2. We take your privacy seriously. In particular, we are committed to ensuring that your Personal Data is protected in accordance with our legal obligations under the Data Protection Directive 95/46 (as amended) and national data protection laws.
5. Nothing in this Policy is intended to prejudice any rights that you may have in relation to your Personal Data under applicable data protection law.
Personal Data that we collect
6. We may collect the following Personal Data about you:
b. Details of personal identification such as passport and driving licence;
c. Other information relating to your transactions with us and your use of our Services;
d. Sarah Bayliss Photography Limited uses a third party payment provider for administering payments on its behalf (currently Paypal). Sarah Bayliss Photography Limited does not have access to your debit or credit card details. However, should you open an account with us or require a refund we may need to collect some payment data such as a credit or debit card or bank account, you will be advised in writing in advance should this data be required and your full consent will be sought in writing before we accept this data.
e. Credit history (should you open an account with us as a buyer or commissioning client)
f. Information on your collecting preferences and aspirations, your art collection and your art acquisitions; and
g. Other information that you submit to us, for example, when you have a comment/complaint, submit a question, take part in a customer survey or where you express an interest in receiving marketing material or request further information.
7. Please note that our Billing and Shipping Departments seek payment details or may invoice you separately for urgent or specialist delivery services.
8. In the EU, certain personal data is known as sensitive data, Sensitive date is defined as data related to:
(a) Racial or ethnic origin
(b) political opinions
(c) religious beliefs or other beliefs of a similar nature
(d) trade union membership (within the meaning of the M1Trade Union and Labour Relations (Consolidation) Act 1992)
(e) physical or mental health of condition
(f) sexual life
(g) the commission for any offence committed or alleged to have been committed, the disposal of such proceedings or the sentence of any court in such proceedings.
What we do with the Personal Data
9. We store and use Personal Data that we collect for the following purposes:
a. to provide you with products and services;
b. to perform or enforce any contract that we have with you;
c. to understand your needs and provide you with a better service or generally improve our services and products;
e. to contact you for market research purposes. We may contact you by email, phone or mail;
f. to customise our website in line with your particular interests or preferences;
g. for our internal business record keeping, tax, accounting, audit purposes;
h. to carry out identity and credit checks (for example, in relation to buyers or commissioning clients);
i. to collect moneys owed to us or our consignors;
j. in connection with legal and regulatory matters that we need to deal with; and
k. other lawful purposes as may be notified to you from time to time.
To whom we may pass your Personal Data?
10. We may transfer your Personal Data externally;
a. to professional advisors, third party suppliers or subcontractors who perform our contract obligations or who assist us in conducting our business such as data hosting, call centre operations, credit agencies, email management services analytics or other services in relation to our website or Services; and
b. when we believe it is necessary to comply with the law; or we need to do this in connection with protecting our business or enforcing our legal rights, or we need to protect another person’s rights, property, or safety or we need to act against actual or suspected illegal activity and reduce unwarranted risk to our business. This includes, but is not limited to, exchanging information with third parties such as the police, law enforcement agencies, the courts, fraud prevention agencies, debt collection agencies and regulatory authorities.
11. With your permission, we may sometimes use your Personal Data to send you promotional information from carefully selected third parties that you may find interesting.
13. All use of your Personal Data will be subject to us observing applicable legal rights (see the Your Legal Rights’s section below).
Consent to worldwide transfer and processing of Personal Data
15. We are committed to ensuring that any Personal Data we hold about you is properly safeguarded. In order to prevent unauthorised access or disclosure, we have put in place appropriate physical, electronic and managerial procedures to protect your Personal Data against unauthorised access or disclosure and any loss, destruction or damage.
16. We endeavour to take all reasonable steps to protect your Personal Data from external threats, however, please be aware that there are inherent security risks of sending information by public networks or on public computers and we cannot therefore guarantee the security of any data disclosed or transmitted over the internet.
17. Where you sign-up to receive Services, you may be provided with log-in information and may have the ability to set passwords to allow you to access a personal account page. Where we do so, it is on the condition that you will be responsible for ensuring that such log-in information and any passwords are kept secure and confidential at all times. You will not share any log-in information or passwords, without our express authorisation. We cannot be responsible for any loss or damage caused by your negligence, misuse of log-in details or your decision to share account access with others.
18. Sometimes unauthorised individuals send email messages to consumers, purporting to represent a legitimate business, requesting that the consumer provide personal, often sensitive information, using the information (such as the email and domain names of) a legitimate trusted business. In reality, such information is sought for identity theft. This illegal activity has come to be known as “phishing’
19. If you receive an email or other correspondence requesting that you provide any sensitive information via email or to a website that seems suspicious to you, please do not provide such information, and report such requests to us.
Links to Other Websites
21. Our website may contain links to other external websites (‘Third Party Websites’). We do not have control over such Third Party Websites to which we link and we cannot be held responsible for the privacy of any Personal Data that you provide after you have used any link on our website to visit these Third Party Websites. You should exercise caution and look for any applicable privacy statement appearing on such Third Party Website.
Your Legal Rights
22. In accordance with your legal rights, you may request the following in connection with your Personal Data: a. You can indicate to us at any time that you do not want your Personal Data to be used by us for direct marketing purposes, or that you do not want us to share your Personal Data with third parties. Please note that, due to the global nature of our operations, it may take several business days to process your request, and during that time, you may continue to receive marketing information;
b. You can tell us if Personal Data that we hold about you is inaccurate or out of date;
c. You can ask us not to process Personal Data about you that causes substantial unwarranted damage or distress, however we may not always be bound to act on such a request (e.g. if we need to continue to process your data for contractual or legal reasons); and
d. You may request information regarding the Personal Data that we hold about you in the UK in accordance with the Data Protection Act. If you would like to make such a request please get in touch using the address in the ‘Contact Us’ section below. Please note that a small administration fee may be payable and we may ask for further information to clarify your request or verify your identity before responding to your request.
Last modified 02/06/15