Privacy Notice

 

Identity and contact details

Kerri Awosile

6 Colebrook, Ottershaw, Surrey, KT16 0JU (for correspondence only)

info@kerriawosile.co.uk

07740911163

www.kerriawosile.co.uk

 

If you have any privacy specific concerns please contact Kerri: info@kerriawosile.co.uk

How and why I collect your personal data, what personal data I collect, and how long I retain it

When you visit the Kerri Awosile website

My site (www.kerriawosile.co.uk) uses cookies to give you the best browsing experience. I do not process this data beyond the cookies function on the site (the site cannot currently be used without the use of cookies) and I do not retain any data as a result of cookies. Please see the Cookie Policy for a list of cookies used on this site. IF YOU DO NOT ACCEPT THE USE OF COOKIES YOU MUST DISCONTINUE USE OF THIS SITE IMMEDIATELY AND YOU MAY NEED TO REVIEW YOU BROWSER COOKIE SETTINGS TO REMOVE ANY UNWANTED COOKIES.

I use WordPress to create my site and I use a service provided by Jetpack to collect anonymous information about users’ activity on the site – for example the number of users viewing pages on the site – to help me research and improve the sight’s effectiveness. I do not make any attempt to find out the identities of those visiting my website. I do not process, or retain, any non-identifying data about visitors to my site outside of the website database. To find out more about how Jetpack collects, processes, and retains this data please see their site for information: https://jetpack.com/support/wordpress-com-stats/#privacy. WordPress and Jetpack are both run by Automattic – for more information on how Automattic use personal data please see their site: https://automattic.com/privacy-notice/

My legal basis for collecting data on my site is my legitimate interests.

When you contact me using the contact form

I use WordPress to create the Kerri Awosile site and I use a contact form provided by Jetpack to collect data. When you contact me using the contact form on my site – the data is stored in the database of my site and is emailed directly to me (Kerri Awosile). This email will include the submitter’s IP address, timestamp, name, email address, and data entered on the form. I only use this data for customer service reasons or for reasons you have instructed me to use it – e.g. to respond to your message, or fulfil an order – and not for marketing purposes. Where the data was processed for customer service/correspondence I will only retain the data for as long as necessary to resolve the enquiry or until the enquiry is deemed no longer valid. Where the data was processed for contractual reasons I will retain the data for 6 years after the contract is complete or deemed void – I may then anonymise the data (remove any personal identifying data) and retain it indefinitely for business improvement/development purposes. To find out more about how Jetpack collects, processes, and retains this data please see their site for information: https://jetpack.com/support/contact-form/#privacy. WordPress and Jetpack are both run by Automattic – for more information on how Automattic use personal data please see their site: https://automattic.com/privacy-notice/

My legal basis for collecting, processing, and retaining data from contact via my website contact form is my legitimate interests and contract purposes.

When you contact Kerri Awosile via email, text, or phone

I only collect and process the data you knowingly provide me with (such as your name, email address, phone/mobile number, and message) when you correspond with me via email, text, or phone. I only use this data for customer service reasons, contractual reasons, or for reasons you have instructed me to use it (e.g. to respond to your message, or fulfil a service) and not for marketing purposes. Where the data was only processed for customer service/correspondence – I will only retain the data for as long as necessary to resolve the enquiry or until the enquiry is deemed no longer valid (no longer than 6 months after last correspondence). Where the data was processed for contractual reasons – I may retain the data for 6 years after the contract is complete or deemed void – I may then anonymise the data (remove any personal identifying data) and retain it indefinitely for business improvement/development purposes.

When you contact Kerri Awosile via email, text, or phone – it is reasonable for you to expect me to use your information for an intended obvious purpose and therefore I may not actively explain my privacy policy to you. It is instead up to you to look for the privacy notice on my website (www.kerriawisile.co.uk/privacy-notice).

My legal basis for collecting, processing, and retaining data from email, text, and phone correspondence is my legitimate interests and contract purposes.

