Mick Armson is the controller for all your personal information processed on this website and all other personal data collected at exhibitions, events and any other occasion where you share your personal data with me.
All of the personal information I process is provided by you directly to me for the following reasons:
- You have bought a print from me.
- You have made an enquiry.
- You wish to attend, or have attended, an event or exhibition.
- You subscribe to my newsletter.
I also receive personal information indirectly, in the following scenario:
- You have purchased one of my prints or artworks from a gallery and they have provided me with your personal information
The type of personal data that I process
I only process enough data in order to fulfil your order or to send you my newsletter. This will normally be your name, address, email address and phone number. I do not process any financial information such as bank account or credit card details these are all handled via PayPal or third party payment providers.
The purpose and legal basis for processing your data
Under Privacy Laws I must have a lawful basis for processing your data for different purposes. In most instances I will be processing your data under a contract to provide you with the print/artwork you have purchased. Once this process is concluded I’ll then process your data (basically keeping sales records) under a legal obligation for tax and accounting purposes.
I do process data under consent where you have signed up to receive my newsletter or notifications of private views and exhibitions. This information could have been provided by you via this website or at an event. You can withdraw your consent at any time by either clicking the unsubscribe link on any email you receive or contacting me via email or the contact form.
How long I keep your data
Your personal data is only retained to fulfil the purposes stated above. Under tax and accounting law I am required to keep details of sales, which may include personal data on invoices and other documentation, for a maximum of 7 years.
When you have provided your personal information under consent, I will retain this until consent is withdrawn which you are entitled to do at any time.
Who your data is shared with
I will not share your information with any third parties for the purposes of direct marketing.
However I use data processors who are third parties who provide services to me. For example I use Mailchimp to store your email address and send you my newsletter if you have subscribed. For more information about how your data is processed at Mailchimp please refer to their privacy notice.
Where I provide links to websites of other organisations, this privacy notice does not cover how that organisation processes personal information. I encourage you to read the privacy notices on the other websites you visit.
Your right of access
You have the right to ask me for a copy of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information I process. You can read more about this here.
Your right to rectification
You have the right to ask me to rectify information you think is inaccurate. You also have the right to ask me to complete information you think is incomplete. This right always applies. You can read more about this here.
Your right to erasure
You have the right to ask us to erase your personal information in certain circumstances. You can read more about this here.
Your right to restriction of processing
You have the right to ask us to restrict the processing of your information in certain circumstances. You can read more about this here.
Your right to object to processing
You have the right to object to processing if I am able to process your data in our legitimate interests. You can read more about this here.
Your right to data portability
This only applies to information you have given to me. You have the right to ask that I transfer the information you gave me from one organisation to another, or give it to you. The right only applies if I am processing information based on your consent or under, or in talks about entering into a contract and the processing is automated. You can read more about this here.
You are not required to pay any charge for exercising your rights. I have one month to respond to you.
If you remain dissatisfied, you can make a complaint about the way I process your personal information to the UK supervisory authority. Please follow this link to see how to do that.
I keep our privacy notice under regular review to make sure it is up to date and accurate.