Below you will find our Privacy and Cookies Policies
PRIVACY POLICY
Updated 05/11/2019
Everyone’s privacy is important. We promise to respect your personal information, which is Information that we may have obtained from you in the course of providing you with a service or product.
Collection of information is undertaken lawfully and in accordance with the Data Protection Act 1998 and GDPR which came into force on 25 May 2018. Subsequently we do our best to ensure that your details are kept up to date and as accurate as possible.
This privacy notice describes to you:
- Who we are
- How to contact us
- What personal data we collect
- What we do with your personal data
- How we got your information
- How long we hold your information
- Your rights and how to exercise them
- Changes to this privacy notice
- What you should to do if you have a complaint
www.eddylushphotography.co.uk is owned and operated by Eddy Lush Photography. In the following Statement, “we” “us” and “our” refers to www.eddylushphotography.co.uk and/or Eddy Lush Photography.
Your privacy is important to us, and we promise to respect your personal information. This is information that we have obtained from you in the course of providing you with a service or product. This Policy only applies to Eddy Lush Photography, and the web sites that it owns. It does not apply to any company, entity, or person that is not controlled, owned, managed or employed by Eddy Lush Photography. Neither does it apply to any site that we may link to from one of our sites.
How to Contact Us & Request Details
You may request details of personal information which we hold about you under the Data Protection Act 1998. A small fee will be payable. If you would like a copy of the information held on you please write to:
The Data Controller
Eddy Lush Photography.
11 Westleigh Avenue, Derby. DE22 3BY.
By Phone: 07980 000008
We reserve our statutary right to take up to 30 days to process this request. However, with more complex requests, or you have made a number of requests this can be up to the maximum time allowed of 90 days. Sometimes this involves the recall of files from archive and can take time. In this case, we will notify you and keep you updated. this can be up to the maximum time allowed of 90 days
• Time limit to respond
We will respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests that may for example involve the recall of files from archive. In this case, we will notify you and keep you updated.
Please contact us using the details in section 1 of this notice if you would like to exercise any of these rights or know more about them.
What Personal Data we collect and what we do with it
In the course of our Photographic Business, we collect personal details, such as
• Your name
• Your mobile telephone number
• Your personal or business email address
• Postal address (for some people this may also be a business address).
• Billing address (often the same as above address).
• Telephone number
• Personal or business website address
• Details of your visit to the website and any transactions you carry out on the website
• Any other business information voluntarily provided to us by you from time to time
We collect this information primarily as voluntarily provided to us. This includes Forms on this website but can include other sources, for example, through accepting a business card at a networking event, trade show or conference or by connecting with you on social media sites. We may also collect it from other sources where it is lawful to do so, including but not limited to, organisations or individuals you have authorised to provide information on your behalf (e.g. other suppliers or service providers, customers, employees, creative agencies, website company).
We collect information when any purchases are made or when users register with our site/s. Users who do not register with, or purchase from, this or any of our sites, do not need to provide any Personal Information to view the site/s.
Such information can also be combined with information from public sources for example your personal or company website, or social media accounts.
We do not knowingly collect “special category” personal data – e.g. . data concerning your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life or sexual orientation, and genetic data and/or biometric data. This is a special type of sensitive data to which more stringent processing conditions apply. We also do not collect information about criminal convictions or offences.
What we do with your personal information
We hold copies of your personal information
• In a suitably encrypted electronic format held in a cloud-based backup location
• On password protected laptops, mobile phones and iPads.
• Access is restricted to only those that need it, and sensitive information will be deleted once it is no longer required.
The personal data we collect enables us to supply the services we have been contracted to deliver and keep you updated with information we deem to be of legitimate interest. For example:
• To provide any personalised products you have ordered
• Telephone Number. Used to enable us to contact you regarding any problem we may have in processing your order. This can also sometimes be passed on to our courier if you are buying a product for example, but is only to enable them to make correct and speedy delivery.
• Debit or Credit Card number and expiry date and we share this information with our current card processing company. Please see our note on Secure Payment Processing.
To do this, we sometimes need to share the personal data we hold. These may include (but are not limited to):
Business associates and other professional advisers for example, specialist service providers and sub-contractors like: Album Printers and manufacturers
Suppliers and services providers (“data processors”) for example: email and mail service providers such as MailChimp and Microsoft Office.
Technical and support partners, such as the companies that hosts our website, who provides technical support and supplies our cloud-based-up services (such as Dropbox) and companies that provide 360-photo processing/hosting facilities
Social media platforms and management programmes such as LinkedIn, Twitter and Facebook.
Financial organisations to process any payments.
Law enforcement agencies, government or public agencies or officials, regulators, and any other person or entity that has the appropriate legal authority where we are legally required or permitted to do so, to respond to claims, or to protect our rights, interests, privacy, property or safety
Any other parties, where we have your specific consent to do so.
