This policy sets out the responsibilities of Butterwood regarding the collection, use and disclosure of personal information. Please read this policy carefully. It may be updated from time to time, so please you check back regularly to review any changes.
1. Policy objectives
- Process personal information lawfully, and share information about the processing in a concise, transparent, intelligible and easily accessible form.
- Collect personal data for a specific legitimate purpose and not process it any way that is not aligned to that purpose.
- Limit personal information to the purpose for which it is being processed.
- Take every reasonable step to keep acquired personal information accurate and up to date.
- Only keep personal data for as long as is necessary for the purpose for which it is being processed.
- Process personal information in a manner that protects the security of the personal data.
2. Delivering our objectives
The ‘controller’ of your personal information (for the purposes of data protection law) will be Butterwood.
People we collect information from
We collect personal information from individuals who are our prospective and current customers (‘customers’) and visitors to our websites.
Information we collect automatically
When you visit our websites, our server automatically collects certain browser or device generated information, including but not limited to your:
- IP address;
- visit eg date, time and duration;
- browser type;
- operating system; and
- page visits.
Information you provide
If you are a customer, you may voluntarily provide us with personal information (normally limited to basic information, such as your name and contact details) by:
- corresponding with Butterwood
- attending galleries, shows and other events featuring Butterwood products;
- working with Butterwood on projects.
In using our website, you may voluntarily provide personal information to us in the following ways:
- by completing a contact form;
- by corresponding with us by phone, e-mail or otherwise using the contact details provided on our websites.
Typically, the personal information you give us will include your name, address, e-mail address, phone number, and any personal details required to answer your query.
Use of personal information
In the majority of cases, use or processing of your personal information will be justified on the basis that;
- you have consented to the processing (for example, where you proactively contact us for information);
- it is necessary for us to comply with a legal requirement (for example, in relation to disclosures we are required to make to tax authorities); or
- it is in our legitimate interests, subject to your interests and fundamental rights. For example, we have a legitimate commercial interest in building good relations with our customers by contacting our customers from time to time.
We use the personal information we collect to correspond with website users to resolve their queries and provide services they request.
We will also respond to requests for information where required by to do so by law, or when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, request from a regulator or any other legal process served on us.
A cookie is a small file that can be placed on your device's hard drive or on a website server.
Our websites use Google Analytics, a web analytics service provided by Google, Inc. (‘Google).
Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google.
We take the security of the information we collect seriously. We use data storage and security techniques to protect your personal information from unauthorised access, improper use or disclosure, unauthorised modification or unlawful destruction or accidental loss.
However, in relation to our websites, it is important to remember that no website can be 100% secure and we cannot be held responsible for unauthorised or unintended access that is beyond our control.
Retention of your information
Generally, we only keep personal information for as long as required to fulfil the purposes for which it was collected. We may keep it longer in some circumstances, for instance, where we’re required to do so to meet legal, tax and accounting requirements. Or so that we have an accurate record of your dealings with us in the event of any complaints or challenges.
If your personal information is no longer required, we will securely delete it.
Our website may contain links to third party sites. Since we do not control, and are not responsible for the privacy practices of those websites, we encourage you to review them. This policy applies solely to personal information collected by our website.
Under EU data protection laws, you may have some or all of the following rights in respect of your personal information to:
- get a copy of your personal information together with information about how that personal information is processed;
- rectify inaccurate personal information (including the right to complete incomplete personal information) ;
- erase your personal information (in limited circumstances, where it is no longer necessary in relation to the purposes for which it was collected or processed);
- restrict processing of your personal information where:
- the accuracy of the personal information is contested;
- the processing is unlawful but you object to the erasure of the personal information;
- we no longer require the personal information but it is still required for the establishment, exercise or defense of a legal claim;
- challenge processing which we have justified on the basis of a legitimate interest (as opposed to your consent, or to perform a contract with you);
- prevent us from sending you direct marketing;
- withdraw your consent to our processing of your personal information (where that processing is based on your consent);
- object to decisions which are based solely on automated processing or profiling; and
- obtain, or see a copy of the appropriate safeguards under which your personal information is transferred to a third country or international organisation.
In addition to the above, you have the right to lodge a complaint with your local supervisory authority for data protection.
In relation to all of these rights, please contact us using the details below. We may request proof of identity and we reserve the right to charge a fee where permitted by law, for instance if your request is unfounded or excessive. We aim to respond to your requests within all applicable timeframes.
3. Contact information
If you have any questions in relation to this policy or you wish to exercise any of your rights, please contact Butterwood.