activities, we collect the following personal information when it is provided to us:
- Identity data – your first name, surname, title, date of birth and gender
- Contact date – your billing address, delivery address, email address and telephone numbers
- Transaction data – details about payments between us and other purchases made by you
- Technical data – may include your login data, internet protocol address, browser type and version, browser plug-ins, time zone setting and location, operating system and platform and other technology on the devices you use to access this site
- Usage data – may include details about how you use our website, products and services
- Marketing and Communications data – may include your preferences in receiving marketing communications from us or third parties and your communication preferences.
We do not collect any sensitive data. This refers to data that includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data. We do not collect any information about criminal convictions or offences.
How we collect your personal data
We collect your personal data in a number of different ways including:
- Direct interactions – face to face, through social media, by filling in a form on our site (or otherwise), by phone, email or post
- Tracking technologies – for example through the use of ‘cookies’. These are text-only pieces of information that a website transfers to an individual’s hard drive or other web-browsing equipment for record-keeping purposes. Cookies allow the site to remember important information that will make your use of the site more convenient.
How we use your personal information
We use the information we collect in a variety of ways to provide the Service and to operate our business, including the following:
- Operations – to operate, maintain, enhance and provide the service and information that you request, to respond to comments and questions and to provide support to Clients of the Service.
- Improvements – to understand and analyse the usage trends and preferences of our clients and contacts, to improve the service, and to develop new products, services, features, and functionality.
- Communications – we may use a contacts’s email address to contact that visitor administrative purposes such as customer service, or with updates on promotions and events, relating to services offered by us and by third parties we work with that we believe will be relevant and of interest to you. You have the ability to opt-out of receiving any promotional communications as described below under ‘your legal rights’.
Who we share your personal information with
Except as described in this Policy, we will not intentionally disclose any personal information that we collect or store on the Service to third parties without your consent. We may disclose information to third parties if you consent to us doing so, as well as in the following circumstances:
- Unrestricted Information – any information that you voluntarily choose to include in a public area of the service, such as on a chat forum or a Facebook group will be available to any visitor or contact who has access to that content.
- Service Providers – we work with third party service providers who provide website, application development, hosting, maintenance, and other services for us. These third parties may have access to, or process personal data as part of providing those services for us. We limit the information provided to these service providers to that which is reasonably necessary for them to perform their functions, and our contracts with them require them to maintain the confidentiality of such information.
- Non Personally Identifiable Information – we may make certain automatically-collected, aggregated, or otherwise non-personally-identifiable information available to third parties for various purposes, including (i) compliance with various reporting obligations; (ii) for business or marketing purposes; or (iii) to assist such parties in understanding our Clients’, Users’ and Visitors’ interests, habits, and usage patterns for certain programs, content, services, and/or functionality available through the Service.
- Law Enforcement, Legal Process and Compliance – we may disclose Personal Data or other information if required to do so by law or in the good-faith belief that such action is necessary to comply with applicable laws, in response to a court order, judicial or other government subpoena or warrant, or to otherwise cooperate with law enforcement or other governmental agencies.
We also reserve the right to disclose Personal Data or other information that we believe, in good faith, is appropriate or necessary to (i) take precautions against liability, (ii) protect ourselves or others from fraudulent, abusive, or unlawful uses or activity, (iii) investigate and defend ourselves against any third-party claims or allegations, (iv) protect the security or integrity of the Service and any facilities or equipment used to make the Service available, or (v) protect our property or other legal rights, enforce our contracts, or protect the rights, property, or safety of others.
Third party cookies
We are legally required to disclose whether other third parties may collect personally identifiable information about an individual’s online activities from our Site or Service.
The information gathered by these third parties is used to make predictions about your interests or preferences so that they can display advertisements or promotional material on this Site and on other sites across the Internet tailored to your apparent interests.
The business partners and advertising networks that serve interest-based advertisements on the Services have limited access to a small amount of information about your profile and your device, which is necessary to serve you advertisements that are tailored to your apparent interests. It is possible that they may reuse this small amount of information on other sites or services.
How long will we keep your personal information for
We will hold client personal information for a period of at least six years after we have completed the work that we do for you. By law, we have to keep basic information about our clients for six years after they cease being clients for tax purposes.
For contacts and users of our website, we will hold your contact details only for so long as we reasonably consider that the information we might provide to you is relevant to and of interest to you and we will delete your contact details if you ask us not to continue to send such information to you or at any time if we have reason to think that the information is out of date and in any case no longer than for six years after you last contacted us.
Reasons we collect and process your personal information
We use and process your personal data in a number of different ways as follows:
- To register you as a new client. As a client, we rely on the fact that it is necessary for us to have and to use that information for the performance of our contract with you as the lawful basis on which we collect and use your personal data.
