The Data Protection Act (1998) has been replaced by the General Data Protection Regulation (GDPR) which comes into effect on 25th May 2018.
In the course of our business we collect and hold personal data. This privacy statement is for
- Moon & Back Photo Props website www.moonandbackphotoprops.co.uk
- Etsy Store ‘Moon and Back Props’ and
- Ebay Store ‘Moon and Back Photo Props
The GDPR requires that personal data is:
•Processed lawfully, fairly and in a transparent manner
•Collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes;
•Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’).
•Accurate and, where necessary, kept up to date;
•Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;
•Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures (‘integrity and confidentiality’).
Information That We Collect:
We hold personal data in delivering our services.
Personal data that we collect and process about you may include:
- Name.
- Home Address.
- Personal Email.
- Business Email.
- Home Telephone Number
- Mobile Telephone Number
Moon & Back Photo Props processes your personal information to meet our legal, statutory and contractual obligations and to provide you with our services. We will never collect any unnecessary personal data from you and do not process your information in any way, other than as specified in this notice.
How we collect information:
•When you submit a query or complaint to us
•When you complete online forms
•When you purchase something from our shop
•When you sign up to our newsletter
The personal data may be held in paper and electronic format, but will always be managed in a safe and secure manner. When you purchase something from my stores, your financial information is processed securely by the platform – Etsy, Shopify, Ebay or Paypal. I do not have access or store any of this information.
Some areas of our website require you to actively submit personal data e.g. online services, email, online forms or online payments. You will be informed at each of these personal data collection points what data is required and what data is optional.
Personal data may be gathered without you actively providing it, through the use of various technologies and methods such as Internet Protocol (IP) addresses and cookies. An IP address is a number assigned to your computer by your Internet Service Provider (ISP), so you can access the internet.
We collect IP addresses for the purposes of system administration and to audit the use of our site. Each time you log onto our site and each time you request one of our pages, our server logs your IP address.
Although we log your session, it will not normally link your IP address to anything that can enable us to identify you. However, we can and will use IP addresses to identify a user when we feel it is necessary to enforce compliance with our rules or terms of service or to protect our service, site, users or others.
Your rights as an individual
The GDPR provides rights for individuals:
1.Right to be informed – obligation to provide ‘fair processing information’ through privacy statements. There must be transparency at the point of collection on how the information will be used and there is an emphasis on providing you with a clear and concise notice.
2.Right of access – individuals must be able to access their data to ensure that it is being processed lawfully. This is commonly referred to as a subject access request. If you wish access to your personal data you must submit a request in writing and we will respond within one month. We may seek clarification as to your identity and there is no fee for this service.
3.Right to rectification which means that we will rectify inaccurate data concerning you without undue delay.
4.Right to be forgotten (is not absolute and only applies in certain circumstances) erasure or rectification of personal data – this right arises in the event of inaccurate or incomplete data and has been expanded to cover more circumstances than those set out in the Data Protection Act 1998.
5.Right to data portability – this is a new right enabling individuals to reuse and transfer their personal data (held in electronic form) for their personal use to another data controller without affecting its usability.
6.Right to restrict processing where the accuracy is contested (until it can be verified) or where you have objected to the processing (until a verification of the legitimate grounds on which it occurs has been made) or where processing is unlawful or when it is no longer necessary.
7.Right to object – where the processing of personal data is subject to consent, individuals can object to certain types of processing such as direct marketing or processing for research or statistical purposes.
8.Right not to be subject to a decision based solely on automated processing, including profiling that significantly affect the individual.
Sharing and Disclosing Your Personal Information
We do not share or disclose any of your personal information without your consent, other than for the purposes specified in this notice or where there is a legal requirement.
Moon & Back Photo Props use MailChimp as our marketing automation platform. If you consent to receiving marketing emails from us you acknowledge that the information you provide will be transferred to MailChimp for processing in accordance with their Privacy policy and Terms of use.
