Who we are
Personal Information we collect
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”
We collect Device Information using the following technologies:
- Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers / account details), email address, and phone number. We refer to this information as “Order Information.”
If you leave a comment in the various feedback and contact forms on our website on our site, certain may require you to enter your name, email address to allow us to make personal replies where appropriate.
Comments or Reviews
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
How do we use your personal data
We may use your information to:
• Contact you regarding queries raised in the contact form;
• Progress an order you have submitted and send you information directly related to this;
• Carry out our obligations arising from any contracts entered into by you and us;
• Deal with entries into a competition;
• Seek your views or comments on the services we provide;
• Notify you of changes to our services;
• Send you communications which you have requested and that may be of interest to you.
• These may include information about campaigns, appeals, other fundraising activities, promotions of our associated companies goods and services;
We review our retention periods for personal information on a regular basis. We are legally required to hold some types of information to fulﬁl our statutory obligations. We will hold your personal information on our systems for as long as is necessary for the relevant activity, or as long as is set out in any relevant contract you hold with us
We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:
- Communicate with you;
- Screen our orders for potential risk or fraud; and
- When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address)
Visitor comments or reviews are monitored, stored to be checked to remove possible spam attacks. These are monitored and checked by administrators and deleted as necessary.
As part of the services oﬀered to you through this website, the information which you provide to us may be transferred to countries outside the European Union (“EU”). By way of example, this may happen if any of our servers are from time to time located in a country outside of the EU. These countries may not have similar data protection laws to the UK. By submitting your personal data, you are agreeing to this transfer, storing or processing. If we transfer your information outside of the EU in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this policy. If you use our services while you are outside the EU, your information may be transferred outside the EU in order to provide you with those services.
How do we protect your data
The security of your personal information is important to us. We follow generally accepted industry standards to protect the personal information submitted to us from unauthorised access or disclosure, both during transmission and once we receive it. When you give us personal information, we take steps to ensure that it is treated securely. Any sensitive information (such as credit or debit card details) is encrypted and protected with the following software 128 Bit encryption on SSL. When you are on a secure page look for https: in the browser bar and a lock icon will appear somewhere within the browser. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Non-sensitive details (your email address etc.) are transmitted normally over the Internet, and this can never be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk. Once we receive your information, we make our best eﬀort to ensure its security on our systems. Where we have given (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password conﬁdential. We ask you not to share your password with anyone. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. We assume no liability for any disclosure of data due to errors in transmission, unauthorised third party access or other acts of third parties, or acts or omissions.
If you send images of your work to be uploaded and added to galleries on the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. Our video storage platform is Vimeo and we embed the links to the content in the project pages. They are mostly hidden on our Vimeo platform and accessed by passwords sent with invoices. Any links to our Vimeo platform will see those videos intended as samples or to promote our website services.
Who we share your data with
We are committed to protecting your privacy. Under no circumstances do we rent, trade or share your e-mail address with any other company for their marketing purposes without your consent.
If you request a password reset, your IP address will be included in the reset email.
We do share your Personal Information with selected third parties to help us use your Personal Information, as described in the section above. For example, we use Woocommerce Inc to power our online store – you can read more about how Woocommerce operates on behalf of us here: WooCommerce and the GDPR
We use Stripe (Stripe Inc.) as our payment processor – you can read more about how Stripe uses your Personal Information here: https://stripe.com/gb/privacy However for you as a customer we retain and use only the personal data necessary to process orders.
We also use Mailchimp (The Rocket Science Group, LLC.) to manage our marketing campaigns and newsletter emails–Mailchimp may also collect data concerning the date and time when the message was viewed by the User, as well as when the User interacted with it, such as by clicking on links included in the message–you can read more about how Mailchimp uses your Personal Information here: https://mailchimp.com/legal/privacy/. You will only be added to our mailing lists if you have registered to receive our newsletters / email updates, or you have made a purchase from the website. At the footer of every email we send you there will be a link to update / view your details, and a separate link to unsubscribe from our mailing list. Your choices here -You have a choice about whether or not you wish to receive information from us. If you do not want to receive direct marketing communications from us about future products and services, then you can select your choices by clicking the relevant boxes situated on the form on which we collect your information. We will not contact you for marketing purposes by email, phone or text message unless you have given your prior consent. We will not contact you for marketing purposes by post if you have indicated that you do not wish to be contacted.
JetPack To set up and process subscriptions, we use the subscriber’s email address, as well as the ID of the post or comment (depending on the specific subscription being processed).In the event of a new subscription being initiated, we also collect some basic server data, including all of the subscribing user’s HTTP request headers, the IP address from which the subscribing user is viewing the page, and the URI which was given in order to access the page (
DOCUMENT_URI). This server data used for the exclusive purpose of monitoring and preventing abuse and spam.
As part of the service we offer we may link to various social media platforms to allow interaction with social networks or other external platforms directly from the pages of this website. The interaction and information obtained through this Application are always subject to the User’s privacy settings for each social network. These services may collect traffic data for the pages where the service is installed, even when Users do not use it.
Integrated Social Media services:
Instagram Widget (Instagram, Inc.)
Instagram is an image visualization service provided by Instagram, Inc. that allows this website to incorporate content from the Instagram Social Media Platform on our pages. Data collected: Cookies and usage data. You can read more about how Instagram uses your Personal Information here: https://www.instagram.com/about/legal/privacy/.
Twitter Tweet Button And Social Widgets (Twitter, Inc.)
The Twitter Tweet button and social widgets are services that allow interaction with the Twitter social network provided by Twitter, Inc. Data collected: Cookies and usage data. You can read more about how Twitter uses your Personal Information here: https://twitter.com/privacy.
Facebook Like Button And Social Widgets (Facebook, Inc.)
The Facebook Like button and social widgets are services that allow interaction with the Facebook social network provided by Facebook, Inc. Data collected: Cookies and usage data. You can read more about how Facebook uses your Personal Information here: https://www.facebook.com/privacy/explanation.
Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue. For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information. It is also retained for statutory purposes as indicated in the previous section. We generally discard information about you when it’s no longer needed for the purposes for which we collect and use it
If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.
Additionally, if you are a European resident we note that we are processing your information in order to fulfil contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.
The Site is not intended for individuals under the age of 16. Accordingly, we will not knowingly collect or use any personal information from children that we know to be under the age of 16. If you are aged 16 or under‚ please get your parent or guardian’s permission beforehand whenever you provide us with personal information.
What rights you have over your data
The accuracy of your information is important to us. You have the right to request a copy of the information we hold about you so that you can ensure its accuracy. You can do this by the methods listed in contact us. If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes. Rights of erasure
Visitors or users of the site should have the ability to have all records of their personal data held by a business where there is no legitimate reason for that business to maintain that reason. This includes where GDPR is super-ceded by other laws governing the details obtained Users should contact the administrator firstname.lastname@example.org by email or post to request erasure of any personal data held by the company that is kept without any legitimate reason.
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at email@example.com or by mail using the details provided below:
Sue Chatterton Watercolour Specialist, 71 Martin Drive, Stafford, ST16 1GN, United Kingdom.
Review of this Policy
We keep this Policy under regular review. This Policy was last updated on 27th August 2021