- To process and deliver your order including manage payments, and collect and recover money owed to us.
- To manage and protect our site for data analysis, trouble shooting, system maintenance, support, reporting and hosting of data for our legitimate reasons for running our business, provision of administration and IT services and network security.
- To deliver relevant content and advertisements for our legitimate interests to keep you informed of our services and other information about our business we reasonably consider might be of interest to you and so we can develop our products and services. This will be limited to information sent to you by email and with every communication you will be given a clear and straightforward option to opt out of further communications and to ask us to delete the personal information that we hold about you.
You will receive marketing communications from us from time to time if you have requested information from us in the past or purchased products or services from us, and, if you provided us with your details when you entered a competition or registered for a promotion or free resources.
If you receive emails from us, you may unsubscribe at any time by following the instructions contained within the email by clicking on the ‘unsubscribe’ link, or by sending an email to the address provided in the “How to Contact Us” section.
Please be aware that if you opt-out of receiving commercial emails from us or otherwise modify the nature or frequency of promotional communications you receive from us, it may take up to ten business days for us to process your request. This does not apply to personal data provided to us as a result of a product/service purchase.
Consequences of our use of your personal information
We do not believe that there are likely to be any serious consequences to you of our use of your personal information. The potential consequences that we have identified are:
- The risk of the personal information that we hold about you being accidentally lost, or used or accessed in an unauthorised way. We have taken steps to protect against this (please see further information under the heading “Keeping your personal information secure” below).
- You may, from time to time, receive unsolicited communications from us. However, we do not believe that the frequency, content or manner of these communications will risk any breach of your privacy rights.
We will not share any Personal Data with third-parties for their direct marketing purposes to the extent prohibited by law. If our practices change, we will do so in accordance with applicable laws and will notify you in advance.
Transfer of your information out of the EEA
We may use service providers based outside the European Economic Area (EEA). For example, we may use email servers such as Mailchimp or document management systems such as Dropbox. Their processing of your personal data may involve a transfer of data outside the EEA.
Whenever we transfer your personal data out of the EEA, we do our best to ensure a similar degree of security of data by ensuring at least one of the following safeguards is implemented:
- We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission;
- Where we use certain service providers, we may use specific contracts or codes of conduct or certification mechanisms approved by the European Commission which give personal data the same protection it has in Europe;
- Where we use providers based in the United States, we may transfer data to them if they are part of the EU-US Privacy Shield which requires them to provide similar protection to personal data shared between the Europe and the US.
If none of the above safeguards is available, we may request your explicit consent to the specific transfer. You will have the right to withdraw this consent at any time.
Your legal rights
Under the General Data Protection Regulation you have a number of rights in relations to your personal data. These include the right to:
- request access to your personal information and to certain other supplementary information that this Privacy Notice is already designed to address;
- request us to correct any mistakes in your information which we hold;
- request the erasure of personal information concerning you in certain situations;
- request transfer of personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations;
- object at any time to processing of personal information concerning you for direct marketing;
- request restriction of our processing of your personal information in certain circumstances;
- request to withdraw consent.
For further information about these rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals rights under the General Data Protection Regulation.
If you would like to exercise any of those rights, please:
- email, call or write to us c/o Alice Barnes at: ABC Image, 61 Dundale Road, Tring HP23 5BX, tel: 07739 542346 or email: email@example.com
- provide us with information to identify you and your relationship with us;
- provide us with proof of your identity and address (a copy of your driving licence or passport and a recent utility or credit card bill); and
- let us know the information to which your request relates.
If you are not happy with any aspect of how we collect or use your data, you have the right to complain to the ICO, the UK supervisory authority for data protection issues. The ICO may be contacted at https://ico.org.uk/concerns/ or telephone: [0303 123 1113]. We would be grateful if you would contact us first if you do have a complain to that we can try to resolve it for you.
Keeping your personal information secure
We have appropriate security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way, altered or disclosed. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
If you want information on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.
Please revisit this page periodically to stay aware of any changes to this Policy, which we may update from time to time. If we modify the Policy, we will make it available through the Service, and indicate the date of the latest revision, and will comply with applicable law. Your continued use of the Service after the revised Policy has become effective indicates that you have read, understood and agreed to the current version of the Policy.
This privacy notice was published May 2018.
How to contact us
Please contact us if you have any questions about this privacy notice, the information we hold about you or your consent choices;
Full name of legal entity: ABC Image
Email address: firstname.lastname@example.org
Postal address: 61 Dundale Road, Tring, Hertfordshire HP23 5BX