CCBF Privacy Policy

This privacy policy sets out how Rebecca Richardson (from hereon referred to as 'she') uses and protects any information that you give her when you use this web site,  in accordance with the General Data Protection Regulation (GDPR).

Rebecca Richardson is a “controller” which means that she is responsible for deciding how she holds and uses personal information about you and explains it clearly to you.

This notice applies to prospective, existing and former customers of Rebecca Richardson and this policy is effective from 25 May 2018.

It is important that you read this Privacy Policy, together with any other privacy information or notices she may provide on specific occasions when she is collecting or processing personal information about you, so that you are aware of how and why she is using such information.

She reserves the right to update this Privacy Notice at any time and, at that stage, she will update this web site with a new Privacy Notice, if she makes any substantial updates.

If you have any questions about this Privacy Notice, or how she handles your personal information, please contact: rebecca@candidacanbefun.co.uk

What information do we hold?

• Personal Data means any information about an individual from which that person can be identified.
• There are special categories of more sensitive personal data which require a higher level of protection, but this does not apply in this instance.
• She will need to obtain the following information to despatch your purchase: your name, address, email and telephone contact details. Such processing is necessary for performance of the contract.

Lawful basis for using personal information

She will only use your personal information when the Law allows her to. Most commonly, she will use your personal information in the following circumstances:

• Where she needs to perform the contract you have entered into with her.
• Where we need to comply with a legal obligation.
• Otherwise, with your consent.
• She will only use your personal information for the purposes for which she collected it, as outlined above and for internal record keeping.

How long will we keep your information for?

• She will only retain your personal information for as long as necessary to fulfil the purposes she collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
• To determine the appropriate retention period for personal information, where a minimum retention period is required by Law (such as retaining records for HM Revenue & Customs’ purposes) she complies with that minimum period plus up to 12 months to allow time for her to anonymise or delete information, in accordance with her internal data management processes

Your rights in connection with personal information

• Under certain circumstances, by Law, you have the right to:
  • Request access to your personal information (commonly known as a “subject access request”). This enables you to receive a copy of the personal information she holds about you and to check that she is lawfully processing it.
  • Request correction of the personal information that she holds on you. This enables you to have any incomplete or inaccurate information she holds about you corrected.
  • Request erasure of your personal information. This enables you to ask her to delete or remove personal information where there is no good reason for her continuing to process it.
  • Request the restriction of processing of your personal information. This enables you to ask her to suspend the processing of personal information about you, for example if you want her to establish its accuracy or the reason for processing it.
  • Withdraw consent in the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. Once she has received notification that you have withdrawn your consent, she will no longer process your information for the purpose or purposes you originally agreed to, unless she is required to continue to process your information in accordance with another lawful basis which has been notified to you.
• To exercise any of the above rights, please contact: rebecca@candidacenbefun.co.uk
• You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, she may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, she may refuse to comply with the request in such circumstances.
• She may need to request specific information from you to help her confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

She is committed to ensuring that your privacy is protected. Should she ask you to provide certain information by which you can be identified when using this web site then you can be assured that it will only be used in accordance with this Privacy Policy.

She is committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, she has put in place suitable physical, electronic and managerial procedures to safeguard and secure the information she collects online.

This web site may contain links to other web sites of interest. However, once you have used these links to leave our site, you should note that she does not have any control over that other web site. Therefore, she cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the web site in question.

She will not sell, distribute or lease your personal information to third parties.