This page explains how I collect, use and protect your personal information in accordance with the General Data Protection Regulations (GDPR) and UK Data Protection Act 2018. Please be assured that your personal data will be treated as strictly confidential. I do not use any form of automated decision making in my business, nor do I operate any mailing lists.
For the purpose of Data Protection legislation, Celia Ffitch-Stewart is the data controller and any enquiry regarding the collection, processing, storage or amendment of your information should be addressed directly to me at email@example.com
Contents of this policy:
The data collected is provided to me by you when you provide information to me in an email or by phone.
I collect this information when you make an enquiry or request information. This personal information may include the following:
I take all reasonable technical and organisational precautions to store your information in a secure manner and prevent its loss or misuse.
The personal information provided to me will only be used in connection with the services provided to you. I may use your personal information to respond to your enquiry and provide information that may be useful to you. I will only use your personal data when legally permitted to do so under the following lawful bases.
To process your personal data, I use the lawful basis of consent because you have asked me for information about my services. You may withdraw your consent at any time. If using personal data to serve these legitimate interests, I will always balance your rights and interests in the protection of your information against my rights and interests.
I have appropriate security measures to prevent your personal data from being accidentally lost or accessed in an unauthorised way.
I will only retain your personal data for as long as necessary to fulfil the purposes I collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Cookies and Google Analytics
Cookies are small text files which are placed on your computer or mobile device when you visit a web site. This information is used by Google Analytics to track visitor use of this web site and to compile statistical reports on web site activity, such as what countries visitors are browsing from, and which pages are the most popular. The data gathered is anonymous and cannot be used to identify individual users.
Web site logs
Web site log files collect your IP address as well as the date/time you visited the site and the pages you visited. An IP address is a numeric code assigned to a device based on your geographical location. It does not provide me with any identity details.
I do not transfer any of your personal data outside the European Economic Area (EEA). However you should be aware that anonymous data from the web site statistics is collated and analysed by US-based Google Analytics software.
In accordance with UK and European law under the General Data Protection Regulation (GDPR), you may request a copy of the personal information I hold about you. Provision of such information will be subject to the supply of appropriate evidence of your identity. You also have the right to request that I delete and destroy your personal data. You can view full details about all of your rights under GDPR on this external web site: knowyourprivacyrights.org
Where I am using your personal data on the basis of your consent, you are entitled to withdraw that consent at any time subject to applicable law. Where I process your personal data based on legitimate interest, you have the right to object at any time to that use of your personal data subject to applicable law.
If you are not happy with any aspect of how I collect and use your data, you have the right to complain to the Information Commissioner's Office (ICO), the UK regulatory authority for data protection issues (www.ico.org.uk). Please contact me first if you do have a complaint so that we can try to resolve it for you.
It is very important that the information I hold about you is accurate and up-to-date. Please let me know if at any time your personal information changes.
If any breach of personal data occurs, I am obliged to notify the ICO within 72 hours of becoming aware of the breach.
Page last updated 5 April 2021