Privacy Notice
Effective from - 08/04/2020
Last updated - 12/04/2020
This Privacy Notice, along with our Cookie Notice, forms part of the overall Terms of Use of this website. You can access the counterpart documents here -
Our contact details
The eDrum Workshop
Eccleston Road
Blackpool
Lancashire
FY1 6NH
United Kingdom
E-mail: theedrumworkshop@gmail.com
Phone: (+44)7725258917
What type of information we have
Personal identifiers, contacts and characteristics -
Name
E-mail address
Billing Address
Identifier of the payment service you used (ie. PayPal or Stripe), but no payment details
How we get the information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
You used the website contact form or our e-mail address to contact us
You made a purchase on our store and the data was necessary to process that order
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
a) Your consent. You are able to remove your consent at any time. You can do this by contacting theedrumworkshop@gmail.com
b) We have a contractual obligation
What we do with the information we have
We use the information that you have given us in order to:
a) Respond to your contact form or e-mail request or correspondence
b) Keep records of sale for legal and tax purposes
How we store your information
Site hosted by Squarespace
This website is hosted on the Squarespace platform. Squarespace provides our website with the online platform that allows us to offer services to you. Your data may be stored through Squarespace’s data storage, databases and the general Squarespace applications. They store your data on secure servers behind a firewall. This data may be transferred outside of the European Economic Area in a secure manner.
To view Squarespace’s Privacy Policy and terms of service, click on the links below:
https://www.squarespace.com/privacy
http://www.squarespace.com/terms-of-service/
When contacting us via our contact form, your information is securely passed to us and stored in our Gmail inbox while the correspondence is on-going. All devices used to access this inbox (computer and smartphone of The eDrum Workshop) are password protected and are not shared with any third parties.
This information includes your e-mail address, the e-mail subject and contents, including any other information you provide to us within (such as a name). We keep this in our inbox for a maximum of 21 days from our last correspondence, in case of a need to continue communications, and then it is automatically deleted. Your information is only used for this express purpose and is not sold, exported or transferred in any way to another format, account or third party. If you would like this information removed at any time, you can e-mail theedrumworkshop@gmail.com to make a request.
If you choose to purchase a product from this website, we use third-party services for payment processing (e.g. payment processors).
We will not store or collect your payment card details, nor do we have access to them. That information is provided directly to our third-party payment processors whose use of your personal information is governed by their own Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.
The payment processors we work with are:
Stripe: Their Privacy Policy can be viewed at - https://stripe.com/us/privacy
PayPal: Their Privacy Policy can be viewed at - https://www.paypal.com/webapps/mpp/ua/privacy-full
We receive an invoice for your order which includes your name, address, e-mail address and the name of the platform through which you purchased (ie. Stripe or PayPal). We are required by law to hold a copy of this information. This is securely stored online by Squarespace (see their Privacy Policy above), which we have access to through our password protected account. We also store it electronically in an encrypted folder on a password protected computer and, if necessary, as a paper copy in a combination safe. No third party has access to these records. We must keep these records for a period of 5 years from the January 31st following your order.
For example, if you placed an order on 12/04/2020, we must store this invoice until 31/01/2026 (5 years from 31/01/2021)
After this time period elapses, our records, and by extension your information, will be deleted from our computer and the paper copy destroyed by shredding.
Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances.
Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at theedrumworkshop@gmail.com if you wish to make a request.
How to complain
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113