Privacy Policy
At Kathryn Thomas Original Oil Paintings, we take your privacy very seriously and are committed to protecting the privacy and security of our customers. We fully appreciate and respect the importance of data protection and security on the Internet.
This Privacy Policy (the “Policy”) outlines how your personal information is treated and forms part of our terms and conditions. This Policy explains:
- what information we collect when you use the Kathryn Thomas Original Oil Paintings website (the “Site”) and when you communicate with us
- how we use your information
- how we share your information
- how long we keep your information and how it is stored
- our approach to sensitive personal information
- what options you have to control your information
- the rights you may have in relation to your personal information
- how we communicate changes to this Policy
About us
This Site is run by Kathryn Thomas Original Oil Paintings. For the purposes of applicable data protection laws, including the EU General Data Protection Regulation (“GDPR”) (as amended or superseded) Kathryn Thomas Original Oil Paintings is the “controller” of the personal information collected through the Site or by phone.
How do we collect information from you?
We will collect personal information that you provide to us when you:
- fill in forms on our Site, for example, to fill in our contact form, leave feedback, enter a competition or respond to a survey
- subscribe to our mailing list
We will also collect certain information automatically when you visit our Site, in particular:
- when you access our Site, we use “cookies” to make it easier for you to use our Site. These cookies record data about the pages you browse and the activities you carried out during your visit. Further details about our use of cookies is set out in our Cookie Policy here
- we record details of the resources that you access to visit our Site (for example, URL addresses, traffic data etc.)
- we record information about the type of device you have used to visit our Site, your device settings, and the cause of any system errors. Your device manufacturer or operating system provider will have further details on what information your device makes available
- We will collect personal information about you when you contact us by telephone, e-mail, or via social media
How we use your information
We will use your information in the following ways:
For the performance of a contract between you and us:
- to fulfil any order that you place with us
- to collect payment from you
- to protect and defend our legal rights and interests
Where we have a legitimate interest in using your personal information
- to administer and monitor our Site, including to ensure that content is presented in the most effective manner for you and for your device, and to allow you to participate in interactive features when you choose to
- to analyse any feedback that you provide on our services, and to improve our services
- to administer competitions that you have entered
Where you have provided your consent to our use of cookies
- Further details about our use of cookies is set out in our Cookie Policy here
If you have consented to receive marketing information from us, we may use your information in the following ways:
- we will process details of your previous transactions and contact you by e-mail with information about goods and services similar to merchandise you have purchased (however we never store your payment details)
How we share your information
We share your information with our core service providers and third-party platforms as required for our business to function; for example, picking, packaging and processing orders, fulfilling deliveries, customer support, fraud detection, credit risk reduction checks, IT systems support, and internal audits.
Your information may be processed by a third party in order to maintain the functionality of our Site and database.
How long we keep your information
We retain the information you provide for the following periods:
- for as long as you subscribe to receive marketing information
- in the case of any contact
Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
We take the protection of your data very seriously. From the moment we receive your information we employ several industry-standard security measures and features to keep it secured and to prevent unauthorised access.
All pages on our website are secured using the “https” communication protocol, which encrypts transferred information using “transport layer security” (TLS).
Sensitive personal information
We do not seek to collect sensitive personal information (i.e. information relating to race or ethnic origin, political opinions, religious or other beliefs, trade union membership, physical or mental health, sexual orientation or criminal records). We ask that you do not provide such information to us.
Rights you may have
You may have certain rights in relation to personal information that we hold about you. These include the right to request access to your personal information, to request that it is erased, that its processing is restricted, or that any inaccurate personal information is rectified. You may also have the right to object to the processing of your personal information, or in some circumstances to obtain a copy of the personal information in a machine-readable format. You also have the right to complain about the use of your personal information to the Information Commissioner’s Office.
Changes to this Policy
We may change this Policy from time to time. If we make changes, we will notify you by revising the date at the top of this Policy, and if the changes are significant, we may provide you with additional notice such as adding a statement to the homepage of the Site or sending you an e-mail with the update.
Please check this Policy regularly to stay informed about our information practices and the ways you can help protect your privacy.