General Data Protection Regulation (GDPR)
Full name of legal entity: Box Three Studio Ltd
Email address: firstname.lastname@example.org
Address: Unit 2a, Atherstone Hill, Atherstone-on-Stour, Stratford-upon-Avon, Warwickshire. CV37 8NF
Telephone number: 01789-459090
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues ( www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.
What information does Box Three collect about me and why?
We collect personal information from you when you request a quotation or enter into a contract of service with us. When doing so, you may be asked to provide personal information such as your name, e-mail address, mailing address and phone number.
We collect this information (and have a lawful legitimate interest to do so) so that we can send you information about your project with us, or to manage your account with us.
Your personal data is NOT shared with any third parties, other than a mailing address for occasional direct delivery of your products.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, political opinions, health, genetic or biometric data etc.).
Management/Storage of your personal data (data retention)
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.
The personal data we hold on our system will be held indefinitely whilst you hold an account with us.
However, you can contact us at anytime to have your personal data edited or deleted.
What do we use your personal information for?
Any of the information we collect from you may be used to contact you by telephone, email or letter after using our services. We may occasionally contact you by letter or email for marketing purposes (Box Three only).
Marketing Communication from us.
You will receive marketing communications from us if you have requested information in the past, provided you have opted in to receive marketing.
You can ask us to stop sending you marketing messages at any time by following the ‘unsubscribe’ link on any marketing message sent to you.
We will never share your personal data with any company outside of Box Three Studios for marketing purposes.
Failure to provide personal data
Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data, we may not be able to perform the contract we have or are trying to enter into with you (e.g. to provide you with goods or services). In this case, we may have to cancel a product or service you have with us, but we will notify you immediately if this is the case.
What are Cookies?
Cookies are small files that a site transfers to your computer through your web browser (if you allow) that enables the sites or service providers systems to recognise your browser and capture and remember certain information.
Third Party Cookies on our website
Please note that during your visits to the www.myartproject.co.uk website you may notice some cookies that are not related to us. When you visit a page with content embedded from, for example, Google, Facebook, LiveChat or Twitter, you may be presented with cookies from these websites. Box Three Studios Ltd does not control the dissemination of these cookies. You should check the third party websites for more information about these.
How do we protect your information?
We have in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way.
Our servers and database are maintained by a well-established IT company: Celsius Software Ltd.
Celsius Software Ltd complies with all Physical Security & Data Transfer legal requirements.
In addition, we limit access to your personal data to those employees and third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a Duty of Confidentiality.
Invoice payments are made directly through BACS, cheque or credit card via PayPal virtual terminal. All banks, and PayPal Ltd., comply with the Processing Procedures for Online Payment legal requirements. We do not record or store any bank card details on our servers or systems from invoice payments, nor for over the phone payments.
All confidential paper based data is archived on site for a period of time, after which it is shredded and disposed of appropriately.
Do we disclose any information to outside parties?
We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information. This does not include trusted third parties named above, who assist us in operating our website & managing our database. Those parties have agreed to keep this information confidential.
We may also share your information where disclosure is required or permitted by law (for example to government bodies, HMRC and law enforcement agencies).
We do not transfer your personal data outside the European Economic Area (EEA).