Data Protection Policy
Key details:
· Rebekah Johnston Textile Art is a service and product based business owned by Rebekah johnston.
· This policy has been prepared by Rebekah Johnston.
· This policy became operational on 14 Oct 2022.
· Reviewed: 16 Jan 2025
· Next review date: 16 Jan 2026.
Introduction
We need to gather and use certain information about individuals.
These can include customers, suppliers, business contacts, and other people the organisation has a relationship with or may need to contact.
This policy describes how this personal data must be collected, handled and stored to meet the company’s data protection standards — and to comply with the law.
Why this policy exists
This data protection policy ensures that the Rebekah Johnston Textile Art:
· Complies with data protection law and follow good practice
· Protects the rights of customers and partners
· Is open about how it stores and processes individuals’ data
· Protects itself from the risks of a data breach
Data protection law
The GDPR describes how organisations — including Rebekah Johnston Textile Art — must collect, handle and store personal information.
These rules apply regardless of whether data is stored electronically, on paper or on other materials. To comply with the law, personal information must be collected and used fairly, stored safely and not disclosed unlawfully.
The GDPR is underpinned by eight important principles. These say that personal data must:
· Be processed fairly and lawfully
· Be obtained only for specific, lawful purposes
· Be adequate, relevant and not excessive
· Be accurate and kept up to date
· Not be held for any longer than necessary
· Processed in accordance with the rights of data subjects
· Be protected in appropriate ways
· Not be transferred outside the European Economic Area (EEA), unless that country or territory also ensures an adequate level of protection
People, risks and responsibilities
Policy Scope
This policy applies to:
· The head office of Rebekah Johnston Textile Art
· All branches of Rebekah Johnston Textile Art
· All staff and volunteers of Rebekah Johnston Textile Art
· All contractors, suppliers and other people working on behalf of Rebekah Johnston Textile Art
It applies to all data that the company holds relating to identifiable individuals, even if that information technically falls outside of the GDPR. This can include:
· Names of individuals
· Postal addresses
· Email addresses
· Telephone numbers
· …plus any other information relating to individuals
Data protection risks
This policy helps to protect Rebekah Johnston Textile Art from some very real data security risks, including:
· Breaches of confidentiality. For instance, information being given out inappropriately.
· Failing to offer choice. For instance, all individuals should be free to choose how the company uses data relating to them.
· Reputational damage. For instance, the company could suffer if hackers successfully gained access to sensitive data.
Responsibilities
Everyone who works for or with Rebekah Johnston Textile Art has some responsibility for ensuring data is collected, stored and handled appropriately. Whomever at Rebekah Johnston Textile Art handles personal data must ensure that it is handled and processed in line with this policy and data protection principles.
However, these people have key areas of responsibility:
Rebekah Johnston is ultimately responsible for ensuring that Rebekah Johnston Textile Art meets its legal obligations. She is responsible for:
· Keeping updated about data protection responsibilities, risks and issues.
· Reviewing all data protection procedures and related policies, in line with an agreed schedule.
· Arranging data protection training and advice for the people covered by this policy.
· Handling data protection questions from staff and anyone else covered by this policy.
· Dealing with requests from individuals to see the data Rebekah Johnston Textile Art holds about them (also called ‘subject access requests’).
· Checking and approving any contracts or agreements with third parties that may handle the company’s sensitive data.
Rebekah Johnston is responsible for IT used at Rebekah Johnston Textile Art, including computers, laptops, mobile phones and other devices that can store personal data. They will ensure
· that all systems, services and equipment used for storing data meet acceptable security standards.
· Performing regular checks and scans to ensure security hardware and software is functioning properly.
· Evaluating any third-party services the company is considering using to store or process data. For instance, cloud computing services.
They are responsible for any marketing related activities at Rebekah Johnston Textile Art. They are responsible for:
· Approving any data protection statements attached to communications such as emails and letters.
· Addressing any data protection queries from journalists or media outlets like newspapers.
· Where necessary, working with other staff to ensure marketing initiatives abide by data protection principles.
General guidelines for data usage
· The only people able to access data covered by this policy should be those who need it for their work.
· Data should not be shared informally. When access to confidential information is required, it can be request from Rebekah Johnston.
· Rebekah Johnston Textile Art will request that suppliers understand their responsibilities when handling data.
· In particular, strong passwords must be used and they should never be shared.
