1. INTRODUCTION
1.1 – We are Lenak Studio Limited (trading as “Lenak Studio Ltd”) a company registered in England and Wales. Our company registration number 08688172 and our registered office is at Sterling House, Fulbourne Road E17 4EE, Walthamstow, London, UK. You can contact us by post at the above address, or by email at lenakstudio@gmail.com
1.2 – We are committed to protecting your personal data. This privacy policy gives you detailed information on when and why we collect your personal data through the use of our Website lenakstudio.com, how we use the data and how we keep it secure. Please read this policy carefully alongside any applicable Terms & Conditions or Fair Processing Notices from us to understand our views and practices regarding your personal data and how we will treat it. This policy supplements these other documents, and is not intended to override them.
2. OUR RESPONSIBILITIES
2.1 – We are a creative and photographic agency operating from the UK, and we are the data controller responsible for your personal data.
2.2 – We require our people, suppliers and partners to comply with this privacy policy and protect your personal data in accordance with the law.
3. THE DATA WE COLLECT ABOUT YOU
3.1 – Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
3.2 – We collect your data when you use the functionalities of the Website, i.e. when you are browsing or searching, when you subscribe to our marketing newsletters, when you buy any products offered on the Website, and when you send us an email through the contact page. We do not always collect all the data, and the extent of your data we process depends on the extent of your use of our Website.
3.3 – We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:
- Identity Data refers to your title, name or similar identifier.
- Contact Data refers to billing address, delivery address, email address and telephone numbers.
- Financial Data refers to your payment card details.
- Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
- Technical Data includes the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, type of device used to access our Website and the location of where you access our Website via a mobile device;
- Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
- Usage Data includes the full Uniform Resource Locators (URL) clickstream to, through and from our Website (including date and time), products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number;
- Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
3.4 – We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific Website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.
3.5 – We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
3.6 – The Website is not intended for children and we do not knowingly collect data relating to children.
3.7 – It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
If you fail to provide personal data:
3.8 – Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.
4. HOW WE COLLECT, USE AND DISCLOSE YOUR PERSONAL DATA
4.1 – The Website is intended to showcase and also sell the work of LenaK studio, as represented by us.
4.2 – We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
Where we need to perform the contract we are about to enter into or have entered into with you.
Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
Where we need to comply with a legal or regulatory obligation.
4.3 – Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to sending third party direct marketing communications to you via email or text message. If we do, you have the right to withdraw consent to marketing at any time by contacting us.
4.4 – We set out in the table below the details of what data we collect and how we use it.
|
Purpose/Activity |
Type of data: |
Lawful basis for processing including legitimate interest: |
|
TO REGISTER YOU AS A NEW CUSTOMER |
a) Identity |
Performance of a contract with you |
|
TO PROCESS AND DELIVER YOUR ORDER INCLUDING: |
a) Identity |
a) Performance of a contract with you |
|
TO MANAGE OUR RELATIONSHIP WITH YOU WHICH WILL INCLUDE: |
a) Identity |
a) Performance of a contract with you |
|
TO ENABLE YOU TO PARTAKE IN A PRIZE DRAW, COMPETITION OR COMPETE IN A SURVEY |
a) Identity |
a) Performance of a contract with you |
|
TO ADMINISTER AND PROTECT OUR BUSINESS AND THE WEBSITES (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data). |
a) Identity |
a) Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy) |
|
TO DELIVER RELEVANT CONTENT AND ADVERTISEMENTS VIA THE WEBSITES TO YOU AND MEASURE OR UNDERSTAND THE EFFECTIVENESS OF THE ADVERTISING WE SERVE YOU |
a) Identity |
Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy) |
|
TO USE DATA ANALYTICS TO IMPROVE OUR WEBSITES, PRODUCTS/SERVICES, MARKETING, CUSTOMER RELATIONSHIPS AND EXPERIENCES |
a) Identity |
Necessary for our legitimate interests (to define types of customers for our products and services, to keep our Websites updated and relevant, to develop our business and to inform our marketing strategy). |
|
TO MAKE SUGGESTIONS AND RECOMMENDATIONS TO YOU ABOUT GOODS OR SERVICES THAT MAY BE OF INTEREST TO YOU |
a) Identity |
Necessary for our legitimate interests (to develop our products/services and grow our business). |
5. DISCLOSURE OF DATA AND TRANSFER OF DATA BETWEEN JURISDICTIONS
- – We use a number of suppliers in connection with the operation of our business and they may have access to the personal data we collect, so that they can process it on our behalf. For example, an IT supplier may see our personal data when providing software support, or a company which we use for a marketing campaign may process contacts’ personal data for us. When contracting with suppliers and/or transferring personal data to a different jurisdiction, we take appropriate steps to ensure that there is adequate protection in place and that the principles are adhered to.
