Firstly, we are under a legal obligation to let you know what personal information we collect about you, what we use it for and on what basis. We always need a good reason and we also have to explain to you your rights in relation to that information. You have the right to know what information we hold about you, to have a copy of the information and for that information to be changed or sometimes deleted.
Whatever we do with your information, we need a legal basis for doing it. We generally rely on one of three grounds (reasons) for our business processing. Firstly, if you have ordered or take a service from us, we are entitled to process your information so that we can provide that service to you and you can be billed for it in accordance with your booking terms and conditions.
Secondly, if we want to collect and use your information for other purposes, we may need to ask for your consent (permission) and, if we do, that permission must always be indicated by a positive action from you (such as ticking a box) and you will be informed. You are also free to withdraw your permission at any time. We tend to need permission when what is proposed is more intrusive (for example, contacting you about rates and availability for the event you are attending and may attend in the future)
However, we do not always need permission. In some cases, having assessed whether our use would be fair and not override your right to privacy, we may come to the view that it falls within the third ground – our ‘legitimate interests’ to use the information in a particular way without your permission. But when we do this, we must tell you as you may have a right to object. And if you object specifically to us sending you marketing material, or to ‘profiling you’ for marketing purposes, we must then stop.
This is all set out in detail in this policy, which focuses more on those items that we think are likely to be of most interest to you. As well as covering processing for business purposes, we give you information on circumstances in which we may have to, or can choose to, share your information.
It also applies even if you’re not one of our customers and you interact with us, such as by:
We may change this privacy notice from time to time by updating this page in order to reflect changes in the law and/or our privacy practices. We encourage you to check this privacy notice for changes whenever you visit our website – digitalpaint.co.uk.
For the purposes of the Data Protection Act 1998 (the "Act"), the data controller is Digital paint Limited of Newton House, Northampton Science Park, NN3 6LG.
Accessing the Information we hold about you.
Under the Data Protection Act 1998, you have a right to know what personal information we hold about you. If you'd like a copy of the information you are entitled to please write to The Data Protection Officer, of Newton House, Northampton Science Park, NN3 6LG, clearly identifying yourself and the information you require. We may charge you £10 to cover the cost of processing your request and supplying your information to you. We will ask you to provide identification to ensure we do not disclose your information to the wrong person.
When you send email or other communication to Digital Paint Limited or another user, we may retain those communications in order to process your enquiries, respond to your requests and to improve our services.
To provide you with products and services.
We’ll use your personal information to process your bookings or provide you with products and services.
This means we will
To do this we collect:
Because it’s in our interests as a business to use your information We’ll use your personal information if we consider it is in our legitimate business interests so that we can operate as an efficient and effective business. We use your information to:
To market to you and identify products and services that may be of interest to you. We do this if you have been a previous customer or if we have been authorised to do so by your official event organiser. This means we will
We use the following for marketing and to identify products and services you’re interested in.
We’ll send you information (about the products and services we provide) by phone, post, email or text message. We also use the information we have about you to personalise these messages wherever we can as we believe it is important to make them relevant to you. We do this because we have a legitimate business interest in keeping you up to date with our products and services, making them relevant to you and making sure you manage your spending with us. We also check that you are happy for us to send you marketing messages by email before we do so. In each message we send, you also have the option to opt out.
We have a legitimate interest in generating insights that will help us operate our network and business or would be useful to other organisations.
To create aggregated and anonymised data
We’ll use your personal information to create aggregated and anonymised information. Nobody can identify you from that information and we’ll use it to;
We’ll use the following to generate aggregated and anonymous information
Your gender, and name.
Information about what you bought from us.
To develop our business and better understand our customer’s needs.
This means we will
We use the following information to do this;
If we use this information for market research, training and development purposes and we do so because it is in our legitimate business interests of running an efficient and effective business which can adapt to meet our customers’ needs.
To collect debt
If you don’t pay your bills, we might ask a debt-recovery agency to collect what you owe. We’ll give them information about you (such as your contact details), your account (the amount of the debt) and may choose to sell the debt to another organisation to allow us to receive the amount due.
To meet our legal and regulatory duties
We might have to release personal information about you to meet our legal and regulatory obligations.
To Law Enforcement Agencies
Under investigatory powers legislation, we might have to share personal information about you to government and law-enforcement agencies, such as the police, to help detect and stop crime, prosecute offenders and protect national security.
They might ask for the following details.
We’ll share personal information about you where we have to legally share it with another person. That might be when a law says we have to share that information or because of a court order.
In limited circumstances, we may also share your information with other public authorities, even if we do not have to. However, we would need to be satisfied that a request for information is lawful and proportionate (in other words, appropriate to the request). We would also need appropriate assurances about security and how the information is used and how long it is kept before sharing.
Sharing of Information
Digital Paint will not share or sell personal information about you with third parties or non-affiliated companies except to provide the products or services you have requested or when we have your permission or under the following circumstances;
How have we obtained the information about you?
From you directly when you have used our service in the past.
From a third party such as a colleague who may have made a booking on your behalf.
From an event organiser who may have passed us your details to allow us to deliver our service for them.
Protecting your information.
How long do we keep your personal information?
Is your personal information transferred outside the UK or EU?
We’re based in the UK but sometimes your personal information may be transferred outside the European European Union. If we do so we’ll make sure that suitable safeguards are in place, for example by using approved contractual agreements, unless certain exceptions apply. By using a Digital Paint service, you consent to any such transfer of your information outside your country and the EU.
How and when can you withdraw your consent?
Where we’re relying upon your consent to process personal data, you can withdraw this at any time. To do so, please email email@example.com and enclose which details you would like removed and from what source. You must have the permission to suppress other individual's data, if you are doing so on their behalf.
Do you have to provide us with your personal information?
We’re unable to provide you with our products or services if you do not provide certain information to us. In cases where providing some personal information is optional, we’ll make this clear.
Your rights under data protection laws
Here is a list of the rights that all individuals have under data protection laws. They don’t apply in all circumstances. If you wish to use any of them, we’ll explain at that time if they are engaged or not. The right of data portability is only relevant from May 2018.
You also have the right to complain to the Information Commissioner’s Office which enforces data protection laws: https://ico.org.uk/. You can contact us using the details below.
If you have any questions or comments about this privacy notice, or if you wish to exercise your rights or contact the DPO, you can contact us by going to the Contact Us section of our website. Alternatively, you can email us at: firstname.lastname@example.org marking it for the attention of the DPO.