When you contact or connect with Kerri Awosile via social media or Skype

I use social media sites and apps, and Skype, to connect with my clients and audience. When you connect (i.e. comment, like or react) with me via social media – I do not process or retain your data outside of the social media site/app but your data may be stored indefinitely within the site/app. When you contact me via social media direct messaging or Skype – I only collect and process the data you knowingly provide me with (such as your name, email address, phone/mobile number, and message). I only use this data for customer service reasons, contractual reasons, or for reasons you have instructed me to use it (e.g. to respond to your message, or fulfil a service) and not for marketing purposes. Where the data was processed for customer service/correspondence – I will only retain the data for as long as necessary to resolve the enquiry or until the enquiry is deemed no longer valid (no longer than 6 months after last correspondence). Where the data was processed for contractual reasons – I may retain the data for 6 years after the contract is complete or deemed void – I may then anonymise the data (remove any personal identifying data) and retain it indefinitely for business improvement/development purposes. You should check your personal privacy settings and the privacy policies of Skype and any social media sites/apps you connect or contact Kerri Awosile via for more information on how they collect, process, and retain your data.

When you contact or connect with me via social media or Skype – it is reasonable for you to expect me to use your information for an intended obvious purpose and therefore I may not actively explain my privacy policy to you. It is instead up to you to look for the privacy notice on my website (www.kerriawosile.co.uk/privacy-notice).

My legal basis for collecting, processing, and retaining data from social media and Skype correspondence is my legitimate interests and contract purposes.

When you place an order through the Kerri Awosile website shop

All payments via the site shop are made through the Stripe payment facility. Please see their website for more information on how they collect, process and retain your data (https://stripe.com/gb/privacy). I have access to your name, billing address, delivery/shipping details, and IP address. I only use this data to fulfil the order and keep a record of the transaction and delivery. I may retain this data for 6 years after the contract is complete or deemed void – I may then anonymise the data (remove any personal identifying data) and retain it indefinitely for business improvement/development purposes. I do not have access to your payment details such as card number.

There may be times when you need to give me another person’s personal data (such as a name and delivery address other than your own). It would be disproportionate for me to verify this data or inform the subject of my privacy policy and therefore you must ensure you have their permission to give me their information – it is then reasonable for them to expect me to use their information for an intended obvious purpose and up to them to look for the privacy notice on my website (www.kerriawosile.co.uk/privacy-notice).

My legal basis for collecting, processing, and retaining data when you place an order through the Kerri Awosile website shop is my legitimate interests and contract purposes. I also have a legal obligation to collect, process, and retain data for transactional reasons and financial records.

When you book Kerri Awosile services

I use Contracts and financial records (such as Invoices) to collect, process, and retain your personal data (such as name, address, email address, phone number, and project/booking details) when you place an order with me; and there may be times when your project uses your personal data (such as your name, or photograph in a design). I only use this data for reasons you have instructed me to use it and for reasons you would reasonably expect in order to fulfil and complete your project and transaction – and not for marketing purposes. Where the data was processed for contractual reasons – I will retain the data for 6 years after the contract is complete or deemed void – I may then anonymise the data (remove any personal identifying data) and retain it indefinitely for business improvement/development purposes. Where the data was processed for transactional reasons and financial records – I will retain the data for 6 years after the tax year of the transaction – I may then anonymise the data (remove any personal identifying data) and retain it indefinitely for business improvement/development purposes.

There may be times when you need to give me another person’s personal data (such as a contact and delivery address other than your own, or the name/photograph of someone to be included in a design). It would be disproportionate for me to verify this data or inform the subject of my privacy policy and therefore you must ensure you have their permission to give me their information – it is then reasonable for them to expect me to use their information for an intended obvious purpose and up to them to look for the privacy notice on my website (www.kerriawosile.co.uk/privacy-notice).

My legal basis for collecting, processing, and retaining data when you book my services is my legitimate interests and contract purposes. I also have a legal obligation to collect, process, and retain data for transactional reasons and financial records.

When you have items/goods delivered by post

I use Royal Mail to deliver items via post. Depending on the delivery service, the Royal Mail may collect personal data such as the recipients name and signature. Please see their website for more information on how they collect, process and retain your data (https://www.royalmail.com/privacy-notice/). I have access to this data collected by the Royal Mail via their website. I only use this data to keep a record of delivery. I may retain this data for 6 years after the contract is complete or deemed void – I may then anonymise the data (remove any personal identifying data) and retain it indefinitely for business improvement/development purposes.

