GDPR Terms and Conditions - rose-conran

Rosemarie Conran  Privacy Policy



Rosemarie Conran  Photography is a Photographer  specialising in  Portrait Photography.

Rosemarie Conran   Photography runs a photographic studio business,

Which   operates  from The Old Post Studio The Street Horringer Bury St Edmunds Suffolk IP29 5RU   


The website privacy policy describes how  Rosemarie Conran   Photography  makes use of the information you give them  when using the websites and its marketing. If you are asked for personal information when using our marketing services or website, it will only be used in the ways described in our privacy policy.

Please note that our privacy policy is updated from time to time. The latest version is always published on this page.


The website privacy policy was updated on April 2nd 2018.



What do we use your personal information for.

We gather and use certain information about individuals to provide products and services and to allow certain marketing functions as well as online sales on this website. We collect personal data from marketing and site registration. Any data you provide can only be used with your permission. We will maintain our records for online, telephone and offline contact with you.


When running competitions

We usually ask for the following when we are running competitions, or anything related to our online or at event marketing. Name, Address, Contact Email, Contact Telephone number, demographic postcode and at times preferences. Other information in relation to specific competitions may be asked for like children’s ages and pet breed. When buying a gift, we will also ask for the recipient’s name and address. Any other information requested will be in connection with your enquiry, any special offers and as stated competitions.


Your Choices

You may opt out of receiving information from us by email or post at any stage by either contacting us or by clicking unsubscribe on our emails. If you would like to speak to someone directly please call 07928602415 or email is at roseconranphoto@gmail.com 


Data Processing

We process data at   The Old Post Post Studio The Street Horringer Bury St Edmunds Suffolk IP29 5RU.  We apply UK data protection law to our processing.


Data Security


We take appropriate steps to maintain our contact information in a secure format and environment to prevent unauthorised usage.  Any staff that I engage  will be bound by contract to the   GDPR policy.


Use of your information

Your personal details that you have provided are only used by us to improve our services as well as to contact you in relation to your enquiry, special offers, online order processing, online and event registration.


Cookie Policy

How we use Cookies: Cookies are very small text files that are stored on your computer when you visit some websites. We use cookies to help identify your computer, so we can tailor your user experience, track shopping basket contents and remember where you are in the order process. You can disable any cookies already stored on your computer, but these may stop our website from functioning properly. The following is strictly necessary in the operation of our website.


This Website Will:

Remember what is in your shopping basket Remember where you are in the order process Remember that you are logged in and that your session is secure. You need to be logged in to complete an order. The following are not Strictly Necessary but are required to provide you with the best user experience and to tell us which pages you find most interesting (anonymously).


Functional Cookies

This Website Will: Track the pages you visit via Google Analytics Allow you to share pages with social networks such as Facebook (If available) Allow you to share pages via Add This (If available) To view the ‘Add This’ Privacy Policy or to opt out of any online behavioural advertising, please visit Add This and click on the ‘Opt Out’ button. This website will not: Share any personal information with third parties.


Support

If you experience any queries or problems, please contact support who will aim to respond to your query within 24 hours. If during office hours support may be contacted call  07928602415 or email  rose.conran@gmail.com


Controlling cookies

When you first visit our website, you will be asked for your consent to use cookies. You can choose not to accept cookies but please be aware that services you request may not be available. If you delete your cookies or clear your cache, you may be asked to give your consent again. This is because a cookie is usually used to remember the choice you made the first time. If you wish to revoke your consent to the use of cookies on this website you can either delete the cookies in your browser’s memory or clear your cache. If you wish to prevent cookies being set before you visit this website, or most other websites, you can set your browser to block cookies. Most browsers allow you to do this in their settings. If you would like to know more about cookies, please visit the ICO website Links on website If you follow links to other sites from our website your data will be subject to the privacy policies of those sites. You should refer to their privacy policies before providing your data.


Controlling information

When you fill a form or provide your details on our website, you will see one or more tick boxes allowing you to opt-in to receive marketing communications from us by email, telephone, text message or post. If you have agreed that we can use your information for marketing purposes, you can change your mind easily, via one of these methods: Send us an email to roseconranphoto@gmail.com  or   Write to us Post Studio The Street Horringer Bury St Edmunds Suffolk IP29 5RU  We will never lease, distribute or sell your personal information to third parties unless the law requires us to.


