What data do I collect?
To fulfil your order, you must give me certain information, such as your name, email address, postal address, payment information, and the details of the product that you’re ordering. You may also choose to give me additional personal information (for a commission and bespoke custom order of artwork, for example), if you contact me directly.
How do I collect your data?
You directly give me with most of the data I collect. I collect data and process data when you:
- Register online or place an order for any of my products or services;
- Voluntarily complete a customer survey or give feedback on any of my message boards or via email;
- Use or view my website via your browser’s cookies.
I may also receive your data indirectly from the following sources:
- Payment providers.
Why I Need Your Information and How I Use It?
I rely on a number of legal basis to collect, use, and share your information, including:
- as needed to provide my services, such as when I use your information to fulfil your order, to settle disputes, or to provide customer support;
- when you have provided your affirmative consent, which you may revoke at any time, such as by signing up for my mailing list;
- if necessary, to comply with a legal obligation or court order or in connection with a legal claim, such as retaining information about your purchases if required by tax law; and
- as necessary for my legitimate interests, if those legitimate interests are not overridden by your rights or interests, such as providing and improving my services. I use your information to provide the services you requested and in my legitimate interest to improve my services.
How will I use your data?
I collect your data so that I can:
- Process your order;
- Manage your account;
- Email you with special offers on other products and services I think you might like.
Information Sharing and Disclosure
Information about my customers is important to my business. I share your personal information for very limited reasons and in limited circumstances, as follows:
Service providers. I engage certain trusted third parties to perform functions and provide services to my shop, such as delivery companies. I will share your personal information with these third parties, but only to the extent necessary to perform these services.
Business transfers. If I sell or merge my business, I may disclose your information as part of that transaction, only to the extent permitted by law.
Compliance with laws. I may collect, use, retain, and share your information if I have a good faith belief that it is reasonably necessary to: (a) respond to legal process or government requests; (b) enforce my agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of my customers, or others.
Transfers of Personal Information Outside the EU
I may store and process your information through third-party hosting services in the US and other jurisdictions. As a result, I may transfer your personal information to a jurisdiction with different data protection and government surveillance laws than your jurisdiction.
I will never knowingly pass or sell on your details to any third-party for marketing purposes. If you have agreed to receive marketing, you may always opt out at a later date. You have the right at any time to stop me from contacting you for marketing purposes or giving your data to any other third-party.
General Data Protection Regulation (‘GDPR’) – What are your data protection rights?
If you live in certain territories, including the EU, you have a number of rights in relation to your personal information.
Data protection is a fundamental right set out in Article 8 of the EU Charter of Fundamental Rights. The General Data Protection Regulation (‘GDPR’) is applicable from 25th May 2018 and is designed to give individuals more control over their personal data. The key principles under the GDPR are:
Lawfulness, fairness and transparency
Integrity and confidentiality
While some of these rights apply generally, certain rights apply only in certain limited cases. I describe the rights of individuals under the General Data Protection Regulation below:
- The right to be informed (Article 13 & 14 of the GDPR)
Where the personal data is collected from you, the data controller must provide you with the following information:
- Identity and contact details of the data controller (and where applicable, the controller’s representative);
- Contact details of the Data Protection Officer (person with responsibility for data protection matters within the organisation);
- Purpose(s) of the processing and the lawful basis for the processing;
- Where processing is based on the legitimate interests of the controller or a third party, the legitimate interests of the controller;
- Any other recipient(s) of the personal data;
- Where applicable, details of any intended transfers to a third country (non-EU member state) or international organisation and details of adequacy decisions and safeguards;
- The retention period (how long an organisation holds onto data) or, if that is not possible, the criteria used to determine the retention period;
- The existence of the following rights – Right of Access, Right to Rectification, Right to Erasure, Right to Restrict Processing, Right to Data Portability, Right to Object and to request these from the data controller.
- Where processing is based on consent, the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
- The right to lodge a complaint with a supervisory authority;
- Whether the provision of personal data is a statutory or contractual requirement, necessary to enter into a contract, an obligation, and the possible consequences of failing to provide the personal data;
- The existence of any automated decision making processes that will be applied to the data, including profiling, and meaningful information about how decisions are made, the significance and the consequences of processing.
- The right to access information (Article 15 of the GDPR)
You may have the right to access and receive a copy of the personal information I hold about you by contacting me using the contact information below.
- The right to rectification (Articles 16 & 19 of the GDPR)
If your personal data is inaccurate, you have the right to have the data rectified, by the controller, without undue delay. If your personal data is incomplete, you have the right to have data completed, including by means of providing supplementary information.
- The right to erasure (Articles 17 & 19 of the GDPR)
You may also have rights to change, restrict my use of, or delete your personal information. Absent exceptional circumstances (like where I am required to store data for legal reasons) I will generally delete your personal information upon request
- The right to data portability (Article 20 of the GDPR)
You have the right to request that I transfer the data that I have collected to another organisation, or directly to you, under certain conditions. If you make a request, I have one  month to respond to you. If you would like to exercise any of these rights, please contact me at firstname.lastname@example.org.
- The right to object to processing of personal data (Article 21 of the GDPR)
You can object to (i) my processing of some of your information based on my legitimate interests and (ii) receiving marketing messages from me after providing your express consent to receive them. In such cases, I will delete your personal information unless I have compelling and legitimate grounds to continue using that information or if it is needed for legal reasons.
- The right of restriction (Article 18 of the GDPR)
You have a limited right of restriction of processing of your personal data by a data controller. Where processing of your data is restricted, it can be stored by the data controller, but most other processing actions, such as deletion, will require your permission.
- Your rights in relation to automated decision making, including profiling (Article 22 of the GDPR)
You have the right to not to be subject to a decision based solely on automated processing. Processing is “automated” where it is carried out without human intervention and where it produces legal effects or significantly affects you.
The right to complain. If you live in the EU and wish to raise a concern about my use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.
What are cookies?
Cookies are text files placed on your computer to collect standard Internet log information and visitor behaviour information. When you visit www.adrianreynolds.ie, it may collect information from you automatically through cookies or similar technology.
For further information, visit www.allaboutcookies.org
- Keeping you signed in;
- Understanding how you use my website.
What types of cookies do I use?
There are a number of different types of cookies, however, our website uses:
Functionality. I use these cookies so that we recognize you on my website and remember your previously selected preferences. These could include what language you prefer and location you are in. A mix of first-party and third-party cookies are used.
Advertising. My website uses these cookies to collect information about your visit to my website, the content you viewed, the links you followed and information about your browser, device, and your IP address. I may sometimes share some limited aspects of this data with third parties for advertising purposes. I may also share online data collected through cookies with our advertising partners. This means that when you visit another website, you may be shown advertising based on your browsing patterns on our website.
How to manage cookies?
You can set your browser to not accept cookies, and the above website tells you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.
Privacy policies of other websites?
How to contact me?
How to contact the appropriate authority?
For EU customers, should you wish to report a complaint or if you feel that I have not addressed your concern in a satisfactory manner, you may contact the relevant Information Commissioner’s Office in your country.