At Heath Studios, we are committed to protecting the privacy and security of our customers and site visitors. Heath Studios act as a Data Controller and will therefore make every reasonable effort to comply with data protection regulation.

​

If you have any questions about how we protect your privacy, please contact us via our Contact Form or write to us at:

 

Heath Studios

37 Echo Hill

ROYSTON

Herts

SG8 9BB

​

HOW WE USE YOUR INFORMATION

​

We collect information about you whenever you fill out an enquiry or order form for photographic services provided by us. The legal basis for processing the information that we collect about you is that it is necessary for fulfilment of contract as described below. Essentially this means that we only use your data in order to make our service work for you. We do not sell or rent out your personal data to anyone, and we do not send out direct marketing.

​

Your name and contact information (e-mail address and telephone number)

We use this information in communication with you concerning provision of photographic services, to answer your queries, and in informing you about changes to the services we offer, and our terms and conditions.

Your Billing Address

We use this information to provide you with correctly addressed invoices.

Your Shipping Address

We use this information to return your products to you after photography.

Payment Information (card details)

We do not hold or process this data, see below for details on how payment information is processed by a third party.

 

DATA RETENTION PERIOD

​

We do not hold your data for a fixed period of time, instead we will hold it until one of the following conditions is met:

​

• We no longer provide the services that you have used or have enquired about

• You request that we delete or change the data or have stated that you no longer wish to do business with us

• We decide that it is so long since we have had any communication with you, that it is likely to be inaccurate, out of date or irrelevant.

 

SHARING YOUR INFORMATION

 

We do not sell or rent any of your personal data to any third party.  However, as an essential part of the service we provide, we share your data with the following companies:

​

Jotform Inc.

Heath Studios uses online forms from Jotform Inc. to collect data to handle enquiries and orders from customers and leads. When you submit a form on our website to us, all the data on that form is held on Jotform’s secure servers, which are based in the EU. JotForm Inc. acts as a mere custodian of that data.

​

Quickfile Ltd.

Heath Studios uses services provided by Quickfile Ltd. to manage our own business accounts and to issue invoices to, and handle payments from, our clients (via its payment gateway to Stripe Inc.). Quickfile's cloud-based accounting system is used as the data repository for all Heath Studios customer information.

 

Stripe Inc.

When paying Heath Studios by payment card, you are required to enter your payment information. Heath Studios does not collect, store or process this information, instead we utilise the services of a third-party payment processing company: Stripe Inc. to handle all payments and refunds and follow the Payment Card Industry Data Security Standard (PCI DSS).

 

Postal services and Parcel Delivery companies

We provide your name, delivery address and sometimes your e-mail address and telephone number to delivery companies when returning your products to you.

 

WeTransfer

WeTransfer is a cloud-based file transfer service that we use to send your photographs to you. We only share your e-mail address with WeTransfer.

​

YOUR RIGHTS

​

You have the following rights relating to your personal information:

​

• The right to be informed about how your personal information is being used (this page).

• The right to access the personal information we hold about you.

• The right to request the correction of inaccurate personal information we hold about you.

• The right to request that we delete your data, or stop processing it.

• The right to stop direct marketing messages, and to withdraw consent for other consent-based processing at any time.

• The right to request that we transfer or port elements of your data either to you or another service provider.

• The right to complain to your data protection regulator.