We are committed to protecting your privacy.  The Company is committed to valuing, protecting and respecting your right to privacy at all times. This Policy governs the use of personal data which you provide to us via our website (“the Site”). Personal data is any or all data relating to a natural person who is identified, or can be identified, from the data.

Our site may contain links to other sites. Please be aware that if you choose to click on those links, your data may be processed by other organisations hosting those sites. We cannot control or monitor this, and you should make reference to their own Privacy Policies.

Please read this Privacy Policy carefully, and ensure you understand it.  When you first use our Site, this is taken to be agreement to this Policy. If you do not accept the Policy, then you should stop using the Site immediately.

Who we are

When we refer to ‘we’ (or ‘our’ or ‘us’), that means Claire Ashton.

·      the Site is owned by us and operated by Holly Small Design

Your rights

You have certain rights as a data subject under the General Data Protection Regulation (GDPR), which governs the collection, processing and disposal of personal data by organisations such as ours.

In relation to personal data about you, you have the right:

·      to be informed about how and why we collect and use the data

·      to be given access to the data we hold

·      to have any inaccurate or incomplete data rectified

·      to ask us to delete personal data, earlier than we might already dispose of it

·      to prevent us from processing the data further

·      to object to us using the data for particular purposes

We provide contact details at the end of this Policy for you to use if you have any complaint about our processing of your personal data. If you are not satisfied with the way we deal with this issue, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), which is the body in charge of supervising personal data use in the UK.

What data do we collect?

If you communicate with us by e-mail or by our contact form on our website, we will collect your name and e-mail address and any other content that you send to us in the body of the mail. We do not collect any other personal data by any other method.

When you visit or use some parts of our websites and/or services we might ask you to provide personal data to us. For example, we ask for your contact information when you fill in a form, sign up for updates, join us on social media, contact us with questions or request support. If you don’t want to provide us with personal data, you don’t have to, but it might mean you can’t use some parts of our websites or services.

How is your data used?

We will process and store your data securely, and we will only keep it for as long as we need it for the purpose(s) for which it was collected.

In relation to the data we do collect, as laid out in the section above, we may use it as follows:

·      to reply to your email

·      to send you marketing emails

You have the right to withdraw your consent to our use of your personal data at any time, and to request that we delete it.

We will not share your personal data with anyone at any time, unless you give us prior consent.

How and where we store your data?

Your data will only be stored in the UK.

OR

Your data will only be stored within the European Economic Area (EEA).

OR

Some or all of your data may be stored outside of the EEA. If we do store data outside this area, we will take all reasonable steps to ensure that your data is as safe and secure as it would be within the UK, and is treated lawfully and in accordance with the GDPR.

The steps we take to secure your data include:

·      Storing backups on secure UK based servers

·      Limited access to the website backend by a limited number of authorised users who have agreed to abide by the GDPR

·      Security measures that lock out IP addresses that make multiple unsuccessful attempts to login

Accessing your data

It’s your personal data and you have certain rights relating to it. When it comes to marketing communications, you can ask us not to send you these at any time – just follow the unsubscribe instructions contained in the marketing communication, or send your request to Claire Ashton.

You also have rights under the GDPR to:

·      know what personal data we hold about you, and to make sure it’s correct and up to date

·      request a copy of your personal data, or ask us to restrict processing your personal data or delete it

·      object to our continued processing of your personal data

You can exercise these rights at any time by contacting us and we will provide any or all information in response to your request.

Cookies

We’ve introduced a new cookie notice to provide more detail on the cookies that we use and how they impact the user experience.

Contact Details

If you have any questions about the Site or this Policy, or you wish to make a Subject Access Request, then please contact us, making your request or query clear.