WHO WE ARE
Proffoto.co.uk is the operator of the website www.proffoto.co.uk and the host is Zenfolio. We collect, use and are responsible for certain information about you. When we do so, we are regulated under the General Data Protection Regulation which applies across the European Union (including the United Kingdom) and we are responsible as 'controller' of that personal information for the purposes of those laws. The person responsible for how we handle personal information is James Spawforth, firstname.lastname@example.org.
THE PERSONAL INFORMATION WE COLLECT AND USE
Personal information provided by you
In the course of operating our business, we collect personal information when you provide it to us, such as your name, postal address, email address, phone numbers and payment details.
We also collect personal information from you if you apply for a job with us or work for us for any period of time. In this context, personal information we gather may include: contact details, financial and payment details, details of education, qualifications and skills, marital status, nationality, NI number, job title, and CV.
Personal information provided by third parties
Occasionally we may receive information about you from other sources (such as references), which we will add to the information we already hold about you in order to help us provide services to you. If you apply for a job with us, we may receive information from the people who provide references.
Personal information about other individuals
If you give us information on behalf of someone else as an alternate contact, referee or next of kin, you confirm that the other person has agreed that you can:
HOW AND WHEN DO WE COLLECT INFORMATION FROM YOU?
To find out more about how we collect and process personal information click Reasons we can Collect and use your Personal Information.
WHEN WE WILL CONTACT ANOTHER PERSON ABOUT YOU?
If you provide us with details of any other person we can contact to discuss your order, we may contact that person and discuss and share the details of your order with that person and deal with that person in relation to your order as if that person was you. We may particularly want to do this if we are unable to get in touch with you for any reason. If you change your mind, you can email us at email@example.com.
If you provide us the details of a person who we can contact for a job reference, we may contact that person in connection with your job application.
WHO YOUR INFORMATION MAY BE SHARED WITH
We may disclose your personal data to:
If we use an outside party to process your information, we will require them to comply with our instructions in connection with the services they provide for us and not for their own business purposes.
KEEPING YOUR PERSONAL INFORMATION SECURE
We have appropriate security measures in place to prevent personal information from being accidentally lost or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those people processing your information will do so only in an authorised manner and are subject to a duty of confidentiality. For more information see Safeguarding your Personal Information.
TRANSFERS OF YOUR PERSONAL INFORMATION OUT OF THE EEA
Zenfolio.com who host our website are an international specialist in the production of photography websites and as such are recognised as the No1 provider.
Based in San Francisco Zenfolio uses standard industry security practices to protect your personal information including Secure Socket Layer (SSL) transmission technology for all sensitive information exchanges. This technology encrypts information you send us to avoid it being intercepted before reaching our secure HTTPS servers.
HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?
We will usually hold your personal information as a customer or employee on our system for the period we are required to retain this information by applicable UK law, currently 12 years from the end of our contract (Customer) or 6 years (employee) or 6 months after any unsuccessful job application, unless you have told us you want us to delete the information earlier (For more information see“What rights do you have”). We do keep some photos longer than 12 years but most are deleted after 1 year, however they do not have any personal identifying factors linked to them.
DO YOU NEED EXTRA HELP?
If you would like this policy in another format (for example: audio, large print, braille) please contact us at firstname.lastname@example.org
Safeguarding your personal information
We will use technical measures to safeguard your personal data, for example:
• access to your customer account is controlled by a password and user name that are unique to you;
• we store your personal data on secure servers; and
• payment details are encrypted on the secure server
We have procedures in place to deal with any suspected data security breach. We will notify you and any applicable supervisory body of a suspected data breach where we are legally required to do so.
While we will use all reasonable efforts to keep your personal data safe, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data that is transferred from you or to you via the internet. If you have any particular concerns about your information, please contact us at email@example.com.
If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.
REASONS WE CAN COLLECT AND USE YOUR PERSONAL INFORMATION
We rely on a different lawful basis for collecting and using personal data in different situations.
Where you make enquiries with us before you become a customer, we need to collect personal information about you so that we can take steps to enter into a contract with you. Once you have become a customer, we need to collect and use personal information to provide services to you and to claim our right to be paid in return for our services under our standard terms of business/contract with you. This includes collecting and using your personal information to:
If you apply for a job with us, we will collect and use personal information to process your application and check references. If you take a job with us, we will collect and use your personal information to enter into an employment contract with you and to administer the employment relationship, including making payments to you, accounting for tax, ensuring safe working practices, monitoring and managing staff access to systems and facilities, monitoring absences and performance and conducting assessments.
We collect and use personal information from our customers and staff to comply with our legal obligations. For example, we will take copies of documents that identify you as eligible to live and work in the UK.
Legitimate business interests
Our priority is to make sure we give a high quality and secure service to customers and to follow up effectively on enquiries even though we accept that not all enquiries will lead to a business relationship or contract. We collect personal information to:
We will also communicate with you information about other services we can offer you and update you about our activities and promotions which may be of interest to you. If you would like to stop receiving these email newsletters, you can also click on the “unsubscribe” button at the bottom of the email newsletter. It may take a few days for this to take place, or If you do not wish to continue receiving these communications, you can opt out at any time. See What rights do you havefor further information. If you ask us to stop contacting you in this way, you can also ask us to start again at any time.
If we propose to use your information for any other uses we will ensure that we notify you first. If we need your consent to use your information for these other purposes, we will give you the opportunity to opt in or to refuse. If you opt in, you will be able to opt out at any time.
WHAT RIGHTS DO YOU HAVE?
Under the General Data Protection Regulation, you have a number of important rights. These include the following rights:
Further information on each of these rights is available from the Information Commissioner’s Office.
If you would like to exercise any of these rights, please:
We will not charge any fee for any of these services in most cases.