This policy covers all data that is shared by a visitor with us whether directly via https://handsintheattic.com or via email.
This policy provides an explanation as to what happens to any personal data that you share with us, or that we collect from you either directly via this Website or via email.
1. Information we collect
In operating our Website we may collect and process the following data about you:
1.1 Details of your visits to our Website and the resources that you access including, but not limited to, traffic data, location data, weblog statistics and other communication data.
1.2 Information that you provide by filling in forms on our Website, such as when you place an order or contact us via the contact us page. This includes but is not limited to your name, email address, and payment information.
1.3 Information provided to us when you communicate with us for any reason.
1.4 Information provided to us to fulfil your order, for example seating chart guest list and invitation details.
On occasion, we may gather information about your computer for our services, and to provide statistical information regarding the use of our Website to our advertisers.
Such information will not identify you personally, it is statistical data about our visitors and their use of our site. This statistical data does not identify any personal details whatsoever. It is used by us to analyse how visitors interact with the Website so that we can continue to develop and improve this Website.
We may gather information about your general Internet use by using a cookie file that is downloaded to your computer. Where used, these cookies are downloaded to your computer automatically. This cookie file is stored on the hard drive of your computer as cookies contain information that is transferred to your computer’s hard drive. They help us to improve our Website and the service that we provide to you.
All computers have the ability to decline cookies. This can be done by activating the setting on your browser which enables you to decline the cookies.
Any advertising featured on this Website may also incorporate cookies, over which we have no control. Such cookies (if used) would be downloaded once you click on advertisements on our Website.
3. Use of your information
The information that we collect and store relating to you is used for the following purposes:
3.1 To provide you with product or service-related information when you send a message.
3.2 To meet our contractual commitments to you when you purchase a product.
3.3 If necessary to comply with a legal obligation or court order or in connection with a legal claim, such as retaining information about your purchases if required by tax law; and
3.4 As necessary for the purpose of legitimate interests, if those legitimate interests are not overridden by your rights or interests
4. Storing your personal data
4.1 Data that is provided to us is stored on our secure servers. Details relating to any transactions entered into via our site will be encrypted to ensure its safety.
4.2 The transmission of information via the Internet is not completely secure and therefore we cannot guarantee the security of data sent to us electronically and the transmission of such data is entirely at your own risk. Where we have given you (or where you have chosen) a password so that you can access certain areas of our site, you are responsible for keeping this password confidential.
4.3 Your personal information is retained only for as long as necessary to provide you with the services you order. However, we may also be required to retain this information to comply with legal and regulatory obligations, to resolve disputes, and to enforce our agreements. We generally keep your data for the following time period: 4 years.
5. Disclosing your information
We share your personal information for very limited reasons and in limited circumstances, as follows:
5.1 Online service providers. We engage certain trusted third parties to perform functions and provide services to my shop, such as Gmail and Google Drive. We will share your personal information with these third parties, but only to the extent necessary to perform these services.
5.2 Compliance with laws. We may collect, use, retain, and share your information if we have a good faith belief that it is reasonably necessary to:
(a) respond to legal process or to government requests;
(b) enforce our agreements, terms and policies;
(c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or
(d) protect the rights, property, and safety of our customers, or others.
6. Third party links
You might find links to third party websites on our Website. These websites should have their own privacy policies which you should check. We do not accept any responsibility or liability for their policies whatsoever as we have no control over them.
7. Transfers of personal information outside the EU
We may store and process your information through third-party hosting services in the US and other jurisdictions. As a result, your personal information may be transferred to a jurisdiction with different data protection and government surveillance laws than your jurisdiction. If we are deemed to transfer information about you outside of the EU, we rely on Privacy Shield as the legal basis for the transfer, as Google Cloud is Privacy Shield certified.
8. Your rights
If you reside in certain territories, including the EU, you have a number of rights in relation to your personal information. While some of these rights apply generally, certain rights apply only in certain limited cases. These rights are described below:
8.1 Access. You may have the right to access and receive a copy of the personal information we hold about you by filling this contact form
8.2 Change, restrict, delete. You may also have rights to change, restrict our use of, or delete your personal information. Your personal information will generally be deleted upon request.
8.3 Object. You can object to
(i) the processing of some of your information based on our legitimate interests and
(ii) receiving marketing messages from me after providing your express consent to receive them. In such cases, your personal information will be deleted unless there are compelling and legitimate grounds to continue using that information or if it is needed for legal reasons.
8.4 Complain. If you reside in the EU and wish to raise a concern about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.
Last modified: May 22, 2018