Contact details
Email: art@deliapring.co.uk
Address: 33 Castle Hill, Axminster, EX13 5PY, England

Scope of this policy

This policy applies to all customers, wherever you are based, and complies with both the UK GDPR and, for customers in the European Economic Area (EEA), the EU GDPR.

What information we collect, use, and why

We collect or use the following information to provide services and goods, including delivery:

• Names and contact details
• Addresses
• Purchase or account history
• Payment details (including card or bank information for transfers and direct debits)
• Website user information (including user journeys and cookie tracking)
• Photographs or video recordings of your artwork on display at your premises or your reviews
• Information relating to compliments or complaints

We collect or use the following information for the operation of customer accounts and guarantees:

• Names and contact details
• Addresses
• Payment details (including card or bank information for transfers and direct debits)
• Purchase history
• Account information, including registration details
• Marketing preferences

We collect or use the following information for service updates or marketing purposes:

• Names and contact details
• Addresses
• Marketing preferences
• Location data
• Purchase or viewing history
• Website and app user journey information

We collect or use the following information to comply with legal requirements:

• Name
• Contact information

We collect or use the following personal information for dealing with queries, complaints or claims:

• Names and contact details
• Address
• Payment details
• Account information
• Purchase or service history

We manage your data in the following ways in order to fulfil your purchase

You may ask us to delete all of your data by emailing us art@deliapring.co.uk and requesting that we do so. Should you do this, we accept no liability for following up or managing your purchase beyond what we are legally responsible for by law; if we don't have your contact details, we cannot follow up.

You may also unsubscribe from any emailing lists by clicking the unsubscribe link, or replying to the email directly with your request.

If you are receiving sms updates on your order, you may also reply STOP to the message and you will be automatically unsubscribed.

If you choose to unsubscribe from email and/or sms notifications before your order is complete, we accept no liability for the shipment and completion and satisfaction of your order beyond our legal responsibilities. You may email us directly for any information we still hold on your order.

If you purchase a product, resubscribe to our emailing list, reply directly to an email, or respond to an sms AFTER you have previously unsubscribed or STOPPED this will be treated as a resubscription until you unsubscribe or STOP again.

Lawful bases and data protection rights

Under UK and EU data protection law, we must have a "lawful basis" for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR and the EU GDPR. You can find out more about lawful bases on the ICO's website.

Which lawful basis we rely on may affect your data protection rights, which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO's website:

• Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.
• Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.
• Your right to erasure - You have the right to ask us to delete your personal information. Read more about the right to erasure.
• Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information. Read more about the right to restriction of processing.
• Your right to object to processing - You have the right to object to the processing of your personal data. This applies where we rely on legitimate interests as our lawful basis. Read more about the right to object to processing.
• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data portability.
• Your right to withdraw consent – Where we rely on consent as our lawful basis, you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Our lawful basis for collecting or using personal information to provide services and goods is: Contract - we need to use your information to fulfil the order you have placed with us. Your rights of erasure and to object do not apply here, as the processing is necessary to perform our contract with you.

Our lawful basis for collecting or using personal information for the operation of customer accounts and guarantees is: Contract - we need to use your information to operate your account and honour any guarantee attached to your purchase.

Our lawful basis for collecting or using personal information for service updates or marketing purposes is: Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights apply, including the right to withdraw your consent at any time.

Our lawful basis for collecting or using personal information for legal requirements is: Legal obligation - we are required to collect or use this information to comply with the law we are subject to. Your right to object and right to erasure do not apply here, as we cannot lawfully stop processing information we are required by law to hold.

Our lawful basis for collecting or using personal information for dealing with queries, complaints or claims is: Legitimate interests - it is in our legitimate interest, and yours, to resolve queries, complaints, or claims fairly and efficiently. You have the right to object to this processing, and we will consider your objection in line with our obligations.

Where we get personal information from

Directly from you

How long we keep information

We keep your marketing and website user information for 365 days. We keep purchase, payment, and account records for as long as required to meet our legal and accounting obligations, currently 6 years from the end of the relevant tax year.

For more information on how long we store your personal information or the criteria we use to determine this please contact us using the details provided above.

Who we share information with

Highlevel Inc, Stripe UK, Zesty Business Support Services Ltd; in order for us to carry out the daily operations of our business.

Data processors

Highlevel Inc
This data processor does the following activities for us: The Customer Relationship Management system in which the ecommerce store, and customer data is stored.

Stripe
This data processor does the following activities for us: Handles the payment information of the customer.

Zesty Business Support Services Ltd
This data processor does the following activities for us: Provides bookkeeping, CRM management, and related business support services on our behalf.

Sharing information outside the UK and EEA

Where necessary, we will transfer personal information outside of the UK and the EEA. When doing so, we comply with UK and EU data protection law, making sure appropriate safeguards are in place.

For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above.

Organisation name: Highlevel Inc
Category of recipient: storage provider
Country the personal information is sent to: USA
How the transfer complies with data protection law: The country or sector has been assessed as providing adequate protection to data subjects (also known as Adequacy Regulations or UK data bridge, and recognised under the EU-US Data Privacy Framework for EEA transfers)
Where you can find more information: https://help.gohighlevel.com/support/solutions/articles/48001210915-gdpr-compliance-and-data-privacy

Organisation name: Zesty Business Support Services Ltd
Category of recipient: business support and CRM management provider
Country the personal information is sent to: New Zealand
How the transfer complies with data protection law: New Zealand has been assessed as providing adequate protection to data subjects under both the UK data bridge and the EU adequacy decision for New Zealand
Where you can find more information: please contact us using the contact information provided above

Cookies

Our website uses cookies and similar tracking technologies to make the site work and to understand how it is used.

Strictly necessary cookies

These cookies are required for our website and checkout to function correctly, for example remembering items in your basket, keeping you logged in, and processing your order. They are set automatically through our website platform, HighLevel, and do not require your consent.

Analytics cookies

We use Google Analytics to understand how visitors use our website, so we can improve it. These cookies collect information such as pages visited and time spent on site, but do not identify you personally. These cookies are only set if you accept them through our cookie banner.

Managing your cookie preferences

When you first visit our website, you will be asked to accept or decline non-essential cookies through our cookie banner. You can change your preference at any time by reopening the cookie banner using the link in our website footer, or by clearing cookies in your browser settings.

If we add any further cookies or tracking tools to our website in future, we will update this section to reflect them.

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice: art@deliapring.co.uk

If you remain unhappy with how we've used your data after raising a complaint with us:

UK-based customers can also complain to the ICO.
The ICO's address:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint

EEA-based customers can also complain to their own national data protection authority. A full list of EEA supervisory authorities is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en