Privacy Policy

I treat your privacy as seriously as I treat my own. If there’s something unclear in here, send me an email about it and I’ll get back to you as quickly as I can. You can reach me at satdeep.grewal@gmail.com.

Who am I?

I provide graphic design and fine art services to private and commercial customers under the operating name of Satdeep Grewal Arts.

In this privacy policy, I tell you how I use personal information that I have about you as a business, whether that’s been collected through the website, working with clients or suppliers or in any other way. Personal information is anything that identifies you personally like your name, your contact details, photograph etc.

This privacy notice is issued on behalf of Satdeep Grewal Arts, the name encompassing all of my freelance creative business activities, so when “I”, “me” or “my” are mentioned in this privacy notice, it is referring to the relevant business Satdeep Grewal Arts who is responsible for processing your data. Satdeep Grewal Arts is the controller and is responsible for this website.

Quick Guide to Contents

• What personal information do I collect about you?
• How do I use your personal information?
• How long do I keep your personal information?
• Who do I share your personal information with?
• What happens if you do not provide me with the information I request?
• Do I make automated decisions concerning you?
• Do I transfer your personal information outside the EEA?
• What are your rights?
• How do I contact you?
• How do you contact me?

What personal information do I collect about you?

I only collect your information in the following ways:

Information you give me

These are the details that you have shared with me, including personal data which allows me to identify you as an individual customer, so that I can provide you with my services. For example, if you’ve filled in a form on my website or sent an email to my email address. This may also be where you’re applying for a job and have sent me your CV. Alternatively, it could be information you provide to me for work I am doing on behalf of one of my clients, for example when setting up an event for them or where I am assisting them with their customer enquiries. The personal data I hold may include the following:

• Information about your computer and about your visits to and use of this website, such as your IP address, geographical location, browser type, referral source, length of visit and number of page views.
• Information relating to any transactions carried out between you and me on or in relation to this website, including information relating to any purchases you make of my goods or services.
• Information that you provide to me for the purpose of registering with my services.
• Information that you provide to me for the purpose of subscribing to my website services, email notifications and/or newsletters.
• Any other information that you choose to send to me.
• Personal data will be collected from you or passed to me by a referral business. However, some personal data may, where lawful to do so, or with your consent, be collected by me from third parties.

Please note that you are under no obligation to provide me with your personal data, but not providing certain data could prevent me from providing you services.

Information I collect automatically

I use cookies on this website to collect personal data on you. This will only be used to understand better how you use my website. A cookie is a text file sent by a web server to a web browser and stored by the browser. The text file is then sent back to the server each time the browser requests a page from the server. This enables the web server to identify and track the web browser.

My website may send a cookie, which may be stored by your browser on your computer’s hard drive. I may use the information I obtain from the cookie in the administration of this website, to improve the website’s usability and for marketing purposes. I may also use that information to recognise your computer when you visit my website, and to personalise the website for you. My advertisers may also send you cookies.

Most browsers allow you to refuse to accept cookies. However, this may have a negative impact upon your use of many websites, including this one.

I use Google Analytics to analyse the use of this website. Google Analytics generates statistical and other information about website use by means of cookies which are stored on users’ computers. The information generated relating to this website is used to create reports about the use of the website. Google will store this information. Google’s privacy policy is available at: http://www.google.com/privacypolicy.html

Information I receive from third parties or other sources

When working with a client, they may provide me with information about you – perhaps you are an employee of my client or are a contact that they want me to get in touch with.

How do I use your personal information?

I will only use your personal data when the law allows me to. Most commonly, I will use your personal data in the below circumstances.

• Where I need to perform the contract I am about to enter into or have entered into with you.
• Where it is necessary for my legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where I need to comply with a legal or regulatory obligation.
• Administer the website.
• Improve your browsing experience by personalising the website.
• Send you general non-marketing, commercial communications.
  Provide third parties with statistical information about our users, but this information will not be used to identify any individual user.
• Deal with enquiries and complaints made by or about you relating to the website
  I will not without your express consent provide your personal information to any third parties for the purpose of direct marketing.
• To the purchaser (or prospective purchaser) of any business or asset which we are (or are contemplating) selling
• Except as provided in this privacy policy, we will not provide your information to third parties.

This list is not exhaustive and may be updated from time to time. I do not ‘trade’ in your personal data and will not sell or rent your details. Generally I do not rely on consent as a legal basis for processing your personal data other than in relation to sending direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting me.

Information you give me

I may use this information as Satdeep Grewal Arts or on behalf of my clients:

• to carry out my obligations arising from any contract entered into between you and me, and to provide you with the information, products and services that you request from me; such as prize fulfilment, competition entry validation, or event management.
  to ensure that content from my site is presented in the most effective manner for you and for your computer.
• to understand issues connected to customer feedback.
• to consider you for the jobs that you have applied for.

Information I receive from third parties or other sources

I may use this information as Satdeep Grewal Arts or on behalf of my clients:

• to administer my site and for internal operations, including research, statistical and survey purposes.
• to improve my site and ensure that content is presented in the most effective manner.
• to allow you to participate in interactive features of my service, when you choose to do so.
• to keep a track of journalists, media contacts and partner agencies.

Information I receive from other sources.

I may combine this information with information you give me and information I collect about you and use this information for the purposes set out above (depending on the types of information I receive).

