This statement has been prepared by Sheena Jolley Photography in order to be transparent as to how we process (obtain, store and use) your personal data and ensure you understand your rights while engaging with us and while using our website. Any reference to “we”, “us” or “our” in this document refers to Sheena Jolley Photography. Any reference to “you” or “your” refers to you the data subject.
Sheena Jolley Photography is the data controller for any data processed by our website. Our nominated Data Protection Officer (DPO) is Sheena Jolley who can be contacted on firstname.lastname@example.org or +353 860577456
What data do we collect
The data we collect is data that is used to identify and communicate with you. This data may include name, business name, email address, telephone contact and postal address. We don't hold financial information about you as payments are made on receipt of invoices by a means suitable to you.
How we obtain your data
We have a contact form on the website for you to submit a request for general information about our services or request a quotation. The details we request from you on this form are your name and email. These details are used solely for the purposes of contacting you back in relation to your request.
The details you enter are emailed directly to us and are not stored in any database, only on our email system. Contact will be initially made by email and continued contact will then be done by means agreeable to both parties.
We use Google Analytics to track usage and produce analytics data about the website. The only data that is recorded in relation to you is your IP address which gives us some high level information such a geographic area. This data is stored on the Google Analytics platform and is held in the context of Google’s Data Usage Policies and Data Retention Policy.
Our legal basis for using your data
We will only use the information you provide us with to provide you with quotations, invoices or for the purpose of general communication. Our lawful reason for processing your data:
in order for us to contact you in reply to a request for information from you
in order to send service related information such as updates, invoices, receipts
We are committed to ensuring that any information we collect is used appropriately and solely for the purposes defined here, and does not constitute an invasion of your privacy.
Security of your data
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect on our website.
Who do we share your data with?
It is our policy not to share any of your data with any third party unless absolutely necessary. The only reason we may share any of your data with a third party is if you instruct us to arrange a delivery of a product or service directly to you. To facilitate this it will involve the sharing of the required data (name, address, contact no) with a third party such as a courier or supplier.
In the case of a legal issue we may be forced to share data with the relevant authority. In a case like this the request will be assessed, from a legal point of view, and addressed based on the legal advise recieved.
Your rights as a data subject
While we possess your personal data you the following rights:
Right of access - right to request a copy of the information that we hold. All reasonable requests for personal data will be addressed immediately on receipt of request in writing
Right of rectification - right to correct data that we hold about you that is inaccurate or incomplete.
Right to be forgotten - in certain circumstances you can ask for the data we hold about you to be erased from our records.
Right to restriction of processing - where certain conditions apply to have a right to restrict the processing.
Right of portability - you have the right to have the data we hold about you transferred to another organisation.
Right to object - you have the right to object to certain types of processing such as direct marketing.
Right to object to automated processing, including profiling - you also have the right to be subject to the legal effects of automated processing or profiling.
Right to judicial review - in the event that we refuse your request under rights of access, we will provide you with a reason as to why
Retention of data
We will store your data for as long as we have a business relationship with you and data will not be held for longer than is necessary. We can retain data pertaining to financial records such as invoices / receipts for a period of up to 6 years.
In the event that you wish to make a complaint as to how we process your data you can send a complaint directly with the Data Protection Commissioner (https://www.dataprotection.ie) and / or our data protection officer listed above.
We may update this statement periodically. Please check this page regularly to check for updates. By continuing to use the website you agree to these changes.
Policy Effective from : May 2018
Last Policy Update : May 2018