David Holliday Art

Privacy Policy

 

 

Introduction

 

This Privacy Notice explains in detail the types of personal data I may collect about you when you interact with my website or visit my studio. It also explains how I’ll store and handle that data, and keep it safe.

We hope the following sections will answer any questions you have but if not, please do get in touch with me.

It’s likely that I’ll need to update this Privacy Notice from time to time. I’ll notify you of any significant changes, but you’re welcome to come back and check it whenever you wish.

Explaining the legal bases I rely on.

 

The law on data protection sets out a number of different reasons for which a business may collect and process your personal data, including:

Consent

 

I collect and process your data with your consent when you sign up to my emails. This happens when you subscribe to my email newsletters using either the online form on this website or a paper form or verbally when you are are a customer in my studio. I only need your name and email address in order to send you news by email. This is processed by Mailchimp email service provider and also by Weebly and 123-reg who host my website. I don’t pass your details to any other business or organisation. I don’t use your details in any way other than monthly mailings.

You can withdraw your consent at any time using the unsubscribe link at the bottom of every email I send you.

Contractual obligations

 

I may need your personal data to comply with my contractual obligations.

For example, if you order an item from me to be posted, I’ll collect your address details to deliver your purchase, but will destroy them afterwards. If you purchase through my Etsy shop, your address is stored there and I do not keep a copy.

No financial details used in an Etsy purchase are seen or stored by me.

If you pay using Paypal or izettle your financial information is stored securely by them and not seen by me. ​

 

Legal compliance

 

If the law requires me to, I may need to collect and process your data.

For example, I can pass on details of people involved in fraud or other criminal activity affecting my business to law enforcement .

 

An overview of your different rights

You have the right to request:

 

Access to the personal data I hold about you, free of charge.

The correction of your personal data when incorrect, out of date or incomplete.

That your data be deleted from my records when there are no further contractual or legal obligations.

That I stop using your personal data for direct marketing

That I stop any consent-based processing of your personal data after you withdraw that consent.

 

I hope this makes clear how I use your data. I have made every effort to comply with current data laws.