Privacy Notice

17.04.2024

Privacy Notice

www.jamesspencerartist.co.uk

My contact details

James Spencer

Collingwood Buildings

38 Collingwood Street

Newcastle Upon Tyne

NE1 1JF

Phone Number: +44(0)7965827331

Email: contact@jamesspencerartist.co.uk

Website: www.jamesspencerartist.co.uk

What type of information I have

I currently collect and process the following information:

Contact details

Name.
Address.
Phone number.
Email address.

How I get the information and why I have it

Most of the personal information I process is provided to me by you for one of the following reasons:

To place an order.
To commission me.
General enquiries. (Data only retained for the duration of the enquiry.)
To join my mailing list.

When you make a purchase through my website I receive your personal information via my website/online shop host Wix.com and from the payment service provider PayPal who both process your data. I also receive your personal data through Wix when you submit your email address to join my mailing list.

Sumup may process your data when you make card payments in person for example at markets and my pop-up gallery events. They may also process your data if I invoice you through Sumup.

Sumup privacy notice: https://www.sumup.com/en-gb/privacy/

Wix may process your data outside of the EEA, to do this they have adequate safeguards in place such as the EU-U.S. Privacy Shield. Please see their privacy policy here:

Wix privacy notice : https://www.wix.com/about/privacy

PayPal may process your data outside of the EEA, they use binding corporate rules to protect this data. Please view their privacy policy here:

PayPal privacy notice: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full

Google may also process your data outside of the EEA as my email account is with Google’s G Suite. Google have in place EU Model Contract Clauses (Standard Contractual Clauses) to allow transfers of personal data outside the EU, Switzerland and the United Kingdom.

For more information please read: https://gsuite.google.com/terms/dpa_terms.html

Under the General Data Protection Regulation (GDPR), the lawful bases I rely on for processing this information are:

(a)I have a contractual obligation.

(b) I have a legal obligation.

What I do with the information I have

I use the information that I have received/collected in order to:

Carry out a contract. (Contractual obligation).
Contact you regarding an order. (Contractual obligation).
Deliver an order. (Contractual obligation).
Maintain business and financial records. (Legal obligation).
Send marketing emails. (Consent).

To process payments I may share this information with PayPal and they may process your data outside of the EEA. PayPal have binding corporate rules in place to protect data outside of the EEA. Sumup store personal data within the EEA but may transfer data to countries outside of the EEA who are part of the 'payment transactions process', those countries may not have the same data protection but Sumup state that they 'will at all times continue to collect, store and use your information in accordance' with their Privacy Policy and 'the applicable data protection legislation'. Sumup privacy policy: https://www.sumup.com/en-gb/privacy/ . Your information may also be shared with Royal Mail so they can deliver your order. I may also share your data with trusted third parties who assist with the running of my business.

Trustpilot A/S may process your data when sending out review invitations on my behalf and when you leave a review after you have made a purchase. According to their privacy policy Trustpilot A/S may process your data outside of the EEA but they will only do so if there are adequate safeguards to protect the data. ‘Trustpilot A/S will not transfer Relevant Data outside of the European Economic Area and the UK unless it has taken necessary measures to ensure that the transfer complies with the Applicable Data Protection Law.

These measures may include transferring the Relevant Data to a recipient in a country that the European Commission has decided provides adequate protection for personal data or to a recipient that has executed standard contractual clauses adopted or approved by the European Commission.’ - Trustpilot

You can view their full privacy policy here:

Trustpilot A/S: https://legal.trustpilot.com/for-reviewers/end-user-privacy-terms

Email Marketing

When you join my mailing list through my website your email address may automatically be added to my Mailchimp contacts. This means that your personal data may be processed by both Wix (my website provider) and by Mailchimp (the platform I use for email marketing).

Mailchimp may process your data outside of the EEA with the use of Standard Contractual Clauses.

You can remove your consent to receive marketing emails at any time. Just click the unsubscribe link in one of my emails or contact me directly.

How I store your information

Your information is securely stored. I will keep documents relating to sales which may include names, addresses, phone numbers and email addresses for up to 7 years for legal purposes. After this time the data will be deleted.

My website, including my online shop, uses cookies. A cookie is a small text file that is downloaded onto ‘terminal equipment’ (e.g. a computer or smartphone) when the user accesses a website. It allows the website to recognise that user’s device and store some information about the user’s preferences or past actions.

My website is hosted by Wix, this means Wix may process your personal data. Wix use cookies on my site for security, unique visitor identification, visitor behaviour tracking and for measuring site performance. They may also use other tracking tools such as Flash Cookies, HTML5 and Clear Gifs. For more information regarding Wix’s use of cookies and other tracking tools you can read their privacy policy here:

https://www.wix.com/about/privacy

Trustpilot A/S will also use cookies on my website in order to request reviews after a purchase has been made. You can find more details on how Trustpilot A/S uses cookies here:

https://legal.trustpilot.com/for-everyone/cookie-policy

You can choose which cookies to allow by clicking the settings button on my website's cookie banner. You can also disable and remove cookies through your web browser’s settings, although this may affect the performance of the website.

Mailchimp also add tracking technology to each marketing email that I send through them in order to provide data on the performance of each email marketing campaign.

'We automatically place single pixel gifs, also known as web beacons, in every email sent by our Members. These are tiny graphic files that contain unique identifiers that enable us and our Members to recognize when their Contacts have opened an email or clicked certain links. These technologies record each Contact’s email address, IP address, date, and time associated with each open and click for a campaign. We use this data to create reports for our Members about how an email campaign performed and what actions Contacts took.' - Mailchimp

You can view Mailchimp's cookie statement here:

https://mailchimp.com/legal/cookies/

Your data protection rights

Under data protection law, you have rights including:

Your right of access - You have the right to ask me for copies of your personal information.

Your right to rectification - You have the right to ask me to rectify information you think is inaccurate. You also have the right to ask me to complete information you think is incomplete.

Your right to erasure - You have the right to ask me to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask me to restrict the processing of your information in certain circumstances.

Your right to object to processing - You have the the right to object to the processing of your personal data in certain circumstances.

Your right to data portability - You have the right to ask that I transfer the information you gave me to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, I have one month to respond to you.

Please contact me at contact@jamesspencerartist.co.uk if you wish to make a request.

How to complain

You can also complain to the ICO if you are unhappy with how I have used your data.

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

Contains public sector information licensed under the Open Government Licence v3.0.

ICO:

https://ico.org.uk

Open Government Licence:

http://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/

JAMES SPENCER

Fine Art

Join the mailing list to hear about my latest work, upcoming exhibitions and behind the scenes updates from my studio.

Terms and Conditions