Who I am
My website address is: https://www.martinsouthwood.com. I am committed to safeguarding the privacy of my website visitors and service users.
This policy applies where I am acting as a data controller with respect to the personal data of my website visitors and service users; in other words, where I determine the purposes and means of the processing of that personal data.
What personal data I collect and why I collect it
When visitors leave comments on the site I collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
If you complete a contact form I may process information contained in any enquiry you submit to me regarding goods and/or services (“enquiry data“). The enquiry data may be processed for the purposes of offering, marketing and selling relevant goods and/or services to you. The legal basis for this processing is consent.
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, I will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, I will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
How long I retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so I can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on my website (if any), I also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username).
I will retain your personal data as follows: personal data will be retained for a minimum period of one year following the date of last correspondence and/or receipt and for a maximum period of three years following last correspondence and/or receipt.
Notwithstanding the other provisions of this Section 6, I may retain your personal data where such retention is necessary for compliance with a legal obligation to which I am subject, or in order to protect your vital interests or the vital interests of another natural person.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data I hold about you, including any data you have provided to me. You can also request that I erase any personal data we hold about you. This does not include any data I am obliged to keep for administrative, legal, or security purposes.
Personal data that I process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
Where I send your data
Visitor comments may be checked through an automated spam detection service.
Your contact information
This website is owned and operated by Martin Southwood. I am the data protection officer and you can contact me using my website contact form or by email.
I may process data about your use of my website and services (“usage data“). The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is WordPress stats and Google Analytics. This usage data may be processed for the purposes of analysing the use of the website and services. The legal basis for this processing is consent OR my legitimate interests, namely monitoring and improving my website and services.
I may process information relating to transactions, including purchases of goods and services, that you enter into with me and/or through my website] (“transaction data“). The transaction data may include your contact details, your card details and the transaction details. The transaction data may be processed for the purpose of supplying the purchased goods and services and keeping proper records of those transactions. The legal basis for this processing is the performance of a contract between you and me and/or taking steps, at your request, to enter into such a contract and my legitimate interests, namely the proper administration of my website and business.
I may process information that you provide to me for the purpose of subscribing to my email notifications and/or newsletters (“notification data“). The notification data may be processed for the purposes of sending you the relevant notifications and/or newsletters. The legal basis for this processing is consent OR the performance of a contract between you and me and/or taking steps, at your request, to enter into such a contract.
I may process information contained in or relating to any communication that you send to me (“correspondence data“). The correspondence data may include the communication content and metadata associated with the communication. My website will generate the metadata associated with communications made using the website contact forms. The correspondence data may be processed for the purposes of communicating with you and record-keeping. The legal basis for this processing is my legitimate interests, namely the proper administration of my website and business and communications with users.
I may process any of your personal data identified in this policy where necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The legal basis for this processing is my legitimate interests, namely the protection and assertion of my legal rights, your legal rights and the legal rights of others.
Financial transactions relating to my website and services are handled by my payment services providers, Stripe or PayPal. I will share transaction data with my payment services providers only to the extent necessary for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds. You can find information about the payment services providers’ privacy policies and practices at https://stripe.com/privacy-shield-policy and https://www.paypal.com/uk/webapps/mpp/ua/privacy-full.