Sweet Paper Creations Privacy Notice
This privacy notice explains how we collect, use and store your personal data. It also gives you information about your legal rights granted under data protection laws.
Our contact details
72 Somers Road, London, E17 6RS
[email protected]
This privacy notice is dated February 2024. We may amend it at any time. The latest version will be made available on this website, and we’ll contact you if we make any significant changes to it.
Why we use your personal data, and our lawful basis
Sensitive types of personal data
We may process 'Special Category' (sensitive) data that relates to health. This information is subject to additional legal safeguards under data protection law. The legal basis which we rely on when processing this data is explicit consent. You can withdraw your consent at any time. You can do this by contacting [email protected]
Passing your information to others
We may have to share your data with other people and organisations. We require these third parties to respect the security of your data and to use it legally. Where a third-party is acting as a ‘data processor’, they’ll act solely on our instructions and will only use your information for that specific purpose.
We may share your data:
International transfers
Your personal data may be transferred to and stored in locations outside the UK and the European Economic Area (EEA). This will typically occur when we use service providers located outside of these areas, such as our website hosting company. These data transfers require us and them to follow certain rules under data protection law to ensure that your data will be adequately protected, so we’ll only transfer data to countries that have been confirmed as protecting personal data to UK or EEA standards, or where we have put contractual commitments in place which make sure the data is protected to these standards.
How long we keep your personal data
Your personal data is only kept for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any operational, legal or reporting requirements, and in order to defend our legal rights. Generally, we keep the data for 2 years from your last interaction with us and it will then be securely destroyed.
Where we process personal data for marketing purposes, we will process the data until you ask us to stop. You can do so by using the ‘unsubscribe’ link on the emails we send or by emailing [email protected]
Your rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at [email protected] if you wish to make a request.
Your right to complain to a data protection regulator
We aim to collect, use and safeguard your personal information in line with data protection laws and guidance. If you have concerns about how we’ve handled your personal data please get in touch with us at email address above.
While we hope that we can resolve your concerns, you can also complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO). You can find further information and contact details at https://ico.org.uk.
This privacy notice explains how we collect, use and store your personal data. It also gives you information about your legal rights granted under data protection laws.
Our contact details
72 Somers Road, London, E17 6RS
[email protected]
This privacy notice is dated February 2024. We may amend it at any time. The latest version will be made available on this website, and we’ll contact you if we make any significant changes to it.
Why we use your personal data, and our lawful basis
- Your personal data is used so we can provide goods and services to you. Any such processing is a contractual requirement so we can, for example, fulfil orders you place.
- It’s used to process payments and to prevent fraudulent transactions. We do this as part of our contractual obligations to you, and our legitimate interests to help protect our customers from fraud.
- We’ll respond to your queries and complaints using the contact details you provide. We do this as part of our contractual obligations to you, and our legitimate interests to provide you and other customers with the best possible service.
- Your personal data will be used if you attend any of our events, for planning and administrative purposes.
- We’ll send you electronic direct marketing by email where you’ve agreed to receive this. If you change your mind, simply click the unsubscribe link in any emails we send you or contact us at the email address above.
- With your consent we’ll use your personal data in our marketing and promotional activities, including photographs, videos, and social media activities. You can withdraw your consent at any time, and more information on how to do this is found in Section 5 of this privacy notice. Please note that although we’ll stop using your image in the future, we’ll not always be able to remove any copies which have already been published.
- When we capture photographs or videos are larger events, for example crowd scenes, we do so under the lawful basis of our legitimate interests. Signage will be in place to advise when photography or videography is occurring.
- We may use it during our accounting processes and for any regulatory or legal reporting purposes with which we must comply.
- We may create aggregated statistical data and other inferred ‘depersonalised’ information, which we use to provide and improve our services, or in support of funding applications.
Sensitive types of personal data
We may process 'Special Category' (sensitive) data that relates to health. This information is subject to additional legal safeguards under data protection law. The legal basis which we rely on when processing this data is explicit consent. You can withdraw your consent at any time. You can do this by contacting [email protected]
Passing your information to others
We may have to share your data with other people and organisations. We require these third parties to respect the security of your data and to use it legally. Where a third-party is acting as a ‘data processor’, they’ll act solely on our instructions and will only use your information for that specific purpose.
We may share your data:
- With companies that help us provide our products and services, for example companies that help us process payments, or fulfil orders and deliver our products to you.
- With IT system providers, including webhosting providers and their technical support teams, if necessary.
- Governmental bodies, regulators, law enforcement agencies, insurers, our accountants, legal advisors, or court or tribunal services where we must do so to comply with legal obligations, exercise or defend our legal rights, to prevent and detect crime or prosecute offenders, or to safeguard and protect our employees, customers or other individuals.
- If we sell or buy any business or assets, we may disclose your information to the prospective seller or buyer of such business or assets. If we’re acquired by a third party, customer information will be one of the transferred assets so they can continue to provide services to you.
International transfers
Your personal data may be transferred to and stored in locations outside the UK and the European Economic Area (EEA). This will typically occur when we use service providers located outside of these areas, such as our website hosting company. These data transfers require us and them to follow certain rules under data protection law to ensure that your data will be adequately protected, so we’ll only transfer data to countries that have been confirmed as protecting personal data to UK or EEA standards, or where we have put contractual commitments in place which make sure the data is protected to these standards.
How long we keep your personal data
Your personal data is only kept for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any operational, legal or reporting requirements, and in order to defend our legal rights. Generally, we keep the data for 2 years from your last interaction with us and it will then be securely destroyed.
Where we process personal data for marketing purposes, we will process the data until you ask us to stop. You can do so by using the ‘unsubscribe’ link on the emails we send or by emailing [email protected]
Your rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at [email protected] if you wish to make a request.
Your right to complain to a data protection regulator
We aim to collect, use and safeguard your personal information in line with data protection laws and guidance. If you have concerns about how we’ve handled your personal data please get in touch with us at email address above.
While we hope that we can resolve your concerns, you can also complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO). You can find further information and contact details at https://ico.org.uk.