PRIVACY POLICY
# General Data Protection Regulation (GDPR) Compliance Policy
## Introduction
Welcome to Art Lewy/ artlewyphotos.com. We are committed to protecting and respecting your privacy in compliance with the General Data Protection Regulation (GDPR). This policy outlines your rights under the GDPR, the types of personal data we collect, how we use it, and the measures we take to protect it. This policy applies to all our services, including school photography.
## Data Controller
Artlewyphotos.com is the data controller responsible for the processing of your personal data.
​
## Data Collection
We collect and process the following types of personal data:
1. **Personal Information**: This includes names, addresses, email addresses, phone numbers, and other information that you provide to us.
2. **Photographs**: Images of individuals captured during photo sessions or uploaded to our site.
3. **Payment Information**: Information required to process payments, such as credit card numbers and billing addresses.
4. **Usage Data**: Information about how you use our website, including your IP address, browser type, pages visited, and the time and date of your visit.
5. **Cookies**: Small files stored on your device that help us improve your experience on our website.
## Legal Basis for Processing
We process your personal data based on the following legal grounds:
1. **Consent**: You have given clear consent for us to process your personal data for a specific purpose.
2. **Contract**: Processing is necessary for the performance of a contract with you or to take steps to enter into a contract.
3. **Legal Obligation**: Processing is necessary for compliance with a legal obligation.
4. **Legitimate Interests**: Processing is necessary for our legitimate interests, except where such interests are overridden by your rights and interests.
## Data Use
We use your personal data for the following purposes:
1. **Providing Services**: To deliver the services you have requested, including school photography.
2. **Order Processing**: To process and fulfill orders, including payment processing.
3. **Communication**: To contact you with updates, newsletters, promotional materials, and other information that may be of interest to you.
4. **Website Improvement**: To analyze and improve our website and services.
## Data Sharing
We do not sell, trade, or otherwise transfer your personal data to outside parties except as described below:
1. **Service Providers**: We may share your data with third-party service providers who assist us in operating our website, conducting our business, or serving our users, as long as those parties agree to keep this information confidential.
2. **Business Transfers**: In the event of a merger, acquisition, or sale of all or a portion of our assets, your data may be transferred to the acquiring entity.
3. **Legal Requirements**: We may disclose your data if required to do so by law or in response to valid requests by public authorities.
## Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.
## Your Rights
Under the GDPR, you have the following rights regarding your personal data:
1. **Right to Access**: You have the right to request access to the personal data we hold about you.
2. **Right to Rectification**: You have the right to request that we correct any inaccuracies in your personal data.
3. **Right to Erasure**: You have the right to request that we delete your personal data, subject to certain exceptions.
4. **Right to Restriction of Processing**: You have the right to request that we restrict the processing of your personal data in certain circumstances.
5. **Right to Data Portability**: You have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format.
6. **Right to Object**: You have the right to object to the processing of your personal data in certain circumstances.
7. **Right to Withdraw Consent**: If you have given us consent to process your personal data, you have the right to withdraw your consent at any time.
## Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations.
## Cookies
We use cookies to enhance your experience on our website. Cookies are small files that a site or its service provider transfers to your computer's hard drive through your web browser that enables the site's or service provider's systems to recognize your browser and capture and remember certain information. You can choose to disable cookies through your browser settings, but this may affect the functionality of our website.
## Changes to This Policy
We may update this GDPR Compliance Policy from time to time. We will notify you of any changes by posting the new policy on our website. You are advised to review this policy periodically for any changes.
## Contact Us
If you have any questions about this GDPR Compliance Policy or wish to exercise your rights, please contact us at:
Art Lewy/ artlewyphotos.com
By using our website and services, you consent to our GDPR Compliance Policy.