What information do we collect about you?
In order to process your enquiries and bookings, it is necessary to collect personal data from you. This includes, but is not limited to: your name, address, e-mail address and telephone number. We are unable to provide you with products and services if you do not provide certain information to us. If you contact us by filling in the contact form on our website the information you provide will be not be stored by our website.
We will not collect or share any personal data about children under 18. If we take a photograph of a child under 18 we will ask the responsible adult, parent or guardian accompanying the child for permission to take and use the picture. We will never take photographs of unaccompanied children. You must be at least 18 years of age to purchase products or services from us. If you are under the age of 18, you must ensure that your parent or guardian purchases the products or services on your behalf.
We will never keep any financial information about you. If you make an online payment to us via PayPal or Worldpay you will be directed to a separate secure site to make your payment and none of your financial information will visible or available to us.
How will we use the information about you?
We will use your information to process and deliver the services you book; to manage payments, fees and charges; to collect and recover money owed to us; to provide you with services you requested from us when we collected the information from you, to keep legally required business records.
We may publish reviews and feedback you give our business on our website, social media pages or in print advertising and media for marketing purposes. If you give permission for us to take and use a picture of you or a child for whom you are responsible we may use such photographs in our print advertising, or for marketing purposes on our website, social media pages or relevant professional interest group pages. No identifying personal data will ever be disclosed accompanying a review or a photograph of any adult or child.
What is our legal basis for processing your data?
We rely on the following legal basis when processing your data:
Our legitimate interests (to run an effective and successful business), where not outweighed by your interests, including to: ask you to leave feedback or a review; use reviews and photographs for marketing purposes. The legitimate interests we rely on for this processing are: to keep our records updated; to develop our products and services; to develop and grow our business; to run our business; to provide administration; for fraud prevention; to keep our site and content updated and relevant.
Your consent, including to: contact you about your enquiry or booking; provide you with customer service; take and use photographs of you or a child for whom you are responsible, share and re-use review or feedback content you have provided on our website or public forums.
You can withdraw your consent at any time
What will we disclose to third parties?
We will only share selected data with 3rd parties where it is necessary for us to do so to operate our business and provide you with the products or services you have requested, or if we are required to do so by law. Where you have given your permission for the taking and use of photographs we may share these in our print advertising, or for marketing purposes on our website, social media pages or relevant professional interest group pages. Where you have published a review or given feedback on our website or other public pages we may share or re-publish that review on other sites or social media. No identifying personal data will ever be disclosed accompanying a photograph of any adult or child. We will never sell your information or allow it to be used for any purpose not connected to Face Painting by Dawn. We reserve the right to disclose your personal data in order to comply with the law, applicable regulations and government requests.
How do we protect your information?
Once we have received your data we will take steps to ensure that it is treated securely in accordance with any applicable laws. Our website and any data you enter there is protected by an HTTPS certificate.
How long do we keep your information?
We are required by law to keep certain information about our customers (such as transaction related data) for seven years after they cease being customers for tax purposes.
Our data retention periods vary depending on the context of the services that we provide to you and our legal obligations. To determine the appropriate period for which we keep your data, we consider the amount, nature and sensitivity of your data, the potential risk or harm from unauthorised use or disclosure of your personal data, the purposes for which we process that data (and whether we can achieve those purposes through other means), and applicable legal requirements.
You have certain rights in relation to the personal data we hold about you. When you exercise your rights, we need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
You have the right to:
Request access to your personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we need to verify the accuracy of the new data you provide to us.
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where we could have processed your information unlawfully or where we are required to erase your personal data to comply with the law.
Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.
Make a complaint at any time to the Information Commissioner’s Office, the supervisory authority for data protection issues in the UK. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance using the details provided in the How to contact us section below.
If you wish to exercise any of the rights set out above, please contact us using the details provided in the How to contact us section below.
How to contact us
Last updated May 2018