Privacy Policy

We currently collect and process personal information you provide us, such as your email address, name, phone number, address and usage data.

You can however visit our site anonymously at any time.

Most of the personal information we process is provided to us directly by you for one of the following reasons:

​

• To manage your account: to manage your registration as a user of the service and provide you with access to different website functionalities that are available to you as a registered user.

• For the performance of a contract: to fulfil and manage orders, payments, returns and exchanges or of any other contract with us.

• To contact you: To contact you regarding updates related to the functionalities, products or contracted services, including the security updates, news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about, unless you have opted not to receive such information (see ‘What rights do I have?’).

• To post testimonials: We sometimes post testimonials on our website that may contain personal information. Prior to posting a testimonial, we will obtain your consent to use your name and the content of the testimonial.

• For other business purposes: We may use your information for other business purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our website, products, marketing and your experience. We may use and store this information in aggregated and anonymised form so that it is not associated with individual end users and does not include personal information. We will not use identifiable personal information without your consent.

Your information will not be shared, sold, exchanged or given to any 3rd party company for any reason whatsoever without your consent, except for delivering the intended product or service that you have requested from us.

​

We rely on the following legal basis to process and share this information:

​

• Consent: We may process your data if you have given us specific consent to use your personal information for a specific purpose.  You are able to remove your consent at any time. You can do this by contacting us via email at debora@thepaintedtoucan.com

• Legitimate Interests: We may process your data when it is reasonably necessary to achieve our legitimate business interests.

• Performance of a Contract: Where we have entered into a contract with you, we may process your personal information to fulfil the terms of our contract.

• Legal Obligations: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).

• Vital Interests: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.

Under data protection law, you have a number of important rights:

• Your right of access - You have the right to ask us for copies of your personal information.

• Your right to rectification - You have the right to ask us to correct any personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

• Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

• Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

• Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.

• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at debora@thepaintedtoucan.com if you wish to make a request.

We have a variety of security measures in place to protect your personal information. We will hold your personal information for a maximum of six years and securely dispose of it once we have no ongoing legitimate business need to process your personal information.

​

Card payments are encrypted by our secure third-party payment provider. No payment information is stored by us.

We hope that we can resolve any query or concern you raise about our use of your information. Under the General Data Protection Regulation you also you have a right to lodge a complaint with the Information Commissioner who can be contacted at https://ico.org.uk/concerns/ or telephone: 0303 123 1113.

This privacy policy was published on 01/01/2022 and last updated on 01/01/2022.

We may change this policy from time to time. You should check this policy occasionally to ensure you are aware of the most recent version that will apply each time you access this website.

If you have any questions about this policy please get in touch debora@thepaintedtoucan.com