Thanks for taking the time to check my privacy notice!
In order to go about the business of selling the artwork and portraits I create, operating a website and newsletter, and to keep in touch with you either as a client or a newsletter subscriber, I will need to handle certain information about you from time to time. In line with the General Data Protection Regulation, I want to make sure you are clear about what types of information I use, when and where it may be collected, and how I use it in my business. I'd also like to let you know about your rights concerning this information.
There are two types of information (or data) that may be collected: Personal and Non-Personal.
1. Personal Data
This is data that identifies you. Examples include (but are not limited to) names and email addresses. This information is only collected if you voluntarily submit it to me.
The section below details instances in which personal data is collected, how and why I process it (the purpose), the lawful basis for processing it, and how long I keep it for (retention period).
The data I process for communications may include your name and email address. This data is processed if we are in communications regarding a potential transaction (eg an email consultation prior to a paid booking being placed).
Purpose for processing this data: To communicate with you; to take steps, at your request, to enter into a contract.
Lawful basis for the processing: Legitimate interests (namely responding to your enquiries and providing information about my services at your request).
Retention period: This data is kept 3 years after the last instance of communication from you, unless a transaction is entered into (see 1.2 Transactions).
The data I process for transactions may include your name, contact details and postal address. This data is processed if a transaction is carried out with you, or is in progress. This could be a purchase of my original artwork, a commissioned portrait, or any other of my products (such as art prints or jewellery) either directly from me (in person or from a distance online), or from my Etsy shop.
Purpose for processing this data: To communicate with you; to provide my services; to carry out a contract; to keep proper records for tax purposes.
Lawful bases for the processing: Contractual obligations; Legal obligations; Legitimate interests (namely on the basis of an existing client relationship).
Retention period: This data is kept for 6 years after the work was carried out (in accordance with guidance from HMRC). The exception is names, which are kept indefinitely for my records.
1.3 Photographs of pets
This refers to the photographs sent to me as part of the portrait commission process. These are included under Personal Data as a photo may show an identifiable person.
Purpose for processing this data: To provide my services; to carry out a contract or take steps, at your request, to enter into such a contract.
Lawful basis for the processing: Contractual obligations.
Retention period: In the case of a completed contract (whereby a portrait is produced) photographs are kept until the completion of that contract (unless otherwise agreed). In the case of "cold enquiries" (whereby information including photographs may be sent to me, but a booking is neither confirmed nor declined in writing) I will keep photographs for three years before deleting them from my system.
1.4 Newsletter communications
The data I process for newsletter communications are your name and email address. This data is collected either via a webform or a pen-and-paper form at an event, in a way which is compliant with the General Data Protection Regulations.
This information is also processed by Mailchimp, which is the service provider for my newsletter.
Purpose for processing this data: To add you to the mailing list, so you may receive the newsletters.
Lawful basis for the processing: Consent.
Retention period: This data is kept until you unsubscribe from the mailing list, or until I end the service and the mailing list becomes defunct.
1.5 Legal obligations to process and retain personal data
I may process any personal data where such processing is necessary, eg to comply with legal obligations to which I am subject (such as record keeping for tax purposes). Similarly I may retain your personal data where such retention is necessary for compliance with legal obligations.
1.6 Other reasons for processing personal data
I may process any personal data identified in this Notice where necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The lawful basis for this processing is my legitimate interests, namely the protection and assertion of my legal rights, your legal rights and the legal rights of others.
I may process any personal data identified in this Notice where necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice. The lawful basis for this processing is my legitimate interests, namely the proper protection of my business against risks.
2. Non-Personal Data
Purpose for processing this data: I use this data in order to understand more about visitors to my website (such as how they found me, and what kind of device they might be using to view my site), and what they do once they are there (for example, how many people visit certain pages, and the order in which pages are visited). This data can help in such ways as to build a better understanding of the market for my business, and to inform future decisions in improving my website's design.
Lawful basis for the processing: Legitimate interests (namely monitoring and improving my website and services).
You can find out more about Google’s position on privacy in terms of its analytics service at http://www.google.com/intl/en_uk/analytics/privacyoverview.html
3. Does Amanda Drage Art provide your data to others?
Your personal and non-personal information will never passed on to third parties without your consent, unless it is necessary to fulfil your order. Any such third party will be subject to similar requirements to protect your data.
