As a limited company Rochester Studios undertakes to manage personal data in accordance with the Data Protection Act 1998 (DPA) and the General Data Protection Regulations (GDPR) April 2016. The purpose of this policy is to inform you, the customer, about what information is collected, how we manage the information and how we protect your information and privacy.
We comply with the data protection principles which state that personal data needs to be:
processed fairly and lawfully;
processed only for specified and lawful purposes;
adequate, relevant and not excessive;
accurate, and where necessary,
kept up to date;
not kept longer than necessary;
processed in accordance with the individual’s rights under the Act;
not transferred to non-European Economic Area countries without adequate protection.
This policy contains information about:
Who is collecting data;
What data is being collected;
What is the legal basis for processing the data;
Who the data is shared with;
How the information will be used;
How long the data will be stored for;
Your rights as a subject;
How to raise a complaint or query about the data.
Who is collecting data
When entering into any business relationship with Rochester Studios Ltd personal information may be collected through a number of methods.
Rochester Studios Ltd may collect and store email correspondence from clients or prospective clients.
Online Portfolio Services
Social Media Services
Rochester Studios Ltd uses social media services to engage with clients and prospective clients. As a user of such a service your data may be collected and processed in accordance with their own privacy policies but for the purpose of this policy it should be noted that online messages are captured. The studio has a social media presence on Facebook, Instagram and Twitter.
What data is being collected
In order for Rochester Studios Ltd to conduct business the type of information we may regularly collect includes:
First and last name or alias names
Contact telephone numbers
Under some circumstances we may also collect:
Date of birth
Bank account details
Where we collect personal data, we will not collect or use it unless it is lawful and necessary for us to do so.
We will only collect address details if we need to visit that address to carry out a service or have arranged to collect you.
Date of birth information may be required to verify a model’s age for legal reasons.
Bank account details may be collected if we are required to make a payment to you.
Strictly necessary - These cookies are essential to ensure that you can navigate and use all features of the site. This includes browsing pages, remembering your preferences, saving favourite images, secure registration, placing orders, and other essential features. These cookies do not gather any information about you that could be used for marketing or remembering where you’ve been on the Internet.
Performance - These cookies allow the website to deliver a better browsing experience. They collect information about your website usage, such as the pages you visit, or if you experience any errors. These cookies do not collect any information that could identify you – all the information collected is anonymous and is only used to help us improve how the website works.
Functionality - Functionality cookies are used to provide services, or to remember settings to improve your visit. We use them for remembering settings you’ve applied, showing you when you’re logged in to the website, saving your favourite images, and so on.
Targeting -Targeting cookies are linked to services provided by third parties. These include ‘Like’ buttons and ‘Share’ buttons used by services like Facebook, Google+, Twitter, Pinterest, and others. The third party provides these services in return for recognising that you have visited our website.
The website offers the chance to accept using these cookies when visited.
What is the legal basis for processing the data
The data needs to be collected and processed because we may be entering into a contractual agreement with you. These agreements may be:
You are hiring the studio;
You are paying for a service the studio provides;
The studio is hiring you or a service you provide;
We may process your data because you have given consent for us to notify you of events that you have expressed an interest in.
Who the data is shared with
We will not share any of your personal data, including personal social media sites, with any third-party without your express consent.
We may share your online presence to a third-party if we think you provide a relevant service. These include:
an online portfolio;
a business social media page or page you actively use to solicit business;
How the information will be used
Rochester Studios Ltd only uses the information it collects to manage bookings of the studio, models and makeup artists.
We will not use the information for email marketing campaigns or newsletters. Such information will be distributed through our online presence using our website, social media pages and online portfolio (PurplePort).
How long the data will be stored for
We retain personal information to meet our legal and regulatory requirements. Correspondence may be kept for as long as we deal with you as client in order to maintain customer service or resolve queries and complaints.
Your rights as a subject
You have the right to request any and all personal data that we may hold about you to verify it is accurate and relevant. You have the right to request we remove all personal data where we have no lawful reason to keep it.
We will address verbal and written requests for access to personal data within one month. A fee may be charged should we receive repeated requests for the same information or additional copies.
How to raise a complaint or query about the data