My legal basis for collecting, processing, and retaining data when your order is delivered by post is my legitimate interests and contract purposes.

When you cancel a Contract/Order

I use cancellation forms and records to collect, process, and retain data (such as name, address, and signature) when you cancel a Contract/Order. I only use this data to keep a record of cancellation – and not for marketing purposes. I will retain this data for 6 years after the cancellation information has been received – I may then anonymise the data (remove any personal identifying data) and retain it indefinitely for business improvement/development purposes.

My legal basis for collecting, processing, and retaining data when you cancel a Contract/Order with me is my legitimate interests and contract purposes. I also have a legal obligation to collect, process, and retain data for transactional reasons and financial records.

When you give Kerri Awosile a testimonial

I collect testimonial data (such as name, initials, and opinion/testimonial) via email, social media, Skype, or post in order to promote my business and give references to potential clients. I only ever process, share (on my website, social media, and promotional material), and/or retain your testimonial when you give me explicit and active consent to do so. I keep a record of this consent. I may retain this data indefinitely. You can withdraw your consent at any time by contacting Kerri: info@kerriawosile.co.uk

My legal basis for collecting, processing, sharing, and retaining data in relation to your testimonial is your consent.

When photos/videos/images/extracts of your project are collected and used

I collect and process photo/video/image/extract data, either produced by me or on my behalf, of your project (such as name, initials, and photo/video/image/extract) to promote my business, and for contractual reasons. I also share such photo/video/image/extract data (on my website and social media, and in publications and promotional material – including through third parties) to promote my services and products. I may retain this data for 6 years after the contract is complete or deemed void – I may then anonymise the data (remove any personal identifying data) and retain it indefinitely for business improvement/development purposes.

My legal basis for collecting, processing, and retaining data in relation to any photo/video/image/extract data of your project is my legitimate interests and contract purposes. My legal bases for sharing any photo/video/image/extract data is my legitimate interests.

When you make a complaint to Kerri Awosile

I collect, process and retain your data (such as name, address, and opinion/complaint) via email, post, phone, text, Skype, or social media contact, when you make a complaint. I only use this data to keep a record of your complaint. I will retain this data for 6 years after the complaint has been received – I may then anonymise the data (remove any personal identifying data) and retain it indefinitely for business improvement/development purposes.

My legal basis for collecting, processing, and retaining data in relation to your complaint is my legitimate interests.

Your data protection rights

The GDPR give individuals rights in regards to their data. You do not have to pay a charge for exercising your rights and in most cases I cannot charge a fee for a request – unless the request is manifestly unfounded or excessive. I must also respond within one month – unless the request is complex or I have received a number of requests from the you and then I may be able to extend the time to respond but I must inform you of this within one month of receiving the request. I may also be able to refuse your request where it is manifestly unfounded or excessive.

Your right to be informed

I use this privacy notice to give you clear and concise information about what I do with your personal data. I also use ‘just-in-time notices’ where appropriate.

Your right of access

You have the right to ask me for confirmation I am processing your personal data, a copy of your personal data, and other supplementary information. There may be times when I cannot give you all the information I process about you – for example when the information also contains another individual’s personal data.

Your right to rectification

I have to take reasonable steps to ensure the personal data I process is accurate and complete (for the purpose of processing). You have the right to have inaccurate personal data rectified if you think it is inaccurate and you may also be able to have incomplete personal data completed. If you believe any of the personal data I have about you is inaccurate or incomplete – please contact me as soon as possible: info@kerriawosile.co.uk

Your right to erasure

In certain circumstances you have the right to ask me to erase your personal data, this is also called the ‘right to be forgotten’. You have the right to ask me to erase your personal data where: it is no longer necessary for the purpose I originally collected or processed it for; I am relying on your consent as my legal basis and you withdraw your consent; you object to the processing of your data and I am relying on legitimate interests as my legal basis but there is no overriding legitimate interest to continue the processing; I am processing your personal data for direct marketing purposes and you object to the processing; I have processed the personal data unlawfully; I legally have to erase it; or I have processed your personal data to offer information to a child. I can refuse to erase your data where: retaining your data is necessary for freedom of expression and information; I am legally obliged to keep hold of your data; it is necessary for reasons of public health; it is necessary for establishing, exercising or defending legal claims; erasing your data would negatively impact scientific or historical research, or archiving in the public interest.

