What personal data we collect and why we collect it
Under the General Data Protection Regulations we rely on the following legal bases for processing your data:
Consent – we will ask your consent for marketing to you via email or post. If you consent we can collect and process your data for this purpose.
Contract – we sometimes need to collect and process your personal data in order to fulfil a contract with you, for example an order. We will also collect and process your data on this basis if you’ve asked us to provide a quote.
Legal – we are obliged to process some personal data to comply with the law. If you place an order with us we must retain some personal data for at least six years to comply with the Sale of Goods Act 1982, Consumer Rights Act of 2015 and HMRC guidance.
Legitimate interests – we collect and process some personal data to pursue our legitimate interests in a way you would reasonably expect as part of running our business; for example, to analyse information on our customers in order to provide new products or services.
Depending on your interaction with us, we may collect and process all or some of the following information:
- Address details
- Phone number
- Email address
- Marketing preferences
- Order history
- Copies of ID (Physical or Digital)
- Computer IP address
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
Why we need your data
We collect information about you to; fulfill your request e.g. if you fill out a ‘request a callback’ form we use this information to contact you directly, process your order, manage your account and, if you agree, to email you about other products, services, and information we think may be of interest to you. We may use your contact information to advertise our service to you on third-party websites such as Facebook and Twitter. We may also contact you directly to follow up on the service and user experience we provide. We use your information collected from the website to personalise your repeat visits to our website. If you agree, we shall pass on your personal information to third parties so that they may offer you their products and services.
We will take cautionary measure to ensure we do not collect any personal data from you we do not need in order to provide and oversee the above services to you.
Who we share your data with
NineteenTen Photography only uses information as defined in this policy, this means we will never sell, trade or otherwise share your personally identifiable or anonymized information.
Sometimes we need to share your personal data with trusted third parties. In these instances, your data will only be used for the exact purpose we specify, will be transferred and stored securely, and will be deleted or rendered anonymous if we stop working with that third party.
Examples of the third parties with whom we share data are:
- Payment-processing services
- Delivery couriers and postal services
- Email marketing service providers
- Event ticketing services
- Customer service management systems
This list is not exhaustive and may change from time-to-time in line with our business processes. Please be assured that we will only ever share your information with trusted parties who adhere to GDPR and the correct standards of security. We may be required to release information when this is mandatory to comply with the law or to protect your or our rights, property or safety.
Personally identifiable information includes information which can be used to identify you. Examples of personally identifiable information are your name, email address, your address and phone number.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
We will only keep your data for as long as it’s needed. After that, we’ll either delete it completely or render it anonymous (removing personal data but keeping information such as order amount for business analysis).
If you contact us for a quote for a photoshoot or custom print and you don’t consent to marketing, we’ll keep your data for 12 months in case you wish to proceed with the quote.
If you order from us, we’ll keep your data for six years in order to comply with legal obligations.
What rights you have over your data
You have the right to:
- Access your personal data, free of charge
- Have your personal data rectified if out of date or incorrect
- Have personal data erased, unless that would conflict with our legal obligations
- Withdraw consent for us to use personal data, if you have previously given consent
- Object to us processing your personal data and/or stop us using data for direct marketing
If you would like to exercise any of these rights, you should contact us on email@example.com
Where we send your data
Visitor comments may be checked through an automated spam detection service.
Your contact information
How we protect your data
This website and it’s processes is held on a secure server using a verified SSL (secure socket layer) system for transferring data. If you click on the small padlock symbol at the top of your browser’s screen, next to the web address, you will be taken to the site’s security certificate. If you have any concerns regarding the security of this site, please contact us on firstname.lastname@example.org.
We reserve the right to review and make changes to our privacy. Any changes will be made available through our website.