Information Security

I will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information. I will store all the personal information you provide on secure servers. All electronic transactions you make to or receive from me will be encrypted using SSL technology. Of course, data transmission over the Internet is inherently insecure, and I cannot guarantee the security of data sent over the Internet.

How long do I keep your personal information?

I will only retain your personal data for as long as necessary to fulfil the purposes I collected it for, including satisfying any legal, accounting, or reporting requirements. By law I have to keep basic information about my customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers for tax purposes. I will only hold personal data for as long as is necessary to service a client relationship or other type of contract. If you apply for one of my employment opportunities and are unsuccessful, I will delete your details after six months.

To determine the appropriate retention period for personal data, I consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which I process your personal data and whether I can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances I may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case I may use this information indefinitely without further notice to you.

There are instances where you can ask me to delete your data: see The Right to Erasure below for further information.

Who do I share your personal information with?

I may share your personal information with colleagues working on the same project as agreed in advance with my client (but only with those that need access) or with certain third parties. I will only do this for a purpose set out in “How do I use your personal information?” above.

I may share your personal data with the following types of third party:

Service providers acting as processors, for example, printers and those who provide IT and system administration services.
Professional advisers acting as processors or joint controllers including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.
Regulators and other authorities acting as processors or joint controllers based in the United Kingdom or other relevant jurisdictions who require reporting of processing activities in certain circumstances.
I store personal information using several different IT service providers, however I only work with vetted suppliers that have the right security processes in place to protect this data.

I require all third parties to respect the security of your personal data and to treat it in accordance with the law. I do not allow third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with my instructions.

What happens if you don’t provide me with your personal information? Or what happens when you ask me to stop processing your information?

Where I need to collect personal data by law, or under the terms of a contract I have with you and you fail to provide that data when requested, I may not be able to perform the contract we have or am trying to enter into with you (for example, to provide you with goods or services). In this case, I may have to cancel a product or service you have with me but I will notify you if this is the case at the time.

Do I make automated decisions concerning you?

No, I do not carry out automated decision making about you.

Do I use Cookies to collect personal data on you?

I do, but only to understand better how you use my website.
Do I transfer your personal information outside the EEA?
I have multiple clients spread across the globe, and there are instances where I need to share personal information with clients and colleagues in locations outside of the EEA as part of a project.

I may also transfer your personal data outside of the EEA as a result of storing your information within my technology services (for example, Google Drive).

Whenever I do transfer your personal data out of the EEA, I will ensure a similar degree of protection is afforded to it by agreeing a protocol with you to give your personal data similar protection to what it has in Europe.

What are your rights?

By law, you have nine important rights when it comes to your personal information. To get more details about these rights, talk to the data protection regulator in your country.

Rights

What does this mean?
1. The right to object to processing: you have the right to object to certain types of processing, including processing for direct marketing.
2. The right to be informed: you have the right to be provided with clear, transparent and easily understandable information about how I use your information and your rights.
3. The right of access: you have the right to access your information (if I’m processing it).
This is so you’re aware of what I have and can check that I’m using your information in accordance with data protection law.
4. The right to rectification: you’re entitled to correct your information if it’s inaccurate or incomplete.
5. The right to erasure: this is also known as ‘the right to be forgotten’. What it means is that you can tell me to delete all the personal information I have on you (where there’s no compelling reason for me to keep using it). This isn’t a general right to erasure; there are exceptions. But if you ask me to delete, I’ll do it.
6. The right to restrict processing: you have rights to ‘block’ or suppress further use of your information. When processing is restricted, I can still store your information, but I may not use it any more. I keep a list of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future.
7. The right to data portability: you have rights to obtain and reuse your personal information for your own purposes across different services. For example, you can move, copy or transfer your information easily between my tech services and theirs safely and securely, without affecting its usability.
8. The right to lodge a complaint: you have the right to lodge a complaint about the way I handle or process your personal information with your national data protection regulator.
9. The right to withdraw consent: if you have given your consent to anything I do with your personal information, you have the right to withdraw your consent at any time. (Although if you do, it doesn’t mean that anything I’ve done with your personal information with your consent before that point was unlawful).

This includes your right to withdraw consent to me using your personal information for marketing purposes.

I usually act on requests and provide information free of charge. However, I may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, I may refuse to comply with your request in these circumstances.

I may need to request specific information from you to help confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. I may also contact you to ask you for further information in relation to your request to speed up my response.

I try to respond to all legitimate requests within one month. Occasionally it may take me longer than a month if your request is particularly complex or you have made a number of requests. In this case, I will notify you and keep you updated.

Third Party Websites

The website contains links to other websites. I am not responsible for the privacy policies or practices of third party websites.

Do I get involved in direct marketing?

Satdeep Grewal Arts has regular communications that are sent out to clients who have given explicit consent to do so. I may also ask for optional customer service feedback.

Policy Amendments

I may update this privacy policy from time-to-time to reflect changes in law, by posting a new version on this website. You should check this page occasionally to ensure you are happy with any changes. I may also notify you of changes to our privacy policy by email.

How will I contact you?

I may contact you by phone, email or social media. If you prefer a particular means of contact, please let me know.

How can you contact me?

If you have any questions you can contact me at:
satdeep.grewal@gmail.com