· Personal data should not be disclosed to unauthorised people, either within the company or externally.
· Data should be regularly reviewed and updated if it is found to be out of date. If no longer required, it should be deleted and disposed of.
Data storage
These rules describe how and where data should be safely stored. Questions about storing data safely can be directed to the IT manager or data controller. When data is stored on paper, it should be kept in a secure place where unauthorised people cannot see or access it. These guidelines also apply to data that is usually stored electronically but has been printed out for some reason:
When not required, the paper or files should be kept in a locked drawer or filing cabinet. They will make sure paper and printouts are not left where unauthorised people could see them, like on a printer. Data printouts should be shredded and disposed of securely when no longer required.
When data is stored electronically, it must be protected from unauthorised access, accidental deletion and malicious hacking attempts:
· Data should be protected by strong passwords that are changed regularly and never shared between employees.
If data is stored on removable media (like a USB or external disk), these should be kept locked away securely when not being used.
· Data should only be stored on designated drives and servers, and should only be uploaded to an approved cloud computing services.
· Servers containing personal data should be sited in a secure location, away from general office space.
· Data should be backed up frequently. Those backups should be tested regularly, in line with the company’s standard backup procedures.
· Data should never be saved directly to laptops or other mobile devices like tablets or smart phones.
All servers and computers containing data should be protected by approved security software and a firewall.
Data use
Personal data is of no value to Rebekah Johnston Textile Art unless the business can make use of it. However, it is when personal data is accessed and used that it can be at the greatest risk of loss, corruption or theft:
· When working with personal data, Rebekah Johnston will ensure the screens of their computers are always locked when left unattended.
· Personal data should not be shared informally. In particular, it should never be sent by email, as this form of communication is not secure.
· Data must be encrypted before being transferred electronically.
· Personal data should never be transferred outside of the European Economic Area.
· Only central copies of any data will accessed and updates. There must not be multiple copies of personal data.
Data accuracy
The law requires Rebekah Johnston Textile Art to take reasonable steps to ensure data is kept accurate and up to date. The more important it is that the personal data is accurate, the greater the effort Rebekah Johnston Textile Art should put into ensuring its accuracy. Rebekah Johnston takes reasonable steps to ensure it is kept as accurate and up to date as possible.
Data will be held in as few places as necessary. Rebekah Johnston should not create any unnecessary additional data sets. They should take every opportunity to ensure data is updated. For instance, by confirming a customer’s details when they call. Rebekah Johnston Textile Art will make it easy for data subjects to update the information Rebekah Johnston Textile Art holds about them. For instance, via the company website. Data should be updated as inaccuracies are discovered. For instance, if a customer can no longer be reached on their stored telephone number, it should be removed from the database. It is the Rebekah Johnston’s responsibility to ensure marketing databases are checked against industry suppression files every six months.
Subject access requests
All individuals who are the subject of personal data held by Rebekah Johnston Textile Art are entitled to:
· Ask what information the company holds about them and why.
· Ask how to gain access to it.
· Be informed how to keep it up to date.
· Be informed how the company is meeting its data protection obligations.
If an individual contacts the company requesting this information, this is called a subject access request.
Subject access requests from individuals should be made by email, using the below contact form. Enquiries sent through this form are sent directly to Rebekah Johnston.
Individuals will not charged. Rebekah Johnston will aim to provide the relevant data within 30 days.
Rebekah Johnston will always verify the identity of anyone making a subject access request before handing over any information.
Disclosing data for other reasons
In certain circumstances, the GDPR allows personal data to be disclosed to law enforcement agencies without the consent of the data subject.
Under these circumstances, Rebekah Johnston Textile Art will disclose requested data. However, the data controller will ensure the request is legitimate, seeking assistance from the board and from the company’s legal advisers where necessary.
Providing information
Rebekah Johnston Textile Art aims to ensure that individuals are aware that their data is being processed, and that they understand:
· How the data is being used
· How to exercise their rights
To these ends, the company has a privacy statement, setting out how data relating to individuals is used by the company.
Privacy Policy
Rebekah Johnston Textile Art (“Company,” “we,” or “us”) respects your privacy and is committed to protecting it through this Privacy Policy.
This Privacy Policy governs your access to and use of rebekahjohnston.co.uk, including any content, functionality and services offered on or through rebekahjohnston.co.uk (the “Website”), whether as a guest or a registered user.