Any personal information

we hold about you is stored and processed under our data protection policy, in line with the Data Protection Act 1998. Security We will always hold your information securely.


To prevent unauthorised disclosure or access to your information,

we have implemented strong, physical and electronic security safeguards. We also follow stringent procedures to ensure we work with all personal data in line with the Data Protection Act 1998.


Policy changes Changes may be necessary

to this policy to reflect legal or data processing developments. If we change the policy, we will provide information on our website so that users can review the changes. Any significantly different use of your data will be communicated to you and you will be able to choose whether you agree to the new use.


Contact us

If you have any questions about this policy, please email roseconranphoto@gmail.com  or write to:   Rosemarie Conran Photography at Post Studio The Street Horringer Bury St Edmunds Suffolk IP29 5RU  Tel + 44 (0)7928602415

Last Updated May 2018



How we use data


 Workflow

• For all consumer shows Lead data should be entered up within 72 hours after the show, with a system of cross reference in case of errors.

  Original data should be stored for 60 days and then destroyed with the only information then will be a digital list.

Within 7 days of show end the data should be entered into a MailChimp database and an email of congratulations sent to recipient.

This will also flag any errors with email addresses

. Data should then be  acted on within 7 -14 days with any problems or feedback straight away.


After the show

Data Capture Workflow

• Data - Photographer

• Data Capture at Show to secure storage cabinet

• Data Cards to Excel doc with password with cross reference number within 72 hours of show ending.

• Data Excel into MailChimp

• eblast via Mailchimp to consumer – congratulations on winning and what happens next

• Email Bounce Check • Card Data Corrections

• Corrected data new eblast

• Email of acceptance to us from photographer.

• 60 days after the cards are shredded

• 120 days after data to photographers a questionnaire goes out to the consumer.

• If there are multiple cards for the same household only one session will be awarded and only one lead per household will be charged for.

• collecting data via give away. And the rights to show transport in a machine-readable form and without charge. https://ico.org.uk/for-the-public your full rights can be accessed here


•Your Choices

• You may opt out of receiving information from us by email or post at any stage by either contacting us or by clicking unsubscribe on our emails.

If you would like to speak to someone directly please call 07928602415

or email is at roseconranphoto@gmail.com 


• Data Processing

• We process data at  The Old Post Studio The Street Horringer Bury St Edmunds Suffolk IP29 5RU .

How we use data

Xperience Data Capture Workflow

• For all consumer shows Lead data should be entered up within 72 hours after the show, with a system of cross reference in case of errors by photographers.

Original data should be stored for 60 days and then destroyed with the only information then will be a digital list.

Within 7 days of show end the data should be entered into a MailChimp database and an email of congratulations sent to recipient.

This will also flag any errors with email addresses and can be corrected.

Data should then be acted on within 7 -14 days with any problems or feedback straight away.

After the show how we use the data


Xperience Data Capture Workflow • Data - Photographer

• Data Capture at Show to secure storage cabinet

• Data Cards to Excel doc with password with cross reference number within 72 hours of show ending.

• Data Excel into MailChimp

• eblast via Mailchimp to consumer – congratulations on winning and what happens next

• Email Bounce Check • Card Data Corrections

• Corrected data new eblast

• Email of acceptance to us from photographer.

• 60 days after the cards are shredded

• 120 days after data to photographers a questionnaire goes out to the consumer.

• If there are multiple cards for the same household only one session will be awarded and only one lead per household will be charged for.

• collecting data via give away

. And the rights to show transport in a machine-readable form and without charge. https://ico.org.uk/for-the-public your full rights can be accessed here •

Your Choices


• You may opt out of receiving information from us by email or post at any stage by either contacting us or by clicking unsubscribe on our emails. If you would like to speak to someone directly please call 07928602415 or email is at roseconranphoto@gmail.com

Data Processing

• We process data at The Old Post Studio The Street Horringer Bury St Edmunds Suffolk IP29 5RU • We apply UK data protection law to our processing.

• Data Security


• We take appropriate steps to maintain our contact information in a secure format and environment to prevent unauthorised usage.

