DebbieSykesAnimalArt

Privacy Policy

This Privacy Policy tells you what you can expect us to do with your personal information when you make contact with us or use our services.

Why do we collect your data?

An order has been placed.
You have made an enquiry.
You subscribe to our newsletter
A request for information has been received.
What Data do we Collect?

We collect the least data we can in order to provide a service to you but certain data is required in order to process customer orders and/or enquiries. Such data would be:

Name
Address to post orders to
Contact telephone number in the event of queries with your order
email address in the event of queries with your order or to discuss a commission and/or enquiry
Who collects the data?

Debbie Sykes Art is the controller for the information we process, unless otherwise stated.

The quickest way to contact us is by phone or e-mail.

The General Data Protection Regulation 2018

General Data Protection Regulation (GDPR) came into effect on May 25th 2018. It is designed to protect your personal data, ensuring it is not passed on to a third party and under this law you, as an individual, have certain rights which are listed below.

Right of Access

You have the right to ask for copies of any personal information held by us.

Right to Rectification

Incorrect information will be rectified within 24hrs of notification.

Right to Erasure

We will erase your personal data from our records if you ask us to, but, we are legally obliged to hold customer records for 6 years. We cannot erase data relating to orders before that time.

Right to Object to Processing

You have the right to object to your data being used for direct marketing

If you feel we have been trying to sell you things through direct marketing, you are within your rights to contact us and ask us to stop.

How Long do we Keep Your Data?

Personal data is kept for the shortest time necessary.

We are legally obliged to keep certain information regarding customer orders for 6 years to comply with HMRC regulations. After this time we will securely destroy all data.

Data relating to inactive accounts is destroyed within 1 year. Pending orders stay on our system for 24hrs, whilst failed or cancelled orders are deleted within 1 month.

Sharing Your Information

Personal information is never shared with a third party, unless there is a legal requirement to do so.

Paypal and BACS ( Direct Bank Transfer) is used for payments and therefore we do not collect the payment details from you ourselves and it is not stored on our system.

Website Host

Hosting of our website is carried out by a company based in the UK who are GDPR compliant.

E-Mail Provider

Google is our provider for e-mails;  they have the Privacy Shield and are therefore compliant with the GDPR regulations.

Links

On our website we have some links to other websites. Our privacy notice does not cover how those websites process your personal data and you are advised to read their privacy policy before interacting with them.

Breach Notification

You will be notified within 72hrs if a breach of data occurs. We will also notify the Information Commissioners Office (ICO) who are the governing body of GDPR.

Contact

If you have any concerns at all regarding our privacy policy, please get in touch.