Privacy Policy

My privacy policy conforms to the terms of the 1998 Data Protection Act and the Privacy and Electronic Communications Regulations 2003, and from May 25th 2018, the General Data Protection regulation (GDPR) 2018. The personal information that you enter on the website will be held securely and will not be used for any other purpose than for me to contact you about purchases or other queries about my artwork.

What information do I collect?

The personal information that I collect includes:

Name and email.

Transaction history.

Details of visits to this website including traffic data, location data, operating system, browser usage, and the resources that you access.

How do I collect your information?

I collect your information when:

You submit a contact form query or make a purchase.

You visit this website.

How do I keep your data secure?

I am committed to protecting the personal information you entrust to me. Your personal data will be held and processed on a password protected cloud-based server.

I conduct regular reviews to ensure personal data I hold is up-to-date, and free of duplication.

Access to personal information is strictly controlled and can only be accessed by me.

Who do I share your data with?

I do not sell personal details to third parties for any purpose, nor will I share your personal data with any other organisations unless I have your explicit consent to do so.

Why I collect your data, how I use it and my basis for processing your personal information

The main way I use your information is to provide the services you’ve requested. I may process your personal data because it is necessary for the performance of a contract, for example:

To process payments.

How long do I keep your information?

I will maintain a  record for you until such time as you tell me that you no longer wish to keep in touch. In this instance I will delete the majority of your personal data we hold (except where there might be a legal obligation to retain information) and will maintain basic personal data to ensure that I do not inadvertently create a new record in the future.

Your rights

Under the DPA and GDPR you have the following rights which can be exercised by contacting me and submitting a subject access request:

To obtain access to, and copies of, the personal data that I hold about you

To require that I cease processing your personal data if the processing is causing you damage or distress

To require me not to send you marketing communications

To require me to correct the personal data I hold about you if it is incorrect

To require me to erase your personal data

To require me to restrict data processing activities (and, where processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal)

To receive from me the personal data I hold about you which you have provided to me, in a reasonable format specified by you, including for the purpose of you transmitting that personal data to another data controller

To object, on grounds relating to your particular situation, to any  particular processing activities where you feel this has a disproportionate impact on your rights

Please note that the above rights are not absolute, and I may be entitled to refuse requests where exceptions apply.

Contact me

Please contact me if you have any questions about the privacy policy or information I hold about you or would like to submit a subject access request:

• Email me at titchansty@hotmail.com