QUICK INTRO
Personal data - how it is collected, used and protected - is important to us, as it is your data and it impacts you personally.
That's how we have written this privacy - with you in mind. We have put a lot of effort into being transparent, highlighting the key areas you want to know and our processes.
This policy applies to those who engage with us, whether you make an enquiry, are a client or a visitor of our website or a user of one of our services.
This policy describes the information we collect, how it is used and shared and your choices regarding this information.
WHO'S PROCESSING MY DATA?
We are The Apple Yard - two sole traders registered with HMRC - and we deliver simple, beautiful website and high-aesthetic graphic design for small businesses.
We are committed to protecting and respecting your privacy.
You find our address and get in touch with us via our Contact Us page.
You can also submit a data access request below 👇 or contact our Data Protection Officer.
WHAT PERSONAL DATA DO YOU COLLECT?
We only ever collect the information we need or which you agree we can collect. This includes personal information that can be used to identify you, such as your:
Name
E-mail address
Postal address
Telephone number
Bank account or payment card details
It also includes IP addresses (the location of a computer on the internet), details of pages visited on our websites.
CHILDREN
If you are aged 16 or under, please ensure that you have your parent or guardian’s permission before giving us your personal information.
HOW DO YOU COLLECT MY PERSONAL DATA?
We collect your personal information in the following ways:
INFORMATION THAT YOU GIVE US DIRECTLY
We collect this information in connection with specific activities. For example:
Make an enquiry
Request a proposal for a project
Create an account or profile via one of our services
Engage with us on social media or our website
Sign up for our e-mail newsletter
Or otherwise provide us with personal information (such as at a networking or personal meeting)
N.B. You do not have to disclose any of this information to browse our website. However, if you choose to withhold requested information, we may not be able to provide you with certain services.
INFORMATION THAT WE COLLECT FROM YOUR USE OF OUR WEBSITES
Website usage information is collected using cookies.
This helps us to see how many people use our websites, how many people visit on a regular basis and how frequently visited individual pages are.
Cookies are also essential to our websites running correctly and delivering goods and services to users.
For more information, please see our cookies policy (coming soon).
INFORMATION THAT WE RECEIVE FROM THIRD PARTIES
We may receive information about you from third parties such as event booking sites or payment processors.
They will only do this if you have given your consent for them to do so.
When you provide your personal information to them, you should read their privacy policies to understand how they will process your information.
HOW DO YOU USE MY PERSONAL DATA?
We use the data we collect about you to help us to fulfil our business objectives. This includes using your information, among other things:
To fulfil your enquiries or requests (such as for a proposal)
To process orders and event bookings
To communicate with our followers and those who engage with us
For administration purposes
For internal record keeping, such as the management of feedback or complaints
To notify you about changes to our services
To evaluate and improve the services we offer
To evaluate the use of our websites and ensure their content is presented in the most effective manner for you and your device (see also our cookies policy - coming soon)
To further our legitimate interests (see below)
ON WHAT BASIS DO YOU PROCESS MY DATA?
We process your personal data lawfully, fairly and in a transparent manner.
We will only collect and process your data where we have a lawful basis, which will depend on the reason why we collect and need to use your information.
The lawful basis will be one of the following, and we will explain in a corresponding privacy notice at the point we collect your data what we are doing and why, so you are totally clear:
Consent (to process your personal data for a specific purpose, such as sending you our newsletter)
Contract (to fulfil a contract with you, such as in order to undertake a project)
Legal obligation (to comply with the law)
Vital interests (to protect someone's life)
Public task (to perform a task in the public interest or for an official function, which has a clear basis in law)
Legitimate interests (for our legitimate interests to fulfil our business objectives, but these do not override your rights)
WHAT ARE YOUR LEGITIMATE INTERESTS?
In some cases we process your data according to 'legitimate interests'.
We will consider and balance any potential impact on you and your rights under data protection legislation, and our legitimate business interests do not automatically override your rights.
In each case, we apply a three-part legitimate interests test:
We identify the legitimate interest
We show that the processing is necessary to achieve it
We balance it against your individual's interests, rights and freedoms
We keep a record of all our legitimate interests assessments and we also draw your attention to this basis for processing when we ask for your data.
You have the right to object where we rely on legitimate interests.
WHO ELSE RECEIVES MY PERSONAL DATA?
Within Cathryn Avison Ltd, there are a number of people on our team who help us deliver our services.
We also use a few third party providers (also known as data processors) for certain aspects of our work.
In each case, we have agreements in place so that your data is processed in line with each privacy notice provided when you submit your data.
Please see the specific privacy notices for more information or contact us for more details.
Sometime we may transfer or store your data outside the European Union. It may also be processed by third parties operating outside the EU who work for us or for one of our suppliers or partners.
Such staff maybe engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services.
By submitting your data, you agree to this transfer, storing or processing.
We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.
WHAT ARE MY RIGHTS?
We are committed to upholding your rights which fall into eight areas:
Your right to be informed
We will inform you about our data processing in a privacy notice where relevant
We will be transparent about how we use your personal data
Your right of access
You can obtain confirmation that your data is being processed
You can obtain access to your personal data
You can obtain supplementary information, which we will provide in a corresponding privacy notice
Your right to rectification
You can request that your personal data be rectified (for example, if it is inaccurate or incomplete)
Your right to erasure
You can request that your personal data be erased and prevent processing in specific circumstances (please ask us if you are unsure)
Your right to restrict processing
You can 'block' or suppress processing of your personal data (for example, if you contest the accuracy of your data)
Your right to data portability
You can obtain and reuse your personal data for your own purposes across different services
You can move, copy or transfer personal data electronically in a safe and secure way, without hindrance to usability
Your right to object
You can object to processing based on legitimate interests
You can object to direct marketing
You can object to processing for research and statistics
Your rights in relating to automated decision making and profiling
HOW LONG DO YOU KEEP MY DATA?
We keep your personal data for no longer than is necessary for the purposes for which it is processed, according to our internal policies.
HOW DO I COMPLAIN?
In the first instance, please contact our Data Protection Officer for clarifications, to exercise your relevant rights or for queries and complaints.
You have the right to lodge a complaint with the supervisory authority for data protection, which is the Information Commissioner's Office (ICO).
Or by post:
Information Commissioner's Office
Wycliffe House
Water Lane
WILMSLOW SK9 5AF
Phone: 0303 1231113
E-mail: https://ico.org.uk/global/contact-us/email/
Report a concern: https://ico.org.uk/concerns/
REQUEST ACCESS TO YOUR DATA
Or you can write to us:
Data Protection Officer
Well Cottage,
Dragons Lane, Shipley,
Horsham, West Sussex,
RH13 8GD
Please e-mail your request to our Data Protection Officer via the form below 👇.
You can ask us for personal information we might hold about you, but please try to be as clear as possible
This will help us understand your request and respond to you promptly
We might ask you for clarification if we are not sure what you are looking for
We will usually only hold information about you if you've dealt with us before; we typically keep this information for a maximum of two years
We deal with these requests under the General Data Protection Regulation (GDPR)
We don't charge a fee for responding to these requests
We respond to requests within 40 calendar days