Your right to restriction of processing

In certain circumstances you have the right to ask me to restrict the processing of your information if you are concerned about the accuracy of the data or how it is being used. If necessary, you can also stop me deleting your data. This means you can limit the way I use your data and this is an alternative to requesting I erase your data. You have the right to ask me to temporarily restrict the processing of your data where: I am looking into a challenge you have made to the accuracy of your data, or an objection you have made to the use of your data. You have the right to ask me to restrict the use of your data rather than delete it where: I processed your data unlawfully but you do not want it deleted, or I no longer need your data but you want me to keep it in order to establish, exercise or defend legal claims. I can only use restricted data where: I have your consent to do so; the data is needed for legal claims; it protects another person’s rights; or for reasons of important public interest. I may also decide to lift the restriction once I have investigated your complaint but I should inform you beforehand.

Your right to object to processing

You have the right to object to me processing your data for: a task carried out in the public interest; my legitimate interests; scientific or historical research; statistical purposes; or direct marketing. I can refuse to comply with your objection if I can prove I have a strong reason to continue processing your data that overrides your objection, or prove it is for a legal claim.

Your right to data portability

Where my legal basis for processing your data is consent or contract, and where you have provided me with the data and it is held electronically – you have the right to receive your personal data and store it for further personal use. You also have the right to request I transfer the data to another data controller. I must provided the data in a structured, commonly used and machine readable format.

Your right not to be subject to automated decision-making including profiling

I do not carry out any automated decision-making including profiling.

 

Please contact Kerri: info@kerriawosile.co.uk or 6 Colebrook, Ottershaw, Surrey, KT16 0JU – if you wish to make a request in regards to one or more of your rights.

Sharing your information

I sometimes use Signable to collect Contract information (such as your signature). Please see their website for more information on how they collect, process, and retain your data (https://www.signable.co.uk/privacy-policy).

I use Dropbox to send any large files or folders via email. Please see their website for more information on how they collect, process and retain your data (https://www.dropbox.com/en_GB/privacy).

I do not share your data with any other organisation or individual – other than those you would reasonably expect for me to fulfil or complete your service, transaction, or delivery of items (such as the Royal Mail and my web server), or for legal reasons (such as when legally requested to do so by a legal authority, or to support legal claims against/for Kerri Awosile).

Your right to complain

If you have questions or concerns in regards to the way I collect, process, or retain your personal data please contact me: info@kerriawosile.co.uk or 6 Colebrook, Ottershaw, Surrey, KT16 0JU.

If I am unable to resolve your question or concern and you are still dissatisfied you can make a complaint about the way I process your information to the UK supervisory authority – the ICO. See their website for more information: https://ico.org.uk/make-a-complaint/

Changes to this privacy notice

I review my privacy notice regularly to ensure it is still relevant and up-to-date and therefore it may change where necessary. If I change any part of this privacy notice in a way that would change the way I collect, process, or retain your data beyond what you would reasonably expect then I will inform you as soon as possible – usually via the means I collected your data – unless this would be disproportionate to the impact the change would have on you. I recommend you check this page regularly to keep up-to-date.

Links to other websites

Where I provide links to websites of other businesses and individuals this privacy notice does not cover how they processes your personal information. You should read the privacy notices on the other websites you visit.

Children’s information

I don’t target children with my website, social media, or services in general and won’t knowingly enter into any transaction and/or contract with anyone under 18 years of age. If you are under 18, you must get your parent or guardian’s consent before using my website, connecting with me on social media, contacting me via any means, or using my services in general.

How I protect your data

I take reasonable measures to ensure the security of any and all information I have about you, including paper files and backup storage. I use password protected email, website databases, computers, and mobile devices. I also use two-factor authentication to access my website back-end.

Please note: sending information via the internet is not completely secure and I am not responsible for the security of data you give me via the internet. Any data you send me is at your own risk.

 

This Privacy Notice was last updated September 2019

Kerri Awosile | info@kerriawosile.co.uk | www.kerriawosile.co.uk | 07740911163 |

6 Colebook, Ottershaw, Surrey, KT16 0JU (for correspondence only).