Any staff  will be  bound by contract to our GDPR policy.

Use of your information


• Your personal details that you have provided are only used by us to improve our services as well as to contact you in relation to your enquiry, special offers, online order processing, online and event registration. Also, to contact you in connection with our own business development, market research and gifting service. Subject opt out requests Personal data that we capture during marketing promotions and competitions is always subject to an opt in policy to comply with 2018 GDPR legislation

but if you wish to have your details deleted either

: Click the opt Out at the bottom of any of our email marketing Or Email the studio on roseconranphoto@gmail.com  and ask to have all your personal information deleted. This is guaranteed to be done within 30 days to meet 2018 GDPR legislation. Your personal details are available to see at any time via a request which we try and complete in 7-14 days unless extreme circumstances, other wise guaranteed to be within 30 days to comply with GDPR legislation. To request deletion of all your data please allow 14-21 days. With a maximum time limit of 30 days. In extreme circumstances we may have to refuse to show you, or delete your personal information, this may be for legal reasons. However we will inform you of this immediately as well as inform you of your rights to complain to the Supervisory Authority and to a judicial remedy.


Data Policy & Processing

At  RCP we only hold and store personal data for 2 reasons:

1. Customers/Clients/Members – this is for record purposes only and for customer contact in connection with a purchase and or membership. Your details are stored onsite using specialist programs that are password protected software as well as each computer being password locked and have up to date virus software in case of attack from cyber crime. All personal data is password protected and encrypted. We never share or sell your personal data in anyway with 3rd party companies.

2. Marketing – To send you offers and information on services to ensure you always get the best offers and information along with our free portrait gifts.

All our email marketing is conducted via a special emarketing service that has data security and offers a simple 1 click way for you to opt out of our newsletters and email marketing.

Personal data


that we capture during marketing promotions and competitions is always subject to an opt in policy to comply with 2018 GDPR legislation. Your personal details are available to see at any time via a request which we try and complete in 7-14 days unless extreme circumstances, other wise guaranteed to be within 30 days to comply with GDPR legislation. To request deletion of all your data please allow 14-21 days. With a maximum time limit of 30 days.

Data Policy & Processing At RCP we only hold and store personal data for 2 reasons:

1. Customers/Clients/Members – this is for record purposes only and for customer contact in connection with a purchase and or membership. Your details are stored onsite using specialist programs that are password protected software as well as each computer being password locked and have up to date virus software in case of attack from cyber crime. All personal data is password protected and encrypted. We never share or sell your personal data in anyway with 3rd party companies.

2. Marketing – To send you offers and information on services to ensure you always get the best offers and information along with our free portrait gifts. All our email marketing is conducted via a special emarketing service that has data security and offers a simple 1 click way for you to opt out of our newsletters and email marketing. Personal data that we capture during marketing promotions and competitions is always subject to an opt in policy to comply with 2018 GDPR legislation.

Your personal details are available to see at any time


via a request which we try and complete in 7-14 days unless extreme circumstances, other wise guaranteed to be within 30 days to comply with GDPR legislation.

To request deletion of all your data please allow 14-21 days. With a maximum time limit of 30 days. consent RCP- Consent

New Data Workflow


• Adding new data from a free web based download product or website competition with compliance box.

• After importing the new data into the marketing list:

• No email is required as the opt-in was at source with the offer. •

If in any doubt do an opt-in email  RCP- Consent

• Adding new data to a new marketing group• After importing new data to a new group in the marketing list: Send a simple opt in email to ensure they give permission to be on the marketing list.

• Adding new data from a meeting or telephone call   / competition that does not have a compliance tick box.

• After importing new data to a new group in the marketing list:

• Send a simple opt in email to ensure they give permission to be on it •

Terms & Conditions


• We want you to know exactly how our service works and why we need you registration details. Please state that you have read and agreed to these terms and conditions before you continue.

• Link to terms and conditions – Email marketing you can giv    something free if possible and as a thankyou •

Contact Permission


• We would love to send you special offers and our latest information from Rosemarie Conran Photography by email, Post or SMS, phone and other electronic means. We’ll always treat your personal details with the utmost care and will never sell them to other companies for marketing purposes.

