Lawrenson & Grebby Photography LLP
1. Data Protection
We comply with the principles of the General Data Protection Regulation (GDPR) when dealing with all data received from customers or visitors to our website.
2. Our Services
We only hold the data necessary to offer services provided on our website. We do not ask for or use more data than necessary to provide you with a proper service. This means we only process and hold data related to purchases and subsequent support related to those purchases, in accordance with Article 6(1)(b) of the General Data Protection Regulation (GDPR). Any processing of your data is only done to provide or perform the services or products you have purchased.
3. Data Protection Register
Data is only used for the purposes described in our entry on the Data Protection Register.
4. Required Period
We only hold personal data for as long as necessary. Once data is no longer needed we delete it.
5. Card & Payment Processing Data
We use third-party payment providers to handle card and payment processing data securely. We never see or store any card or payment information. In accordance with Article 6(1)(b) of the General Data Protection Regulation (GDPR) any other data is only used to process your purchase securely. In accordance with Article 6(1)(c) of the General Data Protection Regulation (GDPR), we need to retain data related to all purchases to fulfil our existing legal obligations to account for tax and VAT on all transactions.
6. Backup & Data Storage
For administrative reasons, customer data and email subscription data may be passed to and stored securely with third party service providers located outside the EEA (European Economic Area). This is done to backup and preserve your data where it is needed to carry on offering a service to you.
7. Customer Requests
As a customer, you can at any time (and free of charge) request details of the data we hold relating to you - and you can also request any such data is amended or deleted. Please note that if you request deletion of your data, this may prevent us from offering any further support relating to your previous purchases.
8. Our Promise
We never sell rent or exchange mailing lists.
9. Data Sharing With Partners
In accordance with the Privacy and Electronic Communications (EC Directive) Regulations 2003, we never send bulk unsolicited emails, (popularly known as Spam) to email addresses.
11. Product Updates
We may send emails to existing customers or prospective customers who have enquired or registered with us, regarding products or services directly provided by us.
12. Email Content
All emails sent by us will be clearly marked as originating from us.
14. Contact Us
Email should be addressed to David Grebby (data controller) at firstname.lastname@example.org
This policy was last updated on 10/04/2019
(c) www.compactlaw.co.uk / all rights reserved / version 16.0