top of page

Privacy Notice

​

 

Confetti Wedding Illustration is committed to respecting and protecting your privacy. This privacy notice sets out how we collect, use and protect your personal information.

 

When you provide information about yourself, or we obtain information about you from other organisations or those that work on our behalf by which you can be identified, it will only be used in accordance with this privacy notice and current domestic legislation – the United Kingdom General Data Protection Regulation (UK-GDPR), the Data Protection Act 2018 (DPA) and the Privacy and Electronic Communications Regulations (PECR).

 

This privacy notice explains:

 

• Who we are

 

• What information we may collect about you

 

• How we may use this information

 

• How we ensure that what we do with your information is lawful

 

• How this information is stored

 

• Whether we disclose this information to anyone else

 

• Your rights regarding the information we hold about you

 

We may change this privacy notice from time to time to ensure that it is up-to-date and in line with current legislation. It was last reviewed in February 2024.

 

Who we are

 

Confetti Wedding Illustration is a sole proprietorship live wedding illustration business.

​

Our registered address is: 3 Woolner Brook, Wigton, CA7 9EG

 

For the purpose of the United Kingdom General Data Protection Regulation, the data controller is Confetti Wedding Illustration, (we or us).

 

What we collect

 

We may collect the following information:

 

• name

 

• contact information including telephone number, postal address, email address

​

• demographic information such as areas of interest e.g. events or activities you are interested in

​

• personal contact preferences

 

• how you heard about us

 

What we do with the information we gather (our purposes)

 

Our purposes are:

​

1. Providing our services

​

2. Internal record keeping

​

3. Managing our relationship with you

​

4. Improving our products and services

​

5. Sending you information about new products, services, special offers, or other information which we think you may find of interest

 

How we ensure that what we do with your information is lawful

 

Confetti Wedding Illustration can only collect and use your personal information if we have a lawful basis to do so. The bases we use to legitimise our processing are:

 

1. Providing our services

 

  • The processing is necessary for the performance of a contract to which the data subject is a party, or for the taking of steps at the request of the data subject with a view to entering into a contract

 

  • The data subject has given consent to the processing

 

2. Internal record keeping

 

  • The processing is necessary for compliance with any legal obligations to which the data controller is subject, other than an obligation imposed by contract

 

3. Managing our relationship with you

 

  • The processing is necessary for the purposes of legitimate interests pursued by the data controller or by the third party or parties to whom the data are disclosed, except where the processing is unwarranted in any particular case by reason of prejudice to the rights and freedoms or legitimate interests of the data subject

 

  • The processing is necessary in order to get in touch with you in the way that you prefer, take note of any comments you may make and also keep details of the date and time of any communications.

 

4. Improving our products and services

 

  • The processing is necessary for the purposes of legitimate interests pursued by the data controller or by the third party or parties to whom the data are disclosed, except where the processing is unwarranted in any particular case by reason of prejudice to the rights and freedoms or legitimate interests of the data subject We may contact you for monitoring or evaluation purposes. You may ask us for a new or different service.

 

5. Sending you information about new products, services, special offers, or other information which we think you may find interesting

 

  • The data subject has given consent to the processing

 

Special Category Data

 

This includes information about race, ethnic origin, politics, religion, trade union membership, health, sex life and sexual orientation. These types of personal data merit specific protection. This is because use of this data could create significant risks to the individual’s fundamental rights and freedoms. The presumption is that this type of data needs to be treated with greater care because collecting and using it is more likely to interfere with these fundamental rights or open someone up to discrimination.

 

Where we process Special Category Data we do so because:

 

  • the data subject has given explicit consent to the processing of the personal data for one or more specified purposes, or

 

  • processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or the data subject in the field of employment and social security and social protection law

 

Where we have collected the personal information based on your consent for either ordinary or special category personal data you have the right to withdraw your consent and we will then stop processing it. This will not affect the lawfulness of processing based on consent before its withdrawal.

 

If withdrawal of consent may affect the way we can deliver our service/s to you we will tell you at the time.

 

When we are contracted to do work for another organisation

 

When Confetti Wedding Illustration acts under instruction from another organisation Confetti Wedding Illustration is the data processor and the other organisation the data controller. There will be a contract in place which will tell us what to do with your information. If any of your personal data is being used for a purpose that is not controlled by the CVS you will be given a different privacy notice which will tell you all about it.

 

Your rights are unlikely to be affected if your information is used in this way.

 

How long we keep it

 

We review the retention periods for personal information on a regular basis. We are legally required to hold some types of information to fulfil our statutory obligations (e.g. financial and contractual obligations and records). We will hold the information as long as is necessary for the relevant activity or as long as set out in any contract you hold with us.

 

For details on how long we keep personal data, you can email us at: lizzy@confettiweddingillustration.com and request to see our Document Retention Policy.

 

How your information is stored

 

In order to prevent unauthorised access or disclosure we have effective physical, electronic and managerial procedures to safeguard and secure the information we hold about you including online collection of data.

 

We keep information about you safe and secure by using Google* Workspace and Google* Drive which is password protected has two-step verification, is encrypted by the cloud-based encryption service Boxcryptor* and accessed only by myself.

 

Paper copies are kept securely in locked cabinets.

 

If you have provided information on paper, it may be transferred to an electronic database.

 

If we collect and retain information for payment, audit or employment purposes, it is stored securely. We do not store debit/credit card details and destroy or obscure these as soon as your payment is processed.

 

All information you provide to us is stored on secure servers provided through Wix*. Any payment transactions will be encrypted.

 

Who do we give it to

 

Confetti Wedding Illustration does not share your personal information with any third parties, other than those listed below.

