Privacy Policy 

I am committed to ensuring that your privacy is protected. This privacy policy outlines how your personal information is treated. I regularly review and, where necessary, update my privacy information. You should check this page occasionally to ensure that you are happy with any changes.

What Information do I collect?
I may collect and store the following personal information;

•    Information relating to your order, such as your name, email address, phone number and postal address.
•    Information you provide to sign up to email newsletters, this included name and email address.
•    Information relating to any transactions between you and I through the website or through orders at exhibitions. 

Why I need your information and how I use it

•    To fulfil your order, 
•    Delivery of your order
•    Send invoices and/or collect payment
•    Internal record keeping.
•    Send email newsletter (Only if you have opted in) 
•    I keep certain information as necessary for the purpose of my legitimate business interests and lawful obligations

Transactions
All online payments are handled through Stripe a third party payment processor  - please see their Privacy Policy at https://stripe.com/gb/privacy. Card information is not stored and all card information is handled over SSL encryption.

Disclosure
I may have to disclose your personal information;

•    To comply with UK tax law.
•    In order to establish or defend my legal rights.

Except as stated in this privacy policy I will not disclose personal information to third parties.

Data Retention
I retain your personal information only for as long as is necessary to fulfil my legitimate business interests and lawful obligations, which may be up to 7 years. The data I keep includes your order form, contact details. I may also be required to share some of this information to comply with our legal, regulatory and tax obligations

Your Rights
Data Protection Law means that you have extensive rights regarding the collection, storage and use of your data.
Under the GDPR (General Data Protection Regulation) you have the following rights as an individual regarding your data:
1.    The right to be informed
2.    The right of access
3.    The right to rectification
4.    The right to erasure
5.    The right to restrict processing
6.    The right to data portability
7.    The right to object
8.    Rights in relation to automated decision making and profiling
You may have the right to access and receive a copy of the personal information I hold about you by contacting me using the contact information below.

Security
I am committed to ensuring that your information is secure and have put in place suitable physical, electronic procedures to safeguard and secure the information I collect.  

Contact
If you have any questions or concerns about my privacy policy or the treatment of your personal data please contact me;

kathryn@kathrynhinton.com

Studio 1, floor 1
Beaverhall Arts Studio
27 Beaverhall Road
Edinburgh
EH6 5FD

telephone: 07880797451