I, Astrid Brook, understand that your privacy is important to you and that you care about how your personal data is used and shared online. This Privacy Notice provides you with details of how I collect and process your personal data through your use of my website https://www.astridbrook.com
This Privacy Notice applies only to your use of my website, and it may contain links to other websites. Please note that I have no control over how your data is collected, stored, or used by other websites and I advise you to check the privacy policies of any such websites before providing any data to them. Please read this Privacy Notice carefully and ensure that you understand it. Your acceptance of this Privacy Notice is deemed to occur upon your first use of my website. If you have any questions, you're welcome to contact me here.
2. What information do I collect and on what grounds do I process it?
Personal data means any information that can be used to identify you, so it does not include anonymised data. I may process the following types of personal data about you:
Communications that you send to me
Whether it be through the contact form on my website, through email, text, social media messaging, social media posting or any other communication that you send to me.
I process this data on the grounds of legitimate interests - for the purposes of communicating with you, for record keeping and for the establishment, pursuance or defence of legal claims.
Includes data relating to any purchases of goods and/or services such as your name, title, billing address, delivery address email address, phone number, contact details, purchase details and your card details.
I process this on the grounds of performance of contract - data to supply the goods and/or services you have purchased and to keep records of such transactions.
Information about how you use my website and any online services together with any data that you post for publication on my website or through other online services.
I process this on the grounds of legitimate interests - to operate my website and ensure relevant content is provided to you, to ensure the security of my website, to maintain back-ups of my website and/or databases and to enable publication and administration of my website, other online services and business.
Information about your use of my website and online services such as your IP address, your login data if applicable, details about your browser, length of visit to pages on my website, page views and navigation paths, details about the number of times you use our website, time zone settings and other technology on the devices you use to access our website. The source of this data is from my analytics tracking system.
I process on the grounds of legitimate interests - to analyse your use of my website and other online services, to administer and protect my business and website, to deliver relevant website content and advertisements to you and to understand the effectiveness of my advertising, to grow my business and to decide my marketing strategy.
Information about your preferences in receiving marketing from me and your communication preferences.
I process this on the grounds of legitimate interests - to enable you to partake in my promotions such as competitions, prize draws and free giveaways, to deliver relevant website content and advertisements to you and measure or understand the effectiveness of this advertising, to study how customers use my products/services, to develop them, to grow my business and to decide my marketing strategy.
I may use any of the above data to deliver relevant website content and advertisements to you and to measure or understand the effectiveness of the advertising I serve you. I may also use such data to send other marketing communications to you.
My lawful ground for this processing is either consent or legitimate interests - to grow my business.
I do not collect any Sensitive Data about you. Sensitive data refers to data that includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data, or any criminal convictions and offences.
Where I am required to collect personal data by law or under the terms of the contract between me and you, and if you do not provide me with that data when requested, I may have to cancel a product or service you have ordered but if I do, I will notify you at the time.
I will only use your personal data for the purpose it was collected for or a reasonably compatible purpose if necessary. I may have to process your personal data without your knowledge or consent where this is required or permitted by law.
3. How I collect your data
I collect data about you when you fill in forms on my website or by sending me emails. I may also automatically collect data from you using cookies and similar technologies.
I may also receive data from third parties such as search engines, analytics providers, advertising networks, technical providers, payment processors and delivery services, such as Google, Facebook, PayPal, Stripe, and others. Many of these are based outside the EU.
4. Marketing Communications
Under my legitimate interests (to grow my business) or with your consent I will use your personal information to send you marketing communications.
Under the Privacy and Electronic Communications Regulations, I may send you marketing communications from me if (i) you made a purchase or asked for information from me about my goods or services or (ii) you agreed to receive marketing communications and in each case you have not opted out of receiving such communications since. Under these regulations, if you are a limited company, we may send you marketing emails without your consent. However you can still opt out of receiving marketing emails from me at any time.
If you opt out of receiving marketing communications this opt-out does not apply to personal data provided as a result of other transactions, such as purchases, warranty registrations etc.
5. Disclosures of your personal information
I will not share your data with a third party unless I am legally required to share certain data held by me, which may include your personal data, for example, where I am involved in legal proceedings, where I am complying with legal obligations, a court order, or a governmental authority.
I maintain reasonable administrative, physical and technical measures to protect the confidentiality and security of your personal information. Unfortunately, no website is completely secure due to cyber crime. Therefore, I cannot guarantee that your personal information will not be disclosed, misused or lost by accident or by the unauthorised acts of others and I expressly disclaim all liability arising if this situation were to occur.
6. Data Retention
I will only retain your personal data for as long as necessary to fulfil the purposes I collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
7. Your Legal Rights
Under data protection laws you have rights in relation to your personal data that include: the right to request access, correction, erasure, restriction, transfer, to object to processing, to portability of data and (where the lawful ground of processing is consent) to withdraw consent. If you wish to exercise any of the rights please contact me here.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, I may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive or refuse to comply with your request in these circumstances.
I may need to request specific information from you to help me confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. I may also contact you to ask you for further information in relation to your request to speed up my response.
If you are not happy with any aspect of how I collect and use your data, you have the right to complain to the Information Commissioner’s Office (ICO), which is the UK supervisory authority for data protection issues. I would be grateful if you could contact me first if you do have a complaint so that I can try to resolve it for you.
If you do choose to accept a cookie then enjoy it with a nice cup of tea.