- – We may share your personal information if we are under a duty in order to comply with any legal obligation, or in order to enforce or apply our Website’s terms of use or our terms and conditions of supply and other agreements; or to protect our rights, property, or safety or that of our customers or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
- – As at the date of this policy, we do not transfer your personal data outside the European Economic Area, save through processors offering us operational support as described above, or save for non-repetitive transfers concerning a limited number of data subjects, which are necessary for our legitimate purposes.
6. YOUR RIGHTS AS A DATA SUBJECT
6.1 – At any point whilst we are in possession of or processing your personal data, all data subjects have the following rights:
- Right of access – you have the right to request a copy of the information that we hold about you.
- Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
- Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
- Right to restriction of processing – where certain conditions apply you have a right to restrict the processing.
- Right of portability – you have the right to have the data we hold about you transferred to another organisation.
- Right to object – you have the right to object to certain types of processing such as direct marketing.
- Right to object to automated processing, including profiling – you also have the right not to be subject to the legal effects of automated processing or profiling.
6.2 – Should you wish to make a request in line with your rights as an individual, please forward it to us using the contact details provided at the end of this privacy policy. A minimum of one piece of photographic identification will be required (driving license or passport) together with recent proof of address (council tax bill or utility bill not older than three months).
6.3 – If we do not address your request, or we fail to provide you with a valid reason why we are unable to do so, you have the right to contact the Information Commissioner’s Office to make a complaint. They can be contacted via their website (ico.org.uk).
7. SECURITY
Information security is a key element of data protection. We take appropriate measures to secure personal data and protect it from loss or unauthorised disclosure or damage. You can find out more about our policy and approach to information security by contacting us.
8. COOKIES
8.1 – Our Website uses cookies to record log data. We use both session-based and persistent cookies, dependent upon how you use or interact with the Website.
8.2 – Cookies are small text files sent by us to your computer, or from your computer or mobile device to us each time you visit our Website. They are unique to you or your web browser. Session-based cookies last only while your browser is open and are automatically deleted when you close your browser. Persistent cookies last until you or your browser deletes them, or until they expire.
8.3 – We use cookies which are not specific to your account, but which are unique and allow us to undertake website analytics and customization. If you decide to disable some or all cookies, you may not be able to use some of the functions on our Website. We may use third-party cookies, for example Google Analytics, and you may choose to opt-out of third party cookies from their website.
9. CHANGES TO OUR PRIVACY POLICY
We may change this privacy policy from time to time, and if we do we will post any changes on this page. If you continue to access the Website or use services available from it after those changes have come into effect, you will have agreed to the revised policy.
10. CONTACTS AND COMPLAINTS
10.1 – Questions, comments and requests regarding this privacy policy are welcomed and should be addressed by writing to us at the address listed at the beginning of this Privacy Policy or at lenakstudio.com.
10.2 – In the event that you have any complaints relating to how we have processed your personal data please contact us at the same address Sterling House, Fulbourne Road E17 4EE, Walthamstow, London, UK
© Copyright Lenak studio All rights reserved.
Date updated: January, 2020