• Yes please, id like to hear about offers and services.

• No Thanks, I don’t want to hear about offers and services.

• If any promotions or competitions are run and used to capture personal data of children from the age of 13-18 a plain English privacy policy will be used (see RCP Child Privacy Document).


Child privacy Document


• Children under the age of 13 will be asked for parental consent on any data capture, entry or competition.

• Use of images for marketing, display or Competition will still require a parent or guardian to sign on behalf of a under 18 child.

• A photograph that features a children 13-18 as the main subject will be asked as well to give consent via signature.

RCP  Child Privacy Document 2018

• Please be aware that any personal information that you give on this form will or may be used to contact you in connection with this offer or for marketing from Rosemarie Conran Photography .

• Your personal information will never be passed on to any other company or person.

• Do not tick this permission box if you do not want us to contact you in the future.

• If you tick this box you will receive an email from us in connection with this offer but you can unsubscribe from any of our emails with a simple click.

• Only reply if you are fully aware of the contents.

• If in doubt please contact a parent or guardian who is over the age of 18.

• We apply UK data protection law to our processing.

• Data Security

• We take appropriate steps to maintain our contact information in a secure format and environment to prevent unauthorised usage

. Our staff are bound by contract to our GDPR policy.

• Use of your information

• Your personal details that you have provided are only used by us to improve our services as well as to contact you in relation to your enquiry, special offers, online order processing, online and event registration.

Also, to contact you in connection with our own business development, market research and gifting service. Subject opt out requests Personal data that we capture during marketing promotions and competitions is always subject to an opt in policy to comply with 2018 GDPR legislation but if you wish to have your details deleted either: Click the opt Out at the bottom of any of our email marketing Or Email the studio on roseconranphoto@gmail.com   and ask to have all your personal information deleted.

This is guaranteed to be done within 30 days to meet 2018 GDPR legislation.

Your personal details are available to see at any time via a request which we try and complete in 7-14 days unless extreme circumstances, other wise guaranteed to be within 30 days to comply with GDPR legislation.

To request deletion of all your data please allow 14-21 days.

With a maximum time limit of 30 days. In extreme circumstances we may have to refuse to show you, or delete your personal information, this may be for legal reasons.

However we will inform you of this immediately as well as inform you of your rights to complain to the Supervisory Authority and to a judicial remedy.

Data Policy & Processing At RCP  we only hold and store personal data for 2 reasons:

1. Customers/Clients/Members – this is for record purposes only and for customer contact in connection with a purchase and or membership. Your details are stored onsite using specialist programs that are password protected software as well as each computer being password locked and have up to date virus software in case of attack from cyber crime. All personal data is password protected and encrypted. We never share or sell your personal data in anyway with 3rd party companies.

2. Marketing – To send you offers and information on services to ensure you always get the best offers and information along with our free portrait gifts. All our email marketing is conducted via a special emarketing service that has data security and offers a simple 1 click way for you to opt out of our newsletters and email marketing.

Personal data that we capture during marketing promotions and competitions is always subject to an opt in policy to comply with 2018 GDPR legislation.

Your personal details are available to see at any time via a request which we try and complete in 7-14 days unless extreme circumstances, other wise guaranteed to be within 30 days to comply with GDPR legislation.

To request deletion of all your data please allow 14-21 days. With a maximum time limit of 30 days. Data Policy & Processing At the MCG we only hold and store personal data for 2 reasons:

1. Customers/Clients/Members – this is for record purposes only and for customer contact in connection with a purchase and or membership. Your details are stored onsite using specialist programs that are password protected software as well as each computer being password locked and have up to date virus software in case of attack from cyber crime. All personal data is password protected and encrypted. We never share or sell your personal data in anyway with 3rd party companies.

2. Marketing – To send you offers and information on services to ensure you always get the best offers and information along with our free portrait gifts. All our email marketing is conducted via a special emarketing service that has data security and offers a simple 1 click way for you to opt out of our newsletters and email marketing.

Personal data that we capture during marketing promotions and competitions is always subject to an opt in policy to comply with 2018 GDPR legislation.

