Pam Smart
Contemporary Florals
and other beautiful things
Privacy Policy
  
Introduction
Please read this privacy policy carefully. If you have any questions or concerns about the contents, you may contact us at the addresses below.

Your privacy is important to us and we only collect information when absolutely necessary. This website  uses cookies to track where your session originated and to see which pages you have visited on the site. It only records anonymous details such as your country and city location, the class of device used(mobile, tablet, desktop) and the browser used. We do not collect personally identifiable information,  and so your use of this website is effectively anonymous.

When you sign up for our newsletter, you must double opt-in by receiving a mail and clicking a link. In this way we ensure your informed consent and by including unsubscribe links in emails, we ensure your ongoing consent.

We keep records of people who have used our services - including purchased artwork and course tuition - in line with UK law. Such information is not used for marketing purposes without explicit consent.

Who we are?
For the purposes of GDPR, Pam Smart is the data controller of Smart Garden Studio. She can be contacted by email: pamsmartstudio@gmail.com or by post:

Pam Smart Studio
86 Nunsfield Rd
Buxton
Derbyshire
SK17 7BW

What information do we collect?
The data we collect through our contact page on the website is limited to names, postal addresses, phone numbers and email addresses. This may also be in person when booking courses or selling artwork.
For newsletter subscribers it is limited to name and email address.
Cookies collect data such as browser, device type and general location. We do not use third-party cookies.
We do not store financial information including card details, or any information which is categorised as sensitive, such as medical data or biometrics.

How do we use personal information?
We use your information in a variety of ways.
 - delivering marketing and events communication
 - providing goods and services
 - legal obligations (eg prevention of fraud, tax records etc)
 - analysis of website performance and multi-channel marketing

What legal basis do we have for processing your personal data?
In relation to the sale of goods and services we are obliged to keep relevant records for no less than seven years. This information is limited to Names, Addresses, contact details including phone and email but potentially including social media details, dependent on how you contact us.
For marketing and events communication we rely upon your consent. Opt-in is a two stage process and consent can be withdrawn at any time.

When do we share personal data?
In order to send professional emails and give subscribers the ability to opt-out in an automated way, we share your email addresses and names with carefully selected external companies such as Mailchimp. These details are minimal, and can be deleted at any time upon request. Please contact the addresses above for any deletion requests.

Where do we store and process personal data?
Personal data is stored securely within the EU and is not transferred outside its borders. Access is strictly controlled and can be revoked at any time.

How long do we keep your personal data for?
With regard to sales of goods and services, we keep your data for at least seven years in line with UK law.

Your rights in relation to personal data
Under the GDPR you have the right to request to view and copy whatever information we currently hold on you. You also have the right to ask for this information to be deleted, and in that case we will delete any information we do not hold under statutory obligations, eg your name and address and the date of any transactions completed, as well as what was sold or contracted.

All such requests should be made in writing to the above address.