Google Adwords remarketing service is provided by Google Inc. You can opt out of Google Analytics for display advertising and customise the Google Display Network Ads by visiting the Google Ads settings page http://www.google.comsettings/ads. For more information on the Google privacy practices, please visit the Google Privacy & Terms web page https://policies.google.com/privacy
Facebook remarketing service is provided by Facebook Inc. You can learn more about interest based advertising by visiting this page https://www.facebook.com/help/164968693837950 To opt out of Facebooks interest based ads, follow these instructions from Facebook https://www.facebook.com/help/568137493302217
Google Analytics is a web based analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our service. This data is shared with other Google services. Google may use the collected data to contextualise and personalise ads of its own advertising network. You can opt out of having your own activity on the service available to Google Analytics by installing the Google Analytics opt out browser add on. The add on prevents Google Analytics JavaScript from sharing information with Google Analytics about visits activity.
For more information on the privacy practices of Google, please visit the Google privacy and Terms web page https://www.google.com/intl/en/policies/privacy/
Cookies
We use a number of cookies on our website. Your consent is requested when you arrive on the website. You can instruct your browser to refuse all cookies or indicate when a cookie is being sent. However if you do not accept cookies, you may not be able to use some portions of the service.
Safeguarding Measures
Moon & Back Photo Props takes your privacy seriously and takes every reasonable measure and precaution to protect and secure your personal data. We work hard to protect you and your information from unauthorised access, alteration, disclosure or destruction and have several layers of security measures in place, including: pseudonymisation, restricted access, IT authentication, anti-virus/malware and firewalls.
Links to other Sites
Our service may contain links to other websites that are not operated by us. If you click on a third party link, you will be directed to that third parties website. We strongly advise you to review each sites Privacy Policy. We have no control over and assume no responsibility for the content, privacy policies and practices of any third party sites or services.
Transfers Outside of the EU
Moon & Back Photo Props use MailChimp as our marketing automation platform. MailChimp is an internationally based company and stores your data in the US. MailChimp is certified under the EU-US Privacy Shield framework.
We use Etsy as sales platforms. Both are an internationally based company and store your data in the US. Etsy have their own Privacy Policy found here
https://www.etsy.com/uk/legal/privacy/
We use Shopify as sales platforms. Both are an internationally based company and stores your data in the US. Shopify have their own Privacy Policy found here
https://help.shopify.com/manual/your-account/GDPR/GDPR-Shopify
https://help.shopify.com/manual/your-account/GDPR/GDPR-merchants
If you consent to receiving marketing emails from us you acknowledge that the information you provide will be transferred to MailChimp for processing in accordance with their Privacy policy and Term of use.
If we transfer your information outside of the EU in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this policy.
If you use our services while you are outside the EU, your information may be transferred outside the EU in order to provide you with those services.
Consequences of Not Providing Your Data
You are not obligated to provide your personal information to Moon & Back Photo Props. However, as this information is required for some of our service delivery or for legitimate interests, we may not be able to offer some/all our services without it.
How Long We Keep Your Data
Moon & Back Photo Props will only ever retain personal information for as long as it is necessary.
Where you have consented to us using your details for direct marketing consultation or communication purposes, you have the right to withdraw this consent at any time.
You can request that we delete/destroy data by writing to us for removal of data to our Director Joanne Watteers and this will be reviewed to ensure the correct procedures apply, including compliance with the law.
Notifications of changes
Any changes to this Privacy Statement will be posted on our website.
Subject Access Request
Should you wish to make a subject access request please complete the Council’s Subject Access Request form and contact:
Joanne Watters - Director
Moon & Back Photo Props
52 Chapel View
Crossmaglen
Newry
Co.Down
BT359DD
Email: jo@moonandbackphotoprops.com
Lodging a Complaint
Moon & Back Photo Props only processes your personal information in compliance with this Privacy statement and in accordance with GDPR. However if you wish to raise a complaint regarding the processing of your personal data or are unsatisfied with how we have handled your information, you have the right to lodge a complaint with our Director Officer or the Information Commissioners Office:-
Joanne Watters - Director
Moon & Back Photo Props
52 Chapel View
Crossmaglen
Newry
Co.Down
BT359DD
Information Commissioner
Information Commissioners Office
14 Cromac Place
Belfast
BBT7 2JB
Email: ni@ico.org.uk
