Privacy Policy

I care about your privacy and how your personal data is handled. All information I collect about you will be used and protected using reasonable technological and organisational measures in accordance with current data protection law and as set out in this privacy notice.

I am committed to ensuring that your information is kept secure by putting in place appropriate measures to safeguard personal data from loss, misuse, unauthorised access, disclosure, alteration, damage or destruction.

This policy also sets out the legal basis on which such personal data is processed in accordance with GDPR.

This policy is effective from July 2021 but may change from time to time by updating this page.

Processing on the legal basis of ‘consent’.

In certain circumstances I may ask for your specific permission (‘consent’) before processing your personal data. In these circumstances I will provide notice of the exact nature of the processing and give you a genuine choice to accept or refuse.

By continuing to use this website, you are confirming your acceptance (‘consent’) of this policy and understand its application. Please contact me if you have any further questions on this policy, have a complaint on its application or if you would like to exercise one of your rights as described below.

With your permission and/or where permitted by law, I may also use your data for marketing purposes which may include contacting you by email, telephone, text message or by post with information, news and offers relating to products and services. I will not, however, send you any unsolicited marketing (or spam) and will take all reasonable steps to ensure that I recognise and abide by your rights as set out in data protection and privacy law defined below.

Should you choose to accept (‘consent’) to such processing you then have the right to withdraw your ‘consent’ at any time by informing me that you no longer give permission for your personal data to be used in this way.

Data and privacy law

Relevant data protection and privacy law includes:

UK General Data Protection Regulation “GDPR” (with effect from 1 January 2021)
The Data Protection Act 2018
EU Regulation 2016/679 – the General Data Protection Regulation (“GDPR”)
Data Protection, Privacy and Electronic Communications (Amendments etc)(EU Exit) Regulations 2020

Data protection principles

Data is collected and processed following the six data protection principles:

- Lawful, fair and transparent
– Specific and for legitimate purposes
– Data minimisation (only collect what is needed)
– Accuracy (ensuring data is accurate)
– Storage limitation (retention)
– Integrity and confidentiality

Personal Data

Means any information relating to an identified or identifiable natural person and as defined in the GDPR.

Processing on the legal basis of ‘legitimate interests’ under GDPR

In simple terms the legal basis of ‘legitimate interests’ means that the processing is necessary to provide the services we provide.

In order to do this, I may collect and keep a record of personal data about you from my website, telephone conversations, emails and written communications. When you contact me via this website, you may be required to provide certain information. I may also ask you for additional information, as required under the circumstances.

Please let me know if any of your personal data changes or is inaccurate so that I may keep my records up to date.

I may use the personal data we collect from you in various ways, including:

to process any orders placed by you;
to communicate with you;
for maintaining internal records;
to improve the quality of my website/service; and
to protect my website and systems against unauthorised access.

The types of data that may be collected can include;

Your name
contact details including telephone numbers, email address and postal address.
IP address: web browser and operating system of the device used to access my website.
Any linked website that referred you to me, your activity on this site, and site you subsequently click to from this site.

Data sharing

Your personal data will not be shared with anyone else, including any third parties unless it is for legitimate purposes which may include a contract with third parties to supply products and services to you, on my behalf. These may include payment processing, delivery of goods or service, search engine facilities, advertising, and marketing. In some cases, the third parties may require access to some or all of your data.

Where any of your data is required for such a purpose, I will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, our commitments, and the obligations of the third party under data protection and privacy law.

I may from time to time share such data with third parties such as prospective investors, affiliates, partners, and advertisers. Data will only be shared and used within applicable data protection and privacy law.

Additionally, under certain circumstances, I may be legally required to share certain personal data, for example, where I am involved in legal proceedings, where I am required to comply with legal requirements, a court order, or a governmental authority.

Cookies

In respect of data collected from this website, standard technology called ‘cookies’ are used. Cookies are small pieces of information that are stored by your browser on your device and can also be accessed by analytics services, these are used to help improve the service to you. Although most browsers automatically accept cookies, you can usually change your browser to prevent cookies being stored, or delete any saved cookies if you so wish.

To find out more about cookies and how to manage them click here >

Your rights

You as data subject, can exercise the following rights;

To be informed about collection and use of your personal data.
Access to the personal data I hold relating to you.
Rectification to any personal data I hold that may be inaccurate or incomplete.
Erasure (or right to be forgotten) to request I permanently delete any personal data I hold about you.
Restrict the processing of your personal data.
Data portability - to provide you with your personal data in a common format to be transferred to another organisation/ data processor.
Object to the use of your personal data for particular purposes (including profiling if used)
Rights with respect to automated decision making and profiling.
In the unlikely event that I have not been able to resolve a query or complaint, you can also contact the UK supervisory authority for data protection matters - the Information Commissioners Office (ICO).

Storage and retention of data

Whilst the majority of data we hold will be stored in the United Kingdom (UK), there may be on occasion a need to store some or all of your data outside of the European Economic Area (“the EEA”). You are deemed to accept and agree to this by using our site and submitting information to me. If I do store data outside the EEA, I will ensure an appropriate legal basis is used, and will consider if the EU has made an ‘adequacy decision’ in relation to the country or territory in question, request contractual safeguards, or request your consent as necessary.

Unless there are overriding legal requirements, I retain your personal data only for as long as necessary to keep you up to date to any information you opt-ed into, or to provide you with a product or service.

Third Party Sites

I may provide web links directly from this website, for example to Amazon and various social media channels. These sites will have their own privacy policies and I do not accept any responsibility or liability for these policies, which should be individually read and understood.

About our website

This website (sarahlouisesmith.com) is owned and operated by Sarah Louise Smith.

Please contact me if you have any further questions on this policy.

You can also read my terms and conditions here >

Thank you for visiting my website.