This Notice explains how EJA Purches T/A Ayton West Gallery complies with GDPR.
1. Identity and contact information
This Privacy Notice (“Notice”) is provided by EJA Purches trading as Ayton West Gallery (“me”, "we" or “I”), of Bont Dolgadfan, Llanbrynmair, SY19 7AT. It covers your rights in relation to the Data Protection Act 1998 (“DPA”), the General Data Protection Regulation (“GDPR”) and the Privacy and Electronic Communications Regulations (“PECR”).
EJA Purches trading as Ayton West Gallery is both the controller and processor of all personal data collected.
Date this Notice was created: 1st December 2018
Date this Notice was last modified: 1st January 2022
2. Compliance declaration
Both EJA Purches trading as Ayton West Gallery and this website, www.aytonwestgallery.co.uk, comply with GDPR. The GDPR comes into effect on the 25th May 2018. This Notice is updated whenever changes are made to relevant data protection legislation.
3. Your rights under the GDPR
Under the GDPR, you have a number of different rights relating to your personal data and how it is processed. They are as follows:
Most of these Rights will apply to your personal data and how it is processed by EJA Purches trading as Ayton West Gallery, but some (such as the right to data portability and rights related to automated decision making including profiling) are not relevant to this business at the time of writing.
If you want to know more about your rights please visit the ICO Website directly.
4. The data I collect, how I use it and why
Cookies and website visitor tracking
Cookies are small text files that are placed on the hard drive of your computer or device to help the site provide a better user experience. In general, cookies are used to retain user preferences, store information for things like shopping baskets, and provide anonymity tracking data to third party applications, in this case Google Analytics. As a rule, cookies will enhance your browsing experience. However, if you prefer not to receive cookies they can be disabled and removed from within the settings menu of your Internet browser. I suggest either consulting the help section of your browser.
Client contact information
We use personal data, provided directly and voluntarily to us by clients, for two purposes. The first is to carry out my contractual obligations. This means that it’s information that is needed to do our job. This personal data includes (but is not limited to) names, addresses, email addresses, phone numbers and other information required for the job in hand..
The second purpose is to analyse and understand behavior of clients to assist in relation to sales and marketing exercises. This is a legitimate interest and a reasonable expectation that most people would have about a business. All personal data that is collected is stored within a safe and secure, GDPR compliant, contact management systems including Mail Chimp and Google Docs. This is a cloud based system that allows us to keep track of upcoming inquries, emails and invoicing. For further information please view their privacy policies.
W may make use of mailing lists to help market this business. Any new mailing lists created from this point, will be populated with personal data collected from you on the basis of explicit consent for this single purpose. The Mailing List client I use is Mail Chimp which is fully GDPR compliant.
More detailed information
If you want to contact me with questions about your personal data, wish to exercise any of your rights or ask me further detailed questions, please use the contact form at the bottom of this page.
Shopping with Ayton West Gallery and payments
The shop application is operated by shoprocket.io and they provide a fully complient provacy policy. (Link below)
The payment system is operted by Stripe and they provide a fully complient provacy policy. (Link below)
5. Sharing information with third parties
Other than those third parties mentioned in this Notice and listed below, EJA Purches trading as Ayton West Gallery shall not pass your personal data to any other third parties.
Your personal data may, subject to my obligations to comply with data protection legislation, be shared with the following third parties:
Google Analytics demographics tracking software; Having taken precautions to maintain the security of such personal data, I may in certain circumstances share personal data with the ICO, and other legal, regulatory and law enforcement bodies; In anonymised form, I may share personal data with: Any third party, in relation to the sale of some or all of my business, or its assets, or as part of any business restructuring or reorganisation. I will take steps with the aim of ensuring that your rights continue to be protected if your personal data is transferred in accordance with this clause; and Data aggregators and platform providers as part of an analysis of user metrics or sales performance (including but not limited to Google and Facebook). I may also share your personal data with third party media businesses for the purposes of marketing my offerings, improving my services, and running a profitable business. These third party businesses may include, wedding magazines/publications, wedding websites, social media sites, or other outlets, with the aim of raising public awareness of my business.
6. Security, storage and data retention
EJA Purches trading as Ayton West Gallery stores your personal data in the EEA for the maximum of 6 years, after which they are distroyed. (I am obliged to keep a 6 year record of works carried out for my HMRC tax records), but you retain the right for your personal data to be deleted before this point which can be exercised by submitting a formal request for deletion via email.
7. Social Media Policy And Usage
I adopt a safe and responsible Social Media Policy. While I may have official profiles on social media platforms users are advised to verify the authenticity of such profiles before engaging with, or sharing information with such profiles. I will never ask for personal details on social media platforms. Users are advised to conduct themselves appropriately when engaging with me on social media.
8. Your consent
By using this site and/or engaging me on my Terms and Conditions, you agree to be bound by this Notice.
9. Your right to withdraw consent
You have the right to withdraw your consent to be bound by this Notice at any time. If you wish to do so, please use the contact form at the bottom of this page. You also have the right, as set out above, to withdraw your consent to me processing your personal data.
10. Your right to lodge a complaint
As well as the right to withdraw consent and exercise any of the above rights mentioned under ‘Your rights under the GDPR’, you also have the right to raise a complaint with a regulatory body. In the United Kingdom, this is the Information Commissioner’s Office (ICO). If you have concerns about the way your data is being processed by an organisation, you can find out more here.