1. WHO IS RESPONSIBLE FOR YOUR DATA
J&O Studio Limited 45-49, Burch Rd, Northfleet, Gravesend DA11 9NE
And trading office is at 45-49, Burch Rd, Northfleet, Gravesend DA11 9NE
With registration no 10690804 We control the ways your personal data are collected and the purposes for which your personal data are used by J&O Studio Limited and are the “data controller” for the purposes of the UK Data Protection Act 1998, EU General Data Protection Regulation (GDPR), PCI-DSS, and European data protection legislation.
2. PURPOSE AND LEGAL GROUNDS FOR PROCESSING YOUR DATA
To sell our products and services to you and carry out any logistics for delivery or return of goods and services This purpose allows J&O Studio Limited to lawfully process your data for legitimate interests (GDPR 6F) and our legal obligations to your country’s tax and revenue authorities. • To inform, inspire and engage with you about our products and services This purpose allows J&O Studio Limited to seek your consent to process your data for communication, education and marketing purposes (GDPR 1). Without your explicit consent, J&O Studio Limited will not process your data for this purpose. The purpose and lawful basis for processing your data may change from time to time, where this policy will be updated.
From 25th May 2018 your consent will be an explicit action; we will not use defaulted opt-in check boxes or include your personal data for marketing purposes. However, by ordering from us, you enter a contract with us and we will be able to use your personal data to communicate with you about your order. We will not contact you if you have withdrawn consent, you can grant or withdraw your consent at any time by contacting us at firstname.lastname@example.org . You can pop out from direct marketing by the following means: Following the instruction in each marketing post, there is an unsubscribe link at the bottom of every email. If you prefer, you can send an email to email@example.com with the header “Unsubscribe”. We ask that you allow 28 working days to complete any unsubscribe request.
4. PERSONAL DATA WE COLLECT ABOUT YOU
5. HOW AND WHY WE USE YOUR PERSONAL DATA
We use your personal data for the following purposes: To manage your orders and provide our services to you. When you purchase from us, or seek advice, we use your information to perform our services in relation to your purchase or enquiry, for example to provide you with product/service, tailor specific advice to your project’s needs To communicate with you and manage our relationship with you. Occasionally we may need to contact you by email and/or telephone for administrative or operational reasons, for example in order to send you confirmation of your purchases and your payments, to notify you when your order is ready for collection or to advise you of disruption and changes to your orders and/or deliveries. Please be aware that these communications are not made for marketing purposes and as such, you will continue to receive them even if you opt-out from receiving marketing communications. Your opinion is very important to us, so we may send you an email to seek your feedback. We will use the communications you exchange with us and the feedback you may provide in order to manage our relationship with you as our customer and to improve our services and experiences for customers. To personalise and improve your customer experience. We may use your personal data in order to tailor our services to your needs and preferences and to provide you with a personalised customer experience. For example, if you inform us about your preferred products, colours or style we will be able to send you inspirational tips and ideas relevant to your interests. If you are in the process of making a purchase under your account and you leave our website before your order has been placed, we may contact you in order to help you easily complete your purchase. To inform you about our news and offers that you may like. We may send you marketing communications, if you have indicated that you are happy to receive these, for example when you create an account on our website and you explicitly agree to receive such communications. You can also request us to send you marketing communications through managing your preferences in your account. If you are happy to receive marketing communications, we will provide you with news from us such as new products that you may be interested in or services that you may like. Please note that we do not share your contact details and other personal data with other companies for marketing purposes. You can choose to opt out from receiving marketing communications at any time, by clicking on the relevant unsubscribe link at the bottom of any marketing related email you may receive from us. If you prefer, you can also send an email to firstname.lastname@example.org with the header “Unsubscribe”. We ask that you allow 28 working days to complete any unsubscribe request. To improve our services, fulfil our administrative purposes and protect our business interests. The business purposes for which we will use your information include accounting, billing and audit, credit or other payment card verification, fraud screening, security and legal purposes, statistical and marketing analysis, systems testing, maintenance and development. To comply with our legal obligations, for example, our obligation to provide your information to local police agencies.
6. REQUESTING ACCESS TO YOUR PERSONAL DATA
Following a successful security process, you have a right to request access to the personal data that we hold about you. This could include purchase information relating to products and services. If you have questions in relation to your personal data, please contact us at: email@example.com
7. YOUR RIGHTS
Right to portability: Whenever J&O Studio Limited processes your personal data, by automated means based on your consent or based on an agreement; you have the right to get a copy of your data transferred to you or to another party. This only includes the personal data you have submitted to us. Right to rectification: You have the right to request rectification of your personal data if the information is incorrect, including the right to have incomplete personal data completed. Your right to object to processing based on legitimate interest: You have the right to object to processing of your personal data that is based on J&O Studio Limited legitimate interest. J&O Studio Limited will not continue to process the personal data unless we can demonstrate legitimate grounds for the process which overrides your interest and rights or due to legal claims. Your right to object to direct marketing: You have the right to object to direct marketing, including profiling analysis made for direct marketing purposes. You can opt out from direct marketing by following the instruction in each marketing emails If you prefer, you can also send an email to firstname.lastname@example.org with the header “Unsubscribe”. We ask that you allow 28 working days to complete any unsubscribe request. How can you exercise your rights? We take data protection very seriously and will process any enquiry in a prompt manner, please contact email@example.com Right to complain with a supervisory authority: If you consider J&O Studio Limited to process your personal data in an incorrect way you can contact us. You also have the right to raise a complaint to a supervisory authority. You have a right to be forgotten and have data erased and / or stop being processed where the personal data is no longer necessary for the purpose of collection, you withdraw consent, when you object to the processing or to comply with a legal obligation, such as and not exhaustive; You have an on-going matter with Customer Service You have an open order which has not yet been shipped or partially shipped You have an unsettled debt with J&O Studio Limited, regardless of the payment method If you are suspected or have misused our services within the last four years If you have made any purchase, we will keep your personal data in connection to your transaction for book-keeping purposes. Encrypted system backups, held for up to 10 years. It is practically impossible to alter these backup files Our anti-spam and email gateway. We maintain email archiving for security reasons, and your info may be kept in this archive. Access to this gateway is limited to named data controllers for J&O Studio Limited. If you have questions in relation to your personal data, please contact us at: firstname.lastname@example.org
8. RIGHT TO RESTRICT PROCESSING
You have a right for your personal data to be stored but not processed. This is achieved through the withdrawal of consent. You have the right to request that J&O Studio Limited restricts the processing of your personal data under the following circumstances: If you object to a processing based on J&O Studio Limited legitimate interest, J&O Studio Limited shall restrict all processing of such data pending the verification of the legitimate interest. If you have claim that your personal data is incorrect, J&O Studio Limited must restrict all processing of such data pending the verification of the accuracy of the personal data. If the processing is unlawful you can oppose the erasure of personal data and instead request the restriction of the use of your personal data instead If J&O Studio Limited no longer needs the personal data but it is required by you to defend legal claims. If you have questions in relation to your personal data, please contact us at: email@example.com
9. SECURITY OF YOUR PERSONAL DATA
10. COOKIES OR OTHER TRACKING TECHNOLOGIES
11. SHARING YOUR PERSONAL DATA
13. CONTACT INFORMATION