Privacy policy
Introduction
This privacy policy lays out the personal information I collect, how it is used, and your rights regarding that information. Under the General Data Protection Regulation the data controller is Thomas Graham trading as Tom Graham Creative. Contact me by email at: tom@tomgrahamcreative.com.
The information I collect
When you request information about or buy my services I may collect your name and contact details including email and postal address and telephone number(s) and any other information that you provide. I may also collect business and personal information from public sources such as government / public records. Special Categories of Personal Data such as health, lifestyle, religious or other sensitive information are not collected.
The lawful bases for processing
Consent
To permit me to send you marketing information, or to hold information deemed unnecessary.
Contract
When entering into and in the performance of a contract with you.
Legitimate Interest
Where it is necessary for the legitimate interests of the business where those interests do not override your rights, and include only activities that you might reasonably expect me to be engaged in.
How your information is used
- To communicate with you about your requests and the products / services that you may subsequently order from me.
- For business administration including debt recovery; protection against legal claims; to update the information I hold.
- To send periodical marketing information about my services where you have consented to receive it.
- To assess the effectiveness of my marketing activities.
- To help improve the quality of, and to help promote my services.
- I DO NOT use automated decision making or use your data for profiling.
Sharing your information
Your information may be shared with third parties; either for the performance of a contract with you – eg. if you request a delivery, or where required to do so to comply with the law.
How long is information held
I hold information for as long as necessary for the purposes described in this policy.
For legal or regulatory requirements this length of time may be determined by law.
Your rights
You have the right to know what information I hold about you and to have access to it; to have any inaccurate information amended or completed, or to have the record erased. You have the right to restrict and to object to the processing of your information in certain circumstances. You also have the right to complain to the Information Commissioner if you think your information has been mishandled.
Access to your information
To find out what information I hold about you please contact me. I will provide it to you free of charge within 30 days of receiving your request. In the case of unfounded or excessive / repetitive requests I reserve the right to charge an administration fee of £10.00 per request. If you find that your information needs updating (you may have changed your name, address) please contact me so I can update it.
Marketing preferences
If you do, or no longer, wish to be contacted about my services, please contact me so I can update my records.
Updates to this privacy policy
Updates will be posted here when required and may be emailed to you where considered appropriate.