 

Third parties who provide an element of a service for us are classed as Data Processors.

 

When we share your personal data with these third parties, or where they collect and use it on our behalf, we ensure that they only use the personal information for the purpose of performing those specific services. Any company whose services we use in this way is required to treat your data as carefully as we do and use it only in the course of the work they are doing for us.

 

We currently use:

 

Name of company                                                      The service they perform for us

​

Google*                                                                    Cloud-based storage service that enables users to store and access files  

 

Boxcryptor*                                                                Encryption service for Cloud-based storage                                                                  

Wix*                                                                         Web hosting and maintenance

 

MailChimp*                                                               Customer Relationship Management Integration and marketing 

​

Zoom*                                                                       Enabling online meetings

 

Facebook*                                                                 Social networking

​

Instagram*                                                                 Social networking

​

 

* Please be aware that these organisations are data controllers in their own right and we encourage you to read their privacy notices.

 

Details of their privacy notices can be found at:

​

https://policies.google.com/privacy?hl=en-US and https://www.google.com/drive/terms-of-service/

​

https://www.boxcryptor.com/privacy-policy

​

https://www.wix.com/about/privacy

​

https://mailchimp.com/legal/

​

https://explore.zoom.us/en/privacy/

 

https://www.facebook.com/about/privacy

​

https://about.instagram.com/safety/privacy

 

​

We will never sell or distribute your personal information to any other third parties or make it public unless we have a legal obligation to do so, for example to HM Revenue & Customs (HMRC).

 

Some of the data that we collect from you may be transferred to, and stored at, a destination outside the United Kingdom (UK).

 

Domestic legislation allows for the free flow of personal data from the UK into the EU. The European Commission has given the UK an assessment of adequacy and this allows for continued free flow of personal data from the EU into the UK.

 

For transfers of personal data from the UK to a destination that is outside the EU we ensure that a safeguard is in place that is recognised by the representative supervisory of the United Kingdom. This is the Information Commissioner's Office (ICO) and the safeguard is to use of one of their standard contractual clauses. You can find out more about these safeguards on the ICO website.

 

Confetti Wedding Illustration Website

 

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

 

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk.

 

Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

 

Cookies

 

We may gather information regarding your computer for our services. This collection of data is used for statistical analysis about our website for our own use. The only personal data that we will collect is your IP address. All other information will not identify who you are, but rather be mathematical data about our visitors and their use on our site.

 

Cookies, which are small pieces of information sent by an organisation to your computer and stored on your hard drive to allow that website to recognise you when you visit, may be used to gather this general internet data.

 

When used, cookies are downloaded to your computer only when accepted by you and they gather information on browsing actions and patterns and do not identify you as an individual. This helps us improve our site and services to you.

 

All computers can block cookies by activating proper browser settings.

 

There is a place to enable you to decline cookies when you visit our site. Please note; if you decline cookies you may experience limited access to certain areas of our site.

 

Links to other websites

 

Our website may contain links to and from other websites including some of our partners, members, affiliates and other websites of interest. However, please note that we do not have any control over that other website and therefore cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites.

 

They are not governed by this privacy notice and we do not accept any responsibility or liability for these sites and would advise that you check the privacy statements before submitting any personal data to these websites.

 

Your rights

 

Access:

 

You have the right to request a copy of the information we hold about you. This is called a Subject Access Request and can be submitted at any time. We will respond within one month of receiving this request.

 

A request may be verbal or in writing. Ask us if you would like more details about this.

 

Rectification:

 

We want to make sure that the personal information we hold about you is accurate but if you believe that any information we are holding on you may be incorrect or incomplete, let us know in writing. We will promptly correct any information found to be incorrect.

 

Erasure:

 

You can ask us to delete all personal information that we may hold about you. You may sometimes hear this called the ‘right to be forgotten’. We will only decline to delete your personal information if we still need it and have a lawful basis for its use that is not consent or legitimate interests.

 

Restriction:

 

You can limit the way we use your personal data if you are concerned about the accuracy of the data or how it is being used. If necessary, you can also stop us deleting your data. Together, these opportunities are known as your ‘right to restriction’.

 

A request can be verbal or in writing. We recommend you follow up any verbal request in writing because this will allow you to explain your concern, give evidence and state your desired solution. It will also provide clear proof of your actions if you decide to challenge our initial response.

 

Data Portability:

 

This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another, or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into, a contract and the processing is automated.

 

Objection:

 

You have the right to object to us processing (using) your personal data at any time. This effectively means that you can stop or prevent us from using your data. However this right only applies in certain circumstances. You can object to processing when we are using your data for your legitimate interests or for direct marketing purposes. At any time you may contact us at the address below to exercise any of your rights. To better safeguard your information, we will take reasonable steps to verify your identity before granting access or making corrections to your information. We do not make any decisions by automated processes or create profiles of our data subjects. If you wish to opt out of any communication/update your preferences please simply follow the instructions at the end of every communication from us or contact us (as below).

 

How to complain

 

If you wish to complain about the way we handle your personal information please contact us in the first instance.

 

If, when we have investigated and responded, you are still unhappy, please contact the Information Commissioner’s Office on 0303 123 1113, email: dpo@ico.org.uk or visit: www.ico.org.uk

 

Contact us

 

To update your information and/or to make changes to your preferences at any time, please contact us at lizzy@confettiweddingillustration.com or call 078300 42003.

 

Questions, comments and requests regarding this privacy notice are welcomed and should be addressed to Confetti Wedding Illustration:

 

• email lizzy@confettiweddingillustration or

 

• write to us at 3 Woolner Brook, Wigton, CA7 9EG

bottom of page