This privacy notice sets out the details of how I, Emma Bushell as data controller, collect and process your personal data when you make a purchase from me, or through your use of my products, services or my website which is located at www.emmabushell.com, or my other online platforms and/or social media channels which, for the purposes of this privacy notice, shall be collectively referred to as ("the Website") or any data which you provide to me directly in any way.
For the purposes of this privacy notice, personal data shall mean any information that can be used to identify an individual whether directly or indirectly (“Personal Data”) as defined by the UK GDPR and the Data Protection Act 2018.
Please read through the content of this Privacy Notice carefully and ensure that you understand it. If you do not understand the content of this Privacy Notice or do not accept or agree with any terms then you must stop using the Website and/ or accessing my online platforms, social media groups or pages immediately. If you have already provided me with any Personal Data then please contact me immediately using the contact details below.
By accessing the Website and providing me with your Personal Data you are warranting that you are over 18 years of age.
If you have any questions about this Privacy Notice or require more information concerning my privacy and data protection practices please contact me at email@example.com.
How we collect and process your Personal Data
I may collect and process Personal Data that you provide to me when subscribing to my newsletter or email list, requesting information through a contact form, purchasing my products or services, communicating with my administration or contact teams or by any other communication between us via email, messenger text or through our Website.
I may also collect and process Personal Data received from third parties as detailed further below.
I do not carry out automated decision making or any type of automated profiling.
My grounds for collecting and processing your Personal Data
When I collect and process your Personal Data, I will comply with the relevant data protection laws and principles such as the UK General Data Protection Regulation (“UK GDPR”) and the EU General Data Protection (“EU GDPR”) and the Data Protection Act 2018 which means that your data will be used lawfully, fairly and in a transparent way and kept securely and only for as long as necessary for the purposes I have told you about.
When I collect and process your Personal Data, I do so on the basis of a lawful condition which will be because you have given your consent for me to process your data, I have legal permission to do so, I am under a contractual or legal obligation, or it is in my
legitimate interests to do so. I confirm that I shall only collect and process your Personal Data for purposes that are clearly outlined prior to you providing me with your data, or for a legitimate reason.
The types of Personal Data I collect and process
The types of Personal Data which I process will vary depending on your own specific circumstances and the nature of our relationship with you, but typically may include:
• Personal and Contact Information: this may include your name, date of birth, email address, phone number, business contact details (where applicable), correspondence address, IP address and any messages or communications that you may provide to me through my Website. I shall process this data for the purposes of communicating with you and for record keeping on the lawful grounds of legitimate interest;
• Customer or Client Information: where you purchase goods and/or services from me then I may process Personal Data in connection with your purchase and the supply of that purchase, as well as keeping appropriate records. Such information may include your personal Information, billing address, delivery address, credit card or other payment details and I shall process this Personal Data on contractual grounds;
• Website User Information: this may include comments or statements that you may make or post via the Website, my online platforms or social media channels, images, documents or videos that you share on or through my Website or through any of my pages or other online platforms and information concerning your use of my Website or other online platforms such as your browser information, pixel ID, page views, pages visited, number of visits and where appropriate log-in details. I shall process this information to help me analyse and monitor usage and content of my Website and other platforms and channels to ensure that the content is relevant, to support my administration and record keeping requirements and to maintain security of my systems on legitimate interest grounds;
• Promotional Information: this may be information that you provide in connection with any promotions, marketing or advertising from me or my third parties. I shall use this information to provide relevant offers and advertisements, competitions and promotions and other free resources to you and to monitor my promotional activity, keep records and compile analytics on legitimate interest grounds.
Use of Personal Data for marketing purposes
In accordance with the Privacy and Electronic Communications Regulations (PECR) I may also send you relevant advertisements or marketing information if you:
have ever purchased or enquired about my products or services; and
at the time of your purchase or enquiry you agreed to receive advertising or marketing information from me and you have not opted out from receiving that information.
Where I contact you through email, I shall ensure that my emails clearly display my location and include clear options for you to opt-out from receiving further contact from me in accordance with the CAN-SPAM Act.
You can opt out of receiving any communications from me at any time by using the opt-out links in the communications you receive or by notifying me in writing by email to firstname.lastname@example.org. Please note that opting out of communications will not prevent me from contacting you where I am required to do so in order to provide you with products or services that you have requested or purchased.
I will never share your Personal Data with any third party for their own marketing purposes without your express consent.
Special Category Personal Data
I do not collect any special category Personal Data. Special category data includes Personal Data relating to your health, race or ethnicity, political opinion, religious or philosophical beliefs, trade union membership, genetics, biometrics, sex life or sexual orientation. I do not process any Personal Data relating to criminal offences and convictions.
Disclosure of Personal Data to third parties
I may use any of the following external service providers to support my business and may share your Personal Data with them.