We use a third-party service (Google Analytics) to collect anonymous information about how visitors interact with our site, such as the number of visitors to various pages on the site. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.
Where we do collect personally identifiable information through our website (e.g. on contact forms and download requests), we will be up front and clear about what personal information we are collecting and what we intend to do with it.
We may also promote content and services to visitors after they have left our website based on the content they viewed on our website (i.e. re-marketing / personalised ads). We use third-party providers to facilitate this and these include Google AdWords, LinkedIn and Twitter.
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. We may use your name, company, address, email and contact to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which services and offers may be relevant for you. You will receive marketing communications from us if you have:
• requested information from us
• purchased services from us
• if you provided us with your details when you attended an event or seminar
and, in each case, you have not opted out of receiving that marketing.
We promise never to sell your data or share it without your consent to any third party for use in their own sales and marketing purposes.
You have the right to withdraw your consent to marketing at any time by contacting us although if you have purchased services from us before, we will rely on legitimate interest to market to you other the other consultancy and training services we provide.
Note on SECURE PAYMENT PROCESSING
From time to time we may offer the facility to accept payments on our website. When this is available you can be assured of the following:
We take our responsibility seriously for any transactions you undertake on this site. All transactions are processed away from this site by our current card processing company. Information passed between this site and their systems is encrypted using 128-bit SSL certificates. No cardholder information is ever passed unencrypted and any messages sent to our servers from them are signed using MD5 hashing to prevent tampering. You can be completely assured that nothing you pass to their servers can be examined, used or modified by any third parties attempting to gain access to sensitive information.
How we got your information
We obtain personal data from various sources as follows:
- Directly from you when you interact with us, for example when you
- Send us an email
- Fill in our website ‘contact us’ form
- Sign up to our mailing lists
- Request information
- Write to us
- Phone us
- Meet us at networking events, trade shows and conferences
- Connect with us or message us on social media
- Enter a competition
- Take part in a survey
- Apply for a job or send a CV
How long we hold your information
We will only keep personal information in a form that identifies you for as long as it is necessary to fulfil our contract with you or as required by the applicable law. We will endeavour to keep it up to date. We carefully consider the personal data that we store and in some instances, we are required to hold data for minimum periods: for example, UK tax law currently specifies a six-year period for retention of some of your personal data.
If you have discussed, requested or used our services, we will hold your personal information in order to provide the service requested and to fulfil our contract, as well as for closely related purposes that we believe would be of legitimate interest to you and to Eddy Lush Photography. We may choose to send you marketing emails that are closely related to the services that you receive and / or have enquired about.
Your rights and how to exercise them
• Opting out
You can ask us to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at any time. Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a legal matter or other transactions.
• No fee usually required
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
Details of how to contact us are shown in Section 2 above if you would like to exercise your rights. These rights are subject to certain limitations that exist in law. Further information about your information rights is available on the ICO’s website: https://ico.org.uk/.
Changes to this privacy notice
We may change this notice from time to time. You should check this notice on our website occasionally, in order to ensure you are aware of the most recent version.
What you should do if you have a complaint
We hope that you will be satisfied with the way in which we approach and use your personal data.
Should you find it necessary, you have a right to raise a concern with the information regulator, the Information Commissioner’s Office: https://ico.org.uk/. However, we do hope that if you have a complaint about the way we handle your personal data, you will contact us in the first instance using the contact details in section 1 above, so that we have an opportunity to resolve it.
COOKIES POLICY
Please note that we do collect limited non-personal information offered by browsers when a user visits our site/s. This information includes the use of “Cookies” and/or “Web Beacons” which are small text files sent to your computer in order to both measure the effectiveness of any advertising campaign we may undertake from time to time and to better understand how people use our site/s. We do this by tracking user trends and usage patterns.
Most browsers are set up to accept cookies and it is common practice to use them, but you can reset your browser to refuse all cookies or tell you when one is being sent to your computer.
However this may impact the quality of our service or even prevent some parts of the website from functioning. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
We will never sell, lease or distribute your information to third parties, however we may share the information within the group of companies or web sites belonging to Eddy Lush Photography so that we can make available any offers that can further your user experience of our various sites.
If you do not wish to accept our terms and conditions including our privacy and cookie policy please navigate away from this site. By continuing on the website you agree to accept our terms and conditions.
SECURITY
Whilst we use all reasonable efforts to protect any personal information, it must be pointed out that we cannot completely guarantee the security of your personal information as no data transmission over the internet can be entirely secure.
CHANGES TO THIS POLICY
Eddy Lush Photography may update and change this policy from time to time and we will notify you by posting the changes on this page. Please check back regularly.