At Heath Studios, we are committed to protecting the privacy and security of our customers and site visitors. Heath Studios act as a Data Controller and will therefore make every reasonable effort to comply with data protection regulation.
If you have any questions about how we protect your privacy, please contact us via our Contact Form or write to us at:
37 Echo Hill
HOW WE USE YOUR INFORMATION
We collect information about you whenever you fill out an enquiry or order form for photographic services provided by us. The legal basis for processing the information that we collect about you is that it is necessary for fulfilment of contract as described below. Essentially this means that we only use your data in order to make our service work for you. We do not sell or rent out your personal data to anyone, and we do not send out direct marketing.
Your name and contact information (e-mail address and telephone number)
We use this information in communication with you concerning provision of photographic services, to answer your queries, and in informing you about changes to the services we offer, and our terms and conditions.
Your Billing Address
We use this information to provide you with correctly addressed invoices.
Your Shipping Address
We use this information to return your products to you after photography.
Payment Information (card details)
We do not hold or process this data, see below for details on how payment information is processed by a third party.
DATA RETENTION PERIOD
We do not hold your data for a fixed period of time, instead we will hold it until one of the following conditions is met:
We no longer provide the services that you have used or have enquired about
You request that we delete or change the data or have stated that you no longer wish to do business with us
We decide that it is so long since we have had any communication with you, that it is likely to be inaccurate, out of date or irrelevant.
SHARING YOUR INFORMATION
We do not sell or rent any of your personal data to any third party. However, as an essential part of the service we provide, we share your data with the following companies:
Heath Studios uses online forms from Jotform Inc. to collect data to handle enquiries and orders from customers and leads. When you submit a form on our website to us, all the data on that form is held on Jotform’s secure servers, which are based in the EU. JotForm Inc. acts as a mere custodian of that data.
Heath Studios uses services provided by Quickfile Ltd. to manage our own business accounts and to issue invoices to, and handle payments from, our clients (via its payment gateway to Stripe Inc.). Quickfile's cloud-based accounting system is used as the data repository for all Heath Studios customer information.
When paying Heath Studios by payment card, you are required to enter your payment information. Heath Studios does not collect, store or process this information, instead we utilise the services of a third-party payment processing company: Stripe Inc. to handle all payments and refunds and follow the Payment Card Industry Data Security Standard (PCI DSS).
Postal services and Parcel Delivery companies
We provide your name, delivery address and sometimes your e-mail address and telephone number to delivery companies when returning your products to you.
WeTransfer is a cloud-based file transfer service that we use to send your photographs to you. We only share your e-mail address with WeTransfer.
You have the following rights relating to your personal information:
The right to be informed about how your personal information is being used (this page).
The right to access the personal information we hold about you.
The right to request the correction of inaccurate personal information we hold about you.
The right to request that we delete your data, or stop processing it.
The right to stop direct marketing messages, and to withdraw consent for other consent-based processing at any time.
The right to request that we transfer or port elements of your data either to you or another service provider.
The right to complain to your data protection regulator.