GDPR & Data Privacy Policy

Introduction

This policy sets out how I collect, process and hold your personal data if you visit my event ticket shop or otherwise provide personal data to me.   As Susan Allan Photography I am responsible for controlling any personal data which you send to me.

This policy affects your legal rights and obligations so please read it carefully. If you have any questions, please contact me at susan.allan.photography@gmail.com or call me on 07734940979.

Personal data I may collect

I collect, process, store and use personal data when you book a ticket and/or buy any of my associated products and services, including your name, address and email address together with payment information. I may also collect personal data that you give to me about other people if you register them to attend an event. You agree that you have notified any other person whose personal data that you provide to me of this privacy notice and, where necessary, obtained their consent so that I can lawfully process their personal data in accordance with this policy.

All personal data that you provide to me must be true, complete and accurate. If you provide me with inaccurate or false data, and fraud is suspected or identified, I will record this.

You do not need to provide me with any personal data to view the event ticket shop. However, I may still collect the information set under the Data I Automatically Collect section of this policy, and marketing communications in accordance with the Marketing Communications section of this policy.

When you contact me by email or post, I may keep a record of the correspondence and I may also record any telephone call I have with you.

Data I automatically collect

When you visit my event ticket shop, I, or third parties on my behalf, automatically collect and store information about your device and your activities. This information could include (a) your computer or other device's unique ID number; (b) technical information about your device such as type of device, web browser or operating system; (c) your preferences and settings such as time zone and language; and (d) statistical data about your browsing actions and patterns. I collect this information using cookies in accordance with the Cookie section of this policy and I use the information I collect on an anonymous basis to improve the event ticket shop, my events and the products and services I provide, and for analytical and research purposes.

Marketing Communications

If you opt in to receive marketing communications from me you consent to the processing of your data to send you such communications, which may include newsletters, blog posts, surveys and information about new events. I will retain a record of your consent.

You can choose to no longer receive marketing communications by contacting me at susan.allan.photography@gmail.com or clicking 'unsubscribe' from a marketing email.  I shall retain your personal data in my records for marketing purposes until you notify me that you no longer wish to receive marketing emails from me.  If you do unsubscribe to marketing communications, it may take up to 5 business days for your new preferences to take effect.

Lawful processing of your personal data

I will use your personal data in order to comply with my contractual obligation to supply to you your tickets to an event and any associated products and services, including to contact you with any information relating to the event or your purchases, to deliver the event and your purchases to you in accordance with any requests you make and that I agree to, and to deal with any questions, comments or complaints you have in relation to the event or your purchases.

I may also use your personal data for my legitimate interests, including dealing with any customer services you require, enforcing the terms of any other agreement between us, for regulatory and legal purposes (for example anti-money laundering), for audit purposes and to contact you about changes to this policy.

Who do I share your data with?

I may share your personal data with any service providers, sub-contractors and agents that I may appoint to perform functions on my behalf and in accordance with my instructions, including payment providers, event ticketing providers, email communication providers, IT service providers, accountants, auditors and lawyers.

Under certain circumstances I may have to disclose your personal data under applicable laws and/or regulations, for example, as part of anti-money laundering processes or protect a third party's rights, property, or safety.

I may also share your personal data in connection with, or during negotiations of, any merger, sale of assets, consolidation or restructuring, financing, or acquisition of all or a portion of my business by or into another company.

Where I hold and process your personal data

Some or all of your personal data may be stored or transferred outside of the UK and the European Union (the EU) for any reason, including for example, if my email server is located in a country outside the UK or EU or if any of my service providers or their servers are based outside of the UK or EU. I shall only transfer your personal data to organisations that have provided adequate safeguards in respect of your personal data.

Cookies

A cookie is a small text file containing a unique identification number that is transferred (through your browser) from a website to the hard drive of your computer. The cookie identifies your browser but will not let a website know your name and/or address. These files are then used by websites to identify when users revisit that website.

My event ticket shop uses cookies so that I can recognise you when you return and personalise your settings and preferences. Most browsers are initially set up to accept cookies. You can change your browser settings either to notify you when you have received a cookie, or to refuse to accept cookies. Please note that my event ticket shop may not operate efficiently if you refuse to accept cookies.

I also use Google Analytics to monitor how the event ticket shop is used. Google Analytics collects information anonymously and generates reports detailing information such as the number of visits to the event ticket shop, where visitors generally came from, how long they stayed on the event ticket shop, and which pages they visited. Google Analytics places several persistent cookies on your computer's hard drive. If you do not agree to this you can disable persistent cookies in your browser. This will prevent Google Analytics from logging your visits.

Security

I shall process your personal data in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures. All information you provide to us is stored on my secure servers. Any payment transactions are encrypted using SSL technology.

Where I have given, or you have chosen a password, you are responsible for keeping this password confidential.

However, you acknowledge that no system can be completely secure. Therefore, although I take these steps to secure your personal data, I do not promise that your personal data will always remain completely secure.

Your rights

You have the right to obtain from me a copy of the personal data that I hold for you, and to require us to correct errors in the personal data if it is inaccurate or incomplete. You also have the right at any time to require that I delete your personal data. To exercise these rights, or any other rights you may have under applicable laws, please contact me at susan.allan.photography@gmail.com.

Please note, I reserve the right to charge an administrative fee if your request is manifestly unfounded or excessive.

If you have any complaints in relation to this policy or otherwise in relation to my processing of your personal data, you should contact the UK supervisory authority: the Information Commissioner, see www.ico.org.uk.

My event ticket shop may contain links to other sites of interest. Once you have used these links to leave my event ticket shop, you should note that I do not have any control over that other site. Therefore, I cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this policy. You should exercise caution and look at the privacy policy applicable to the site in question.

Retention

If you register with us, I shall retain your personal data until you close your account.

If you receive marketing communications from us, I shall retain your personal data until you opt out of receiving such communications.

If you have otherwise booked a ticket or associated products and services with us or contacted us with a question or comment, I shall retain your personal data for 6 months following such contact to respond to any further queries you might have.

General

If any provision of this policy is held by a court of competent jurisdiction to be invalid or unenforceable, then such provision shall be construed, as nearly as possible, to reflect the intentions of the parties and all other provisions shall remain in full force and effect.

This policy shall be governed by and construed in accordance with the law of Scotland, and you agree to submit to the exclusive jurisdiction of the Scottish Courts.

I may change the terms of this policy from time to time. You are responsible for regularly reviewing this policy so that you are aware of any changes to it. If you continue to use my event ticket shop after the time that I state the changes will take effect, you will have accepted the changes.