my privacy policy

Updated 25th of July 2018

 

1. what's in this policy?

This policy tells you:

  • what information I might collect about you
  • how I might use that information
  • when I might use your details to contact you
  • what information I might share with others
  • your choices about the personal information you give me

 

2. what does this policy cover?

This policy covers the services that I offer including this website.

What's not covered in this policy?

My services sometimes link to services run by other companies. For example, my website is hosted by my hosting partner Squarespace, my chat window is hosted by PureChat.com and my videos are hosted on Vimeo and YouTube. Those companies have their own privacy and cookies policies, so remember that the information you give them will follow their rules and not mine.

 

3. How do I protect your personal information?

I'm strongly committed to keeping your information safe. To do this I design my services with your safety in mind. 

At the same time, no service can be completely secure - if you have any concerns that your account or personal information has been put at risk, for example if someone could have found out your password, please get in touch with me straight away.

 

4. Where I store your information

Some companies that provide services to me run their services from outside the European Economic Area (EEA). I only let that happen if I are satisfied with their levels of security. Keep in mind that when you give me personal information it could be being transferred, stored or processed in a location outside the EEA. Where your information is transferred outside the EEA I will do so using the Swiss-U.S. and EU-U.S. Privacy Shield Frameworks that are recognised under EU Data Protection Law as providing an adequate level of protection.

 

5. What types of personal information do I collect?

a. Information that you give me

Generally, you control the amount and type of information that you provide to me when using my website. My lawful basis for collecting and processing your personal information is the necessity for the performance of a contract or to take steps to enter into a contract.

I might ask for your name and contact details, for example if you use a contact form or a chat window to contact me. I also collect information about how you use my services, like the photographs you look at.
 

b. Device information

Devices include computers, mobile phones and tablets.

I automatically receive some technical information from your device. This information may include the name of the website from which you entered my website, if any, as well as the name of the website you’ll visit when you leave my website. The information may also include the IP address of your device, your web browser type, the type of mobile device, your computer operating system, and data about your browsing activity when using my website. I use all this information to analyse trends among my users to help improve my website.
 

c. Payment information

If you purchase services from me I may obtain limited information about you and your payment card from my payment processor. This information may include your name, postal address, email address, the last four digits of your payment card, the country of issuance and the expiration date. My payment processors are Stripe and PayPal. They both use and process your payment information in accordance with their own privacy policies. Ensure you are comfortable with what they share by reviewing their privacy policies and, if necessary, modifying your privacy settings directly on the third party service.
 

d. Chat window

My website includes a chat window to enable you to communicate with me live online or offline by email. You can communicate with me before you buy my services. When you chat with me, I may collect some or all the following information: your email address, first name, last name, location, pages you are viewing on my website and any other information you willingly choose to provide to me. 

 

6. How long will I keep your personal information?

I retain information that I collect from you only for as long as I need it for legal, business, and/or tax purposes. I take into account the type of information it is, the amount collected, how sensitive it might be and any legal requirements.

Your information may be retained in electronic form, paper form, or a combination of both. When your information is no longer needed, I will destroy, delete, or erase it.

 

7. How can I use your personal information?

I have to have a valid reason to use your personal information. It's called the "lawful basis for processing". Sometimes I might ask your permission to do things, like if you asked to subscribe to a regular email. Other times, when you'd reasonably expect me to use your personal information, I don't ask your permission, but only when:

  • the law says it's fine to use it, and
  • it fits with the rights you have

I use your information for these types of things:

  • to deliver my services 
  • to deal with your requests and enquiries

If you turn off non-essential cookies, I will still collect information about how you use my services, but it will be collected anonymously. For example, I'd be able to see that someone read a particular page on my site but I wouldn't be able to tell that it was you.

 

8. When will I use your information to contact you?

I might use your information to contact you about different things, like:

  • to update you on any changes to my policies, practices and terms of use
  • to answer you when you've contacted me, or to respond to a comment you've made

I'll only contact you when I need to or when you've given me permission. 

I'll never contact you to ask for your password.

 

9. Will you be contacted by me for marketing purposes?

I don't currently send marketing emails. I rely on my good name and word of mouth for my business. However, when you create an account with my hosting partners, they may offer you the opportunity to receive marketing information from them. 

 

10. When do I share your personal information with others?

I'll never sell your personal information. I do share it with others in these ways:

a. When you make something public

Like when you post a comment or testimonial which the public can see.
 

b. When I use other companies to power my services

In order for me to give you quality experiences and to understand how you're using my services I often use other companies to process your personal information on my behalf. 

I make sure that your personal information is looked after as if I were handling it directly. I carefully select these companies, only share with them what they need to do the work and I make sure they keep your information secure.
 

c. Sometimes by law I have to pass on your information to other organizations

I might also share your information if I have to by law, or when I need to protect you or other people from harm.

 

11. How do I protect children?

I appreciate that children need particular protection, especially when their personal data is being collected and processed because they may be less aware of the risks involved. My website and my services are not designed for use by anyone under the age of 16 and so I do not knowingly collect personal data from children under the age of 16 via my website.

My work does may include processing personal data of children under the age of 16, for example when I am contracted to take photographs that include children. This processing is necessary for the performance of a contract and I require my customer to have already established a lawful basis, such as legitimate interests or consent.

 

12. What are your rights?

Remember, you're in control of your personal information.

You have the right to:

  • request a copy of your information
  • to ask me to correct information that's wrong, to delete it or to request that I only use it for certain purposes
  • to change your mind, and ask me to stop using your information. 

Bear in mind, sometimes I might not be able to help. For example, if there is compelling reason for me to continue processing it.

 

13. How do I use cookies?

You'll find details of how I use little text files called "cookies" in my Cookie Policy.

 

14. How will you find out about changes to this policy?

I occasionally update this policy. If I make important changes, like how I use your personal information, I'll update this page. I may also contact you by email.

If you don't agree to the changes, then you can always stop using my services, requesting me to delete your data and stop giving me any more personal information. I'd be sorry to see you go.

 

15. How can you contact me?

If you need to contact me about this policy you can contact me by any of the methods that I publish. For example by email - hello@thomasfroemmel.com.