4. Amendments to my Privacy Notice
I may need to update this Notice from time to time. In such circumstances, a new version will be published on my website, so you can remain aware of what information I am using, how I am using it, and whether it will be shared with any other parties.
If at any time I decide to use any data in a manner significantly different from those stated in this Notice, I will send you an email notification of these changes. You will have a choice as to whether or not I use your information in this way.
5. Your rights
- You are entitled to view the personal information that I hold, to amend that information, and even have it deleted if you wish (subject to my legal obligations outlined above - see section 1.5).
- You have the right to restrict or object to any of the processing detailed in this Notice.
- You have the right to complain to a supervisory authority.
- You have the right to withdraw any consent you may have previously given, at any time.
To request to view, amend, or delete data, to restrict or object to processing, or to withdraw consent given, you can contact me directly. See my contact details at the end of this Notice (Section 7) or by using the form on the website Contact page.
To withdraw consent to send email newsletters, simply click the Unsubscribe link at the bottom of any of my newsletters, or contact me as above.
6. About Cookies
6.1 What are cookies?
A cookie is a small file containing an "identifier" (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server. Cookies do not typically contain any information that personally identifies a user.
6.2 Types of cookies
Like most websites, my website uses some cookies. Some are set by this website directly ("first party cookies"). Others are set by the services my website uses ("third party cookies"). Some cookies are known as "persistent" cookies: these are stored by your web browser until they reach a set expiry date, or until they are deleted by you. Others are known as "session" cookies: these are destroyed at the end of the user session, when the web browser is closed.
For general information on cookies see http://www.aboutcookies.org
For more information on session cookies see http://www.allaboutcookies.org/cookies/session-cookies-used-for.html
6.3 First party cookies that are set by this website
Cookie name: markc
Cookie purpose: Functionality
This cookie name is associated with sites running on the Moonfruit platform. It is reported as a general session cookie that records visitor choices while on the site, but is destroyed when the browser is closed.
Cookie name: fb_link
Cookie purpose: Functionality
This cookie name is associated with sites running on the Moonfruit platform. It records whether a user is logged into the site using Facebook Connect. It is necessary for this login function to work, but if visitors login with a different method, it will contain no value.
(Visitors cannot currently log in to my website so this cookie should not collect any data from visitors, however it is present in the list of active cookies, so I have included it here for transparency.)
6.4 First party cookies that are set by Google Analytics
I use Google Analytics to analyse the general use of my website. Google Analytics gathers information about website use by means of cookies. See section 2 "Non-Personal Data" to find out how I use this information.
Google's position on privacy in terms of its analytics service can be seen here: http://www.google.com/intl/en_uk/analytics/privacyoverview.html
Cookie names: __utmz, __utmt, __utmc, __utmb, __utma
Cookie purpose: Performance
These cookies perform several functions, most of which help me gain an overview of how visitors behave on my site. These cookies cannot identify visitors personally.
6.5 Third party cookies that are set by Facebook
The News page of my website features a Facebook "widget". Visitors to this page are subject to activity by these cookies.
Cookie names: act, c_user, csm, datr, fr, lu, p, presence, s, sub, x-src, xs
6.6 Third party cookies that are set by Etsy
The Art Jewellery/Etsy page of my website features an Etsy shop "widget". Visitors to this page are subject to activity by these cookies.
Cookie names: zuaid, user_prefs, uaid, ua, st* etsy.com, bc* etsy.com, LD, fve, ecvc, _ga
More information from Etsy about cookie usage:
6.7 Third party cookies that are set by Wufoo
The Contact page of my website features a form which directs enquiries to me. This service is provided by Wufoo. Visitors to this page are subject to activity by these cookies.
Cookie names: SSSC, SSRT, SSPV, SSLB, SSID, ep202, ep201, cvo_tid1, cvo_sid1, _gid, _ga, SSID, SIDCC, SID, SAPISID, OTZ, NID, HSID, DV, CONSENT, APISID, ANID, 1P_JAR
6.8. Managing cookies
If you are not happy with the use of any of the cookies listed in this Notice, most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and from version to version. Visit http://www.aboutcookies.org for guidance on how to delete, reject, and manage cookies.
Please be aware that if you reject or disable cookies, you may encounter issues signing up for my newsletter, contacting me via the form on the Contact page, or viewing embedded content (such as my Etsy Shop widget).
7. Amanda Drage Art's details
This website is owned and operated by:
59 Lavender Close
You can contact me by post, to the address given above.
You can also use the form on the website Contact page to get in touch.