Privacy Policy
Below is our privacy policy, maintaining our customers' privacy is of utmost importance.
Here at Picture The Stars©, we will not under any circumstance share your information without your consent. Consent will always be required if sharing your information was possible, sharing your information is not possible within Picture the Stars outside the scope of the Payment Processor (Stripe).
Stripe© which is an independent secure payment gateway maintains Picture The Stars© high levels of privacy and security and ensures your information remains private to the exclusive process of purchasing your product.
Your private information including email address may be used for remarketing purposes to inform the customer of future deals and promotional codes for Picture The Stars© only, and if the customer has agreed to this (by signing up for our newsletter).
The customer has the right to decline this or in the future remove themselves from the newsletter with no penalty whatsoever.
Personal data such as names, email addresses, addresses and telephone numbers are all subject to the national General Data Protection Regulation (GDPR) compliance, In accordance to this Picture The Stars© ensure the general public and customers that we declare data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled with GDPR.
Picture The Stars© has implemented and maintains a high level of security online, this ensure complete security for our customers privacy and personal details, however interest based establishments may be subject to unforeseen and new internet hacks which we cannot proactively plan against, in this instance however unlikely we may be at risk of a security breach. For this reason absolute protection cannot be guaranteed.
Customers have the right to maintain business with Picture The Stars© with little to no risk to their private information.
Definitions
The European legislation which is GDPR (General Data Protection Regulation) ensures the content within this document is legible and can be accessed by whomever requires it. Below is our definitions to ensure the wording of this document is clear and concise.
- Personal Data means any information which directly identifies you such as Name(s) Addressee(s), Email(s) and Telephone numbers. This may be directly or indirectly, any information to which can ascertain your identity is classed as personal data.
- Picture The Stars© may be represented with both upper and lower case(s), Picture the Stars in this document also means establishment and company if not stated otherwise. This Document is written solely for the purposes of Picture the stars.
- Processing of personal data means the information will be gathered via the website page and sent to another secure location, this process is mainly automated to ensure complete security. The process of processing the personal data includes collection, storage, recording, organisation, adaptation, retrieval, consultation, use. disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
- Customer is an individual who has used the website and made a purchase. A non customer and a customer retain the full rights listed in this privacy policy.
- Person is any individual, this could be a customer or not. A person may also be acknowledged as a Individual.
- Data Subject is a way to identify the individual in which the data is subject to.
- Restrictions are the right to refuse the processing of a data subjects personal data. The right to refuse the processing of an individual is to the discretion of the main controller. Any person restricted from doing business with Picture The Stars© is still given the full rights of this document and their privacy is ensured.
- Main Controller is someone who is employed by Picture The Stars© to ensure the privacy policy is maintained and enforced.
- Consent is freely given by an individual for the processing of their personal data in accordance with the specific, informed and unambiguous indication of the data subject’s wishes. A statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to the individual.
- Third Party can be an individual, company or other legal body. A third party such as the payment processor is an independent company which has no links to Picture The Stars©. Picture the Stars takes no responsibility for the workings of these third parties, however these third parties are authorised and ensure the processing of personal information.
Cookies
Cookies are used on the webpage to help improve the experience for the user for a more user friendly experience, features such as quicker load times and ensuring your shopping cart is saved and maintained all work with the internet cookie. A cookie in regards to the internet is a tiny text file saved on your web browser, this text file has a unique identifier called a cookie ID.
A cookie ID can ascertain an individuals internet browser.
Picture The Stars© May use this cookie ID to help improve your experience using our website only.
We also set a session identifier cookie for fraud detection and website security purposes. This is a strictly necessary cookie that does not require consent and does not track you for advertising purposes. It helps us protect our customers and detect suspicious activity on the website.
Data Collection
Data is collected via this website using automated triggers upon the customer proceeding through the buying process.
This general data and information are stored in server log files. The following may be collected via:
– The browser types and versions used
– The operating system used by the accessing system
– The date and time of access to the Internet site
– An Internet protocol address (IP address)
– The Internet service provider of the accessing system
Information collected is using primarily to ensure the contents of the website is delivered correctly and directly to the specific device or medium. Secondarily the information is used for optimising the content of the website including advertisements.
This information may be used for prosecution in the event of a cyber attack, the information may be used to provide law enforcement authorities with the information necessary for criminal prosecution.
Picture The Stars© will process the information anonymously with the intent to collect statistics for future advertisements with no specific customer nor their personal data being used solely.
Newsletter Subscriptions
This website doesn’t not offer any paid subscriptions nor will it ever charge you a monthly charge.
A freely available newsletter can be opted in to, this newsletter subscription holds no responsibility and can be cancelled instantly, anytime without any penalty.
The newsletter looks to inform its customers and individuals of the promotional advertisements for Picture The Stars© and any third parties associated with Picture The Stars©
The newsletter subscription hold private information such as the individuals name and emails address this will not under any circumstance be sold for monetary gain or otherwise. The individuals email address and name will be secure an remain private under this privacy policy.
The newsletter subscription may contain a tracking pixel, this is used to ascertain the success or failure of the email. This tracking pixel has the ability to inform Picture The Stars© when an email has been opened.
Website Storage
Data acquired from the data subject will be processed and stored as soon as possible, this is done via automatic triggers, in some instances for example the instance for personalise the item, in this instance the personal information will be used to personalise the item only.
Personal data will be stored off site in a secure web log. This information will only be used to identify individuals and orders for purposes of locating, amending, reordering or reshipping an existing order with an existing customer.
Picture The Stars© will not disclose the information of an existing order unless the individual can correctly verify the order and shipping address.
Routine erasure is subject to the European legislator or other legislators in laws or regulations to which the controller is subject to.
