This privacy notice relates to www.charlotterileyart.com a website which acts as an online shop for artwork sales, a portfolio, and information hub for Charlotte Riley Art.
This privacy notice has been compiled to explain how we use any personal information we collect about you when you use or browse this website, and your rights in relation to that data. The term ‘personal data’, also commonly referred to as personal information, means any information about an individual from which on its own or when combined with other information that person can be identified.
For the purposes of data protection regulations, Charlotte Riley Art is the data controller, which means the entity responsible for your personal data, and is also referred to in this Privacy Notice as “we”, “us” and “our”.
Our full contact details are:
Charlotte Riley Art, 1 Lidenbrook, Liddington, Wiltshire, SN4 0HL
Email: charlotte@charlotterileyart.com
Telephone: 07816 753353
If you have any questions about anything in this Privacy Notice, or you wish to request access to the data we hold about you, you can contact us using the details above.
It is important that the personal data we hold about you is accurate and up to date. Please do let us know if any of that data changes during the time we hold it.
What data do we collect from you?
We collect information about you when you place an order or comment on our site, as appropriate, you may be asked to enter your name, email address, mailing address, credit card information or other details.
How do we collect your data?
We collect data from and about you in various forms. When you place an order, subscribe to our Studio Notes newsletter, browse the website or enter information when using our contact form.
Third party links and websites
Our Website may contain links to third-party websites, plug-ins or applications. By clicking on any of those links or enabling those connections, you may allow third parties to collect or share data about you. We do not control those third-party sites and we are not responsible for what they may do with data they collect about you. We recommend that you read the privacy notices of each third-party site in order to understand how they may collect and process your data.
How do we use your information?
We may use the personal information we collect from you in the following ways:
- To process transactions, following a sale.
- To send follow up correspondence (email or phone) following a sale.
- To improve the functionality of our website in order to improve your experience.
- To send you periodic emails regarding other products or service.
- To send newsletters or updates.
- To respond to enquiries submitted via any of the forms on our Website.
We will only use your personal data for the purposes for which we collected it, unless we believe that we need to use it for another purpose and that purpose is compatible with the original purpose for which the data was provided to us. You can contact us at any time to obtain more information about this processing. If we need to use your personal data for any other purpose, we will notify you and will explain the legal basis that allows us to do so.
Please note that we may process your personal data without your knowledge or consent if the law requires or permits us to do so.
How do we protect you data?
We have put in place appropriate security measures for the nature and scale of our business, in order to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those of our employees, contractors and other third parties who have a business need to know, and only on our instructions and subject to a duty of confidentiality.
We have procedures in place to deal with any suspected personal data breach and we will notify you and any applicable regulator of a breach where we are legally required to do so.
We implement a variety of security measures when a user places an order to maintain the safety of your personal information. All transactions are processed through a gateway provider (Stripe) and are not stored or processed on our servers.
How long will we use your data for?
We will only retain your personal data for as long as is necessary to fulfil the purposes we collected it for, including for the purposes of satisfying legal, accounting and reporting requirements.
To determine how long we need to retain data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process that data and whether we can achieve those purposes without keeping the data.
If you are a client, by law we have to keep certain basic information about you for six years after ceasing to work with you, for tax purposes.
We aim to carry out data reviews on an annual basis and will endeavour at such time, where possible, to delete any data held by us and which we no longer require.
Your legal rights
You have the right to request the information we hold on you, to ask us to correct that data and, in certain circumstances, to erase that data. If you would like to do so, or to opt out of marketing and newsletter communications, or you wish to update your details and preferences with us, please email charlotte@charlotterileyart.com or give us a call on 07816 753353.
You also have certain rights to object to us processing your data, to restrict that processing or to transfer your personal data. If you would like any more information about, or would like to exercise, any of these rights please contact us. You will not be charged any fee to do so, unless your request is clearly unfounded, excessive or malicious, in which case we may either refuse to comply or we will charge a reasonable fee.
We will make every effort to respond to legitimate requests within one month. Occasionally it may take us longer to do so, if your request is complicated or you have made more than one request. In this case, we will notify you and keep you updated.
You are entitled to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, if you feel that our processing of your personal data is not compliant with our legal and regulatory obligations. We would, however, appreciate the chance to address your concerns before you contact the ICO, so we would be grateful if you would contact us in the first instance.
Changes to our privacy policy
We keep our privacy policy under regular review and we will place any updates on this web page. This privacy policy was last updated on 14 July 2024.