This policy applies to information we collect when you choose to use our website and also to personal information which we process further to supplying you with our services or buying your goods or services. We take your privacy very seriously and we ask that you read this privacy policy carefully as it contains important information on the personal information we collect about you; what we do with your information and who your information might be shared with.

Who are we?

This website is owned by Canvasman Limited and our registered office is at Unit 5, Sapper Jordan Rossi Park, Baildon, Shipley BD17 7AX, United Kingdom. For the purposes of the General Data Protection Regulation (‘GDPR’) Canvasman Limited (‘we’ or ‘us’) are a ‘data controller’ where we control the purposes for which we process your personal information and otherwise we are the data processor. We will take all appropriate steps to ensure compliance with the GDPR and all of the legislation relating to the protection of your personal data (“Legislation”). Any questions about our data protection policy or how we handle your personal data should be addressed to the email address given in the ‘How to Contact Us’ section below.

What information do we collect?

Personal information provided by you We collect personal information about you (such as your name, email and delivery address and telephone number), when you make an enquiry (including via our online form), register with us or purchase products or services from us or supply products or services to us.

Personal information provided by third parties If you give us information on behalf of someone else, you confirm that either: 1) the other person has a contractual relationship with you and knows that you will be transferring their personal data to us for specific purposes; and/or 2) s/he has appointed you to act on his/her behalf and has agreed that you can: • give consent on his/her behalf for the processing of his/her personal data; and • receive on his/her behalf any data protection notices.

Personal information we transfer to third parties

We may send information about you to other parties for example brand design agencies, contractors, associates and service providers to help us provide our services to you. We do not share your personal information with any third party for marketing purposes. We will share your personal data if required by law. We only share your personal data with third parties who also comply with the Legislation.

Use of cookies

A cookie is a small text file that is placed onto your computer (or another electronic device) when you use our website. We use cookies on our website, in particular Google Analytics. Google Analytics collect your IP address, browser, OS, device etc. We do not use it for anything else. Where applicable, this website uses a cookie control system allowing you on your first visit to the website to allow or disallow the use of cookies on your computer/device. This complies with recent legislation requirements for websites to obtain explicit consent from users. For example, we may monitor how many times you visit the website, which pages you go to, traffic data, location data and the originating domain name of a user’s internet service provider, to improve the user’s experience whilst visiting the website, and better understand how you use it. This information helps us to build a profile of our users. Some of this data will be aggregated or statistical, which means that we will not be able to identify you individually.

Third-Party Cookies: These are cookies set on your machine by external websites whose services are used on this site. Cookies of this type are the sharing buttons across the site that allow visitors to share content onto social networks. Cookies are currently set by LinkedIn, Twitter, Facebook, Google+ and Pinterest. In order to implement these buttons, and connect them to the relevant social networks and external sites, there are scripts from domains outside of our website. You should be aware that these sites are likely to be collecting information about what you are doing all around the internet, including on this website. You should check the respective policies of each of these sites to see how exactly they use your information and to find out how to opt out or delete such information. You can set your browser not to accept cookies and the websites below tell you how to remove cookies from your browser. However, some of our website features may not function as a result. For further information on cookies generally, visit www.aboutcookies.org or www.allaboutcookies.org.

How will we use the information about you?

We only process information about you so that we can: • provide the services and/or goods requested • identify you and manage any accounts you hold with us • notify you of any changes to our services or products that may affect you • improve our services • detect and prevent fraud We do not send your data outside the EEA.

Social Media

Any social media posts or comments are subject to the terms of the relevant social media platform. We are not responsible for this kind of sharing and encourage you to view the privacy policy and terms of use for each platform. Any comments you make on these social media platforms, in general, must not be offensive, insulting or defamatory. You are responsible for ensuring that any comments you make comply with any relevant policy on acceptable use of those services.

Keeping your data secure

Our staff are bound by obligations of confidentiality and trained in the protection of personal data. We will take all reasonable steps to comply with the Legislation and use the appropriate technical and organisational measures necessary to safeguard your personal data. We only share your personal data with third parties who also comply with the Legislation. While we will use all reasonable efforts to safeguard your personal data, you acknowledge that the use of the internet is not entirely secure and for this reason, we cannot guarantee the security or integrity of any personal data that is transferred from you or to you by email. If you have any particular concerns about your information, please contact us (see ‘How can you contact us?’ below). If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses. Retention Periods We store your personal data on secure servers for the following periods in relation to the following types of personal data: • customer phone number, email address, postal address and design for 20 years from the date on which you become a client of ours; • invoices and other financial information is kept for 7 years from creation for HMRC requirements and our legitimate business interest; • supplier contact information for 2 years from our last contact; or until you ask us to destroy it or return it to you in each case unless the law requires us to store the data for a longer period.

What rights do you have?

The GDPR provides the following rights for individuals whose personal data is processed: 1. The right to be informed 2. The right of access 3. The right to rectification 4. The right to erasure 5. The right to restrict processing 6. The right to data portability 7. The right to object to processing 8. Rights in relation to automated decision making and profiling (We do not carry out automated decision making and profiling) If you wish to exercise any of these rights please contact us (as set out below) and provide us with details of your request and identification. Right to lodge a complaint with the Supervisory Authority If you have any concerns or complaints about how we use your personal data we hope you will alert us to these directly (see the contact information below). You are also entitled to complain to the Information Commissioners Office (ICO) which is the supervisory authority in the UK. Their contact details and the procedure can be found at www.ico.gov.uk

Closed Circuit Television (CCTV)

Our premises are equipped with CCTV for crime prevention purposes. The CCTV footage is kept for a period of 28 days and will only be shared with the appropriate authorities if we are legally obliged to do so

How to contact us

If you have any questions about this privacy policy or the information we hold about you or if you wish to contact us about any other matter, please send an email to info@canvasman.co.uk.

Changes to the privacy policy

We may change this privacy policy from time to time. You should check this policy occasionally to ensure you are aware of the most recent version that will apply each time you access this website or purchase our services or products.

Canvasman Limited May 2018