I understand that all of these third parties have appropriate technical and security processes in place to protect your Personal Data. If you have any queries concerning how any of these third parties process your Personal Data, I recommend that you review their individual privacy notices which are available on their respective websites.
I may also share your Personal Data as follows:
where it is necessary for external service providers who I have contracted with to provide me with services in connection with my business activities;
where it is required by my IT support or administration support teams;
where it is required by my accountants, lawyers or other professional advisors;
where I am required by a government body or legal obligation or to protect my rights;
where it is required in connection with the sale or purchase of any part of my business or assets;
Where I have contracted with an external service provider to provide me with a function or service, I will only disclose such Personal Data that the service provider needs to undertake that function or service and I require that all external service providers agree to keep your Personal Data secure in accordance with the relevant Data Protection legislation.
Transfer of Personal Data
I may transfer your Personal Data to my third-party service providers who are based outside of the UK. Where your Personal Data is transferred outside of the UK by my third-party service providers, I understand that one or more of the following safeguards relating to the security of your Personal Data apply:
the relevant UK regulatory authorities have approved the transfer of data to the country where the service provider is based; or
adequate protection regulations are in place in the country or territory where the service provider is based; or
appropriate contractual agreements are in place to protect your data which are compliant with the UK data protection legislation; or
an approved code of conduct, compliant with the UK GDPR is in place.
Where the above standards do not apply then I will only transfer your Personal Data outside of the UK where one of the following conditions is met:
I. you have given your express consent; or
II. the transfer is legally required.
I take the protection of your Personal Data seriously and have taken suitable and reasonable steps to protect the Personal Data I hold from misuse, loss, unauthorised access, and any modification or disclosure.
I limit access to your Personal Data to only those employees, agents, contractor or third parties that I engage that have a business need to access your Personal Data. I confirm that they will only process your Personal Data on my instructions and must agree to keep it safe and confidential.
If you are submitting any Personal Data over the internet that you wish to remain private, please note that whilst attempts are made to secure information transmitted to my Website, there are inherent risks involved in transmitting information across the internet. If you would prefer to provide me with your Personal Data through alternative means then you can contact me using the details below to arrange this.
I agree not to keep your Personal Data for longer than I require having regard to the purposes for which I have collected it, including any legal or record keeping requirements. Where your Personal Data is no longer required, I agree to take reasonable steps to destroy or permanently de-identify your Personal Data.
Your rights in relation to the Personal Data we hold
You have rights under the relevant data protection legislation in relation to your Personal Data. These include the right to be informed about our collection and processing of your Personal Data, your right to access and receive a copy of any of your Personal Data I hold, to ask me to correct any errors, to erase or delete your Personal Data and to restrict or object to how your Personal Data is processed. Should you wish to exercise any of your rights then please contact me by emailing using the details below.
You will not be charged a fee to access your Personal Data but I reserve my rights to charge a fee where I consider, in my reasonable opinion, that any request you make is unfounded or excessive. I aim to respond to all legitimate requests within one month.
You can find out more about your rights by visiting https://ico.org.uk/your-data-matters/
To ensure the information I hold about you remains accurate please contact me by email using the details below if at any time your personal information changes.
Where you have provided your consent for me to process your Personal Data you can withdraw that consent at any time. Should you wish to do so please contact me by email using the email address below.
The Website is owned by Emma Bushell. My contact email address is: email@example.com and my registered business address is Room 305, Beaumont House, Beaumont Road, Banbury, Oxfordshire, OX16 1RH
Complaints or concerns
If you have any concerns regarding the use of your Personal Data then please contact me by using the email address referred to above and allow me the time to investigate and resolve your complaint or concern.
If you are based in the UK you also have the right to lodge a complaint with the Information Commissioners Office (ICO), the UK supervisory authority for data protection issues but I would ask that you contact me first and allow me the opportunity to resolve your complaint before contacting the ICO.
If you are not based in the UK then you can pursue a complaint to the relevant regulatory authority in your territory but I would ask that you contact me first and allow me the opportunity to resolve your complaint before contacting them.
Links to other sites
The Website may contain links to other sites. I am not responsible for the privacy practices of those websites and have no knowledge of whether cookies or other tracking devices are used on any such linked sites. If you have any concerns regarding the privacy of your information you should ensure you review the privacy policies of those sites before disclosing any of your personal information.
Changes to this Privacy Notice
I reserve the right to alter or amend this Privacy Notice without any prior notice to you. Should my Privacy Notice be altered, the new Privacy Notice will be posted on the Website.
Your first use of my Website after the date of any amendments or alterations to this Privacy Notice will constitute your acceptance of such changes, therefore I recommend you review this Privacy Notice regularly to keep informed of any changes.