Your personal details are available to see at any time via a request which we try and complete in 7-14 days unless extreme circumstances, other wise guaranteed to be within 30 days to comply with GDPR legislation. To request deletion of all your data please allow 14-21 days. With a maximum time limit of 30 days.

Consent RCP 

- Consent

• Adding new data from a free web based download product or website competition with compliance box.

• After importing the new data into the marketing list:

• No email is required as the opt-in was at source with the offer.

• If in any doubt do an opt-in email RCP -

Consent • Adding new data to a new marketing group• After importing new data to a new group in the marketing list: Send a simple opt in email to ensure they give permission to be on the marketing list.

• Adding new data from a webinar / competition that does not have a compliance tick box.

• After importing new data to a new group in the marketing list:

• Send a simple opt in email to ensure they give permission to be on

• Terms & Conditions

• We want you to know exactly how our service works and why we need you registration details.

Please state that you have read and agreed to these terms and conditions before you continue.

•Terms and conditions – Email marketing page Give  them  something free if possible and as a thankyou

• Contact Permission

• We would love to send you special offers and our latest information from  Rosemarie Conran   Photography by email, Post or SMS, phone and other electronic means.

We’ll always treat your personal details with the utmost care and will never sell them to other companies for marketing purposes. •

Yes please, id like to hear about offers and services.

• No Thanks, I don’t want to hear about offers and services.

• If any promotions or competitions are run and used to capture personal data of children from the age of 13-18 a plain English privacy policy will be used (see  RCP Child Privacy Document).

• Children under the age of 13 will be asked for parental consent on any data capture, entry or competition.

• Use of images for marketing, display or Competition will still require a parent or guardian to sign on behalf of a under 18 child.

• A photograph that features a children 13-18 as the main subject will be asked as well to give consent via signature. 

RCP Child Privacy Document 2018

• Please be aware that any personal information that you give on this form will or may be used to contact you in connection with this offer or for marketing from the The Old Post Studio The Street Horringer Bury St Edmunds Suffolk IP29 5RU  Rosemarie   Conran Photography Group. • Your personal information will never be passed on to any other company or person.

• Do not tick this permission box if you do not want us to contact you in the future.

• If you tick this box you will receive an email from us in connection with this offer but you can unsubscribe from any of our emails with a simple click.

• Only reply if you are fully aware of the contents. • If in doubt please contact a parent or guardian who is over the age of 18.


Data Breach


• In the case of a Data Breach the problem will be instantly reported to the DPO who will conduct a full investigation and report the breach to the ICO, UK data protection supervisory authority immediately.

• Data log, Data Usage & Data Storage will be assessed immediately.

• All employees will be questioned in connection with the said data breach, and the results will be logged and reacted on accordingly.

• Passwords on all data files will instantly be changed.

• Mailchimp and/or other companies where data is stored will be contacted and asked for a report on security breach, if relevant.

•Clients   will be informed and instructed to change all login data immediately unless other wise advised.

• Minimising the impact of the data breach will be assessed on a hourly basis and after 24 hours every 12 hours until resolved.

• Any one effected will be contacted and informed of the problem if necessary.

• The company insurance company will be contacted with a logged reference.

• If necessary the Police will be informed and a crime number will be logged in the data breach report.

• All documents that contain credit card and personal data will have passwords changed and

• Minimising the impact of the data breach will be assessed on a hourly basis and after 24 hours every 12 hours until resolved.

• Any one effected will be contacted and informed of the problem if necessary.

• The company insurance company will be contacted with a logged reference.

• If necessary the Police will be informed and a crime number will be logged in the data breach report.

• All documents that contain credit card and personal data will have passwords changed and any one effected will be contacted and advised of the breach with advice to change passwords and or contact their credit card company immediately. Data Protection By Design And Protection Impact Assessment

• As RCP  do not utilise or develop any new technology, or use data for rd profiling customers and do not use 3 party data in anyway the only threat comes from miss use, stolen date, criminal employee activity or via a hack on Mailchimp.

 Data protection officer •Rosemarie Conran   is the designated Data Protection Officer. • All employees will report all data transfer, data updates and data storage and record it on the DPO’s Log. • The DPO is responsible for all procedures but any employees using or adjusting data must comply to the procedure and have to take responsibility to their actions when handling data.

Powered by SmugMug Log In