SARAH FIRKINS PHOTOGRAPHY
Here at Sarah Firkins Photography I am committed to
protecting and respecting your data & privacy.
Below you will find details of how Sarah Firkins Photography (referred to as we, us, our) collects and processes your personal data when using our website www.sarahfirkinsphotography.co.uk / www.sarahfirkins.com and when contacting and interacting with us. This notice maybe updated as and when required.
THE INFORMATION WE COLLECT AND HOW WE COLLECT IT
Sarah Firkins Photography may collect your personal data when:
you visit and use our website;
you contact us via our on-line contact form, via telephone, via email, via post, via social media or other means;
we will also process your personal data when you use our services or when you purchase products from us;
when you request resources and sign up to our Watch me Grow newsletter, and other marketing;
when you enter a prize draw or competition;
when you review our services or products;
when you hire us to photograph you and your family
The data that may be collected is as follows:
Your personal data including,
your title, first name, surname, date of birth, gender and other information
required to fulfil our contractual services.
Your contact details including,
your email address, telephone number and postal address.
Social media pseudonyms and profile addresses.
Your digital data,
In order to improve our on-line experience we will collect the following data.
Website tracking info which includes, collecting data about how you use
our website and we may collect data such as your internet protocol addresses,
geographic location, operating systems, platforms and devices used.
Cookies are also used. More details on cookies can be found below.
You hire us to capture.
Your Financial information including,
Bank details and Card payment details. When paying for your services or product purchases.
We will also collect your personal preferences on how you would like to be contacted and of any marketing preferences you have.
Third parties that are used to collect and process this information, includes:
analytic data collection via Google
web forms and data collection via Wix website hosts and apps;
social media advertisements including: Facebook and instagram;
financial and payment processors including, Stripe, Paypal and Square-up;
marketing and newsletters; via mailchimp;
client management cloud based software via Studio Ninja;
These companies are based either within the European Economic Area (EEA) and/or outside the EEA and have been vetted by us to ensure that they take your privacy and data protection as seriously as we do. Please see below for more information.
HOW WE USE YOUR DATA
We may use your personal data collected to:
fulfil the service contract between us;
to process product orders;
to comply with legal or regulatory obligations, such as business accounting and record keeping;
to send e-mail newsletters and marketing materials that you have given explicit consent for us to send to you.
We will only use your personal data when legally permitted and for the purpose it was obtained.
Newsletters and Marketing communication.
Marketing and newsletters will only be emailed to you when you have given explicit consent for us to do so. Either by completing an opt in / subscribe form or filled the required tick box on a booking form or questionnaire.
You have the right to withdraw or change your consent to receive newsletters and marketing at any time by clicking the unsubscribe link within the emails, via verbal communication, in writing or by emailing us at email@example.com
We will confirm that your details have been removed.
Withdrawing your consent from our marketing and newsletter e-mail list will not effect the data we hold on you for contractual, legal and legitimate reasons.
We may need to disclose your personal data to:
HM Revenue and Customs, and other regulatory who require reports of processing;
Our professional advisors such as, lawyers, bankers, auditors and insurers;
Our IT and system admin providers.
Data Transfer outside the European Economic Area (EEA)
Where we use companies (service providers) based outside the EEA to transfer, store or process your data, we do our best to check that they comply with data protection regulations, of a similar standard to the European general data protection regulations, and are covered by the EU – US privacy shield or similar standards relevant to their country. We shall not transfer your data to any company not deemed to provide an adequate level of protection for personal data by the European Commission.
We have taken the necessary steps to ensure that your data that is held by us is kept safe and secure and we have in place measures to ensure your data is not accidentally lost or used in an unlawful manor. Only staff and third parties will be able to access your data on a need to know basis. We have a data security procedure in place and in the case of a suspected data breach will follow the required steps and notify the relevant regulator and any clients who data may have been breached when legally required to do so.
Your data will only be retained by us for as long as needed for fulfilment of contractual.
We shall hold the data required for tax purposes for six years. This includes your contact, identity, financial and transaction data.
Other data will be kept in line with your contract with Sarah Firkins Photography.
Under the GDPR you have certain legal rights as follows.
The right to access and make corrections to your personal data held by us.
You also have the right to erasure of your personal data held by us.
You have the right to object to the processing of your data by us and can request that we restrict the processing of your data.
You have the right to withdraw your consent and to transfer your personal data.
For full details on your legal rights please see https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
If you wish to exercise any of the rights set out above free of charge, please email us at firstname.lastname@example.org
We may request further information from you to process your request for security purposes. We may refuse your requests if you are unable to confirm your identity.
We try to fulfil your request within one month. We will keep you up to date of the progress of your data request.
This website may include links to third-party websites, please ensure when you leave our website that you check that websites privacy policies. As they too maybe collecting your personal data.
Should you have any concerns regarding how we collect and use your data, please contact us at email@example.com and you can find details of how to make a complaint to the Information Commissioner's Office at www.ico.ork.uk.
If you have any questions regarding your data please contact:
07709 896 977
130 Forest Road, Colchester, CO4 3XG