The Rights of the Individuals (Data Subjects)
Individuals have the rights granted in accordance with the European legislator.
- RIGHT OF CONFIRMATION
Individuals have the right to confirm or deny the right of the main controller to process the individuals personal data, if the individual at any time would like to avail themselves from the processing of their personal data they can by contacting the main controller. - RIGHTS OF ACCESS
Individuals have the right to access their personal data held by Picture The Stars© at any time, giving adequate time for the information to be supplied.
The rights granted by the European legislation is as follows;
– the purpose of processing
– the recipients or categories of recipients, in relation to the data subject
– the category of personal data
– If possible, the period in which the personal data will be stored
– the existence of the right to lodge a complaint
– if possible, personal data in which it is not collected and in the which area it was or wasn’t collected - RIGHT TO RECTIFY
Individuals have the right, in accordance with the European legislation to rectify amend and change existing private information. Furthermore if the individual so wishes their personal information can remain or be amended to be incomplete. - RIGHT TO BE FORGOTTEN
The individual has the right to be forgotten, this means their personal information in its entirety is deleted and forgotten. This is in line with the legislation of the European union.
The individual may invoke the right to be forgotten when one of the following applies
– the personal data is no longer necessary for the purpose of the customers action, such as a purchase of a product.
– the personal data has been unlawfully processed
– the data subject withdraws consent to which the processing is based according to point A of Article 6(1) of the GDPR, or point A of Article 9(2) of the GDPR, and where there is no other legal ground for the processing.
– the data subject objects to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.
– the personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
– the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR. - RIGHT OF RESTRICTION
Each individual in accordance with the European legislator has the right of restriction of processing this is in the event of the following;
– the personal data accuracy is in question
– the processing is unlawful
– the data subject has objected to processing to Article 21(1) of the GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject. - RIGHT OF PORTABILITY
Each individual, as granted by the European legislation shall be granted the right of having their personal data awarded to them, within an acceptable time period and in a format in which it is commonly readable. In accordance with article 6(1), 9(2) and in full compliance with the articles of the GDPR.
The individual pursuing their right of portability shall in no case adversely effect another individuals rights, without the individuals express consent, furthermore a pursuing individual will have the right to have their personal data processed and transferred if the prior point is not feasibly in question. - RIGHT TO OBJECT
Each individual shall have the right given to them via this document and the European legislation to have the right to object. The article 6(1) of the GDPR expressly states that the individual has the right to object.
In the event of an individual exercising their right to object, Picture The Stars will accept their right if however there is the possibility of the following then the right to object may be put into contention, If legitimate grounds which directly or indirectly affect another rights and freedoms.
Every individual has the right to object to stop future advertising and promotional activities, furthermore direct marketing falls into your right to object.
Any activity used for statistics and for the interest of scientific and historical data may be objected as the right of the individual and the data subject.
For an individual to start the process of objection then it can be started by contacting any member of staff at Picture The Stars, and the process will be started, with confirmation from the employee. - RIGHT TO NON-PROFILING
Every individual will be given the same experience regardless of there race, gender, age or any other specific feature. All individuals in accordance with the European legislation.
The non profiling right spans all sectors of the business including specific advertising, for those used in advertising profiling including age may be used partially to improve the effectiveness of the website, however no profiling will be used to discriminate to reduce the experience from one individual to another.
All individuals have the right to object to any profiling. - RIGHT TO WITHDRAW CONSENT
All individuals have the right to refuse consent, furthermore this option will be clear to the individual and an option for this to be opted out or in will be available to them.
Every individual has the right to exercise there freedoms and rights and Picture The Stars will if lawful complete the individuals requirements.
If consent has previously been granted it is known the individual gives express consent, if the individual does not withdraw consent, in the event of consent being withdrawn it is presumed the individual expressly declines consent for the entire future, if they do not expressly state otherwise.
Data Provisions with Instagram
Instagram is used with a live plugin on the website (Picture The Stars©). Instagram is an independent social network used on the website to improve the user friendly experience and express advertising content in the provision of selling our personalised prints and products.
Social network’s are used as a place on the internet as a way to communicate with other individuals. Picture The Stars is not responsible for any interaction or data processed via this application.
Data Provisions with Google
Google is used on the website (Picture The Stars©) in a few different ways.
One of which is for Google analytics, a way for the websites visitors to be analysed based on which specific keyword they used. Keyword means the word they used on google to enter the site.
Google is used in the effect of google adwords, this is used separate from the website but as a way to direct website traffic to the website.
Google is an independent company and Picture The Stars take no responsibility to the data processed via there platform.
To improve the accuracy of our advertising performance measurement, Picture The Stars© may share a one-way encrypted (SHA-256 hashed) version of your email address with Google after you complete a purchase. This encrypted version cannot be reversed to recover the original email address and is used solely to attribute your purchase to its originating Google advertisement, a process commonly known as Enhanced Conversions.
This specific processing is carried out under the lawful basis of legitimate interest as defined in GDPR Article 6(1)(f). Picture The Stars© has a legitimate interest in measuring the effectiveness of its advertising spend, and the use of a hashed email address represents a low-risk, privacy-preserving method of achieving that purpose. A formal Legitimate Interest Assessment supporting this processing is maintained internally and available on request.
Individuals retain the full Right to Object to this processing at any time. To exercise this right, contact support@picturethestars.co.uk and your record will be excluded from future advertising attribution uploads.
Legitimate Controller Interests
When processing data as per the legal compliance of GDPR Article 6(1). any controller has legitimate reasons to carry out the business of the company and for the interests of the employees and shareholders.
Accepted Compliance
Without express concern or withdrawal of consent it is presumed the individual as per using this website agrees and understands the information listed in this privacy policy and the terms of this website.