When accessing the Website, the Company will learn certain information about you, both automatically and through voluntary actions you may take, during your visit. This policy applies to information we collect on the Website and in email, text, or other electronic messages between you and the Website.
Please read the Privacy Policy carefully before you start to use the Website. By using the Website or by clicking to accept or agree to the Terms of Use when this option is made available to you, you accept and agree to be bound and abide by the Privacy Policy. If you do not want to agree to the Privacy Policy, you must not access or use the Website.
Children Under The Age Of 13
Our Website is not intended for children under 13 years of age. No one under age 13 may provide any information to or on the Website. We do not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on this Website or on or through any of its features/register on the Website, make any purchases through the Website, use any of the interactive or public comment features of this Website or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use.
If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at info@rebekahjohnston.co.uk.
Information We Collect About You
When you access the Website, the Company will learn certain information about you during your visit.
Information You Provide To Us. The Website provides various places for users to provide information. We collect information that users provide by filling out forms on the Website, communicating with us via contact forms, responding to surveys, search queries on our search feature, providing comments or other feedback, and providing information when ordering a product or service via the Website.
We use information you provide to us to deliver the requested product and/or service, to improve our overall performance, and to provide you with offers, promotions, and information.
Information We Collect Through Automatic Data Collection Technology. As you navigate through our Website, we may use automatic data collection technologies including Google Analytics to collect certain information about your equipment, browsing actions, and patterns. This will generally include information about your location, your traffic pattern through our website, and any communications between your computer and our Website. Among other things, we will collect data about the type of computer you use, your Internet connection, your IP address, your operating system, and your browser type.
The information we collect automatically is used for statistical data and will not include personal information. We use this data to improve our Website and our service offerings. To the extent that you voluntarily provide personal information to us, our systems will associate the automatically collected information with your personal information.
Use of Cookies And Pixels
Similar to other commercial websites, our website utilizes a standard technology called “cookies” and server logs to collect information about how our site is used. Information gathered through cookies and server logs may include the date and time of visits, the pages viewed, time spent at our site, and the websites visited just before and just after our own, as well as your IP address.
A cookie is a very small text document, which often includes an anonymous unique identifier. When you visit a website, that site’s computer asks your computer for permission to store this file in a part of your hard drive specifically designated for cookies. Each website can send its own cookie to your browser if your browser’s preferences allow it, but (to protect your privacy) your browser only permits a website to access the cookies it has already sent to you, not the cookies sent to you by other sites.
The Company reserves the right to use technological equivalents of cookies, including social media pixels. These pixels allow social media sites to track visitors to outside websites so as to tailor advertising messages users see while visiting that social media website. The Company reserves the right to use these pixels in compliance with the policies of the various social media sites.
Third Party Use Of Cookies
Some content or applications, including advertisements, on the Website are served by third-parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our website. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.
We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.
Email Information
If you choose to correspond with us through email, we may retain the content of your email messages together with your email address and our responses. We provide the same protections for these electronic communications that we employ in the maintenance of information received online, mail, and telephone. This also applies when you register for our website, sign up through any of our forms using your email address or make a purchase on this site. For further information see the email policies below.
Email Policies
We are committed to keeping your e-mail address confidential. We do not sell, rent, or lease our subscription lists to third parties, and will not disclose your email address to any third parties except as allowed in the section titled Disclosure of Your Information.
We will maintain the information you send via e-mail in accordance with applicable federal law.
In compliance with the CAN-SPAM Act, all e-mails sent from our organization will clearly state who the e-mail is from and provide clear information on how to contact the sender. In addition, all e-mail messages will also contain concise information on how to remove yourself from our mailing list so that you receive no further e-mail communication from us.
Our emails provide users the opportunity to opt-out of receiving communications from us and our partners by reading the unsubscribe instructions located at the bottom of any e-mail they receive from us at anytime.
Users who no longer wish to receive our newsletter or promotional materials may opt-out of receiving these communications by clicking on the unsubscribe link in the e-mail.
How And Why We Collect Information
The Company collects your information in order to record and support your participation in the activities you select. If you register to download a book or resources, sign up for our newsletter, and/or purchase a product from us, we collect your information. We use this information to track your preferences and to keep you informed about the products and services you have selected to receive and any related products and/or services. As a visitor to this Website, you can engage in most activities without providing any personal information. It is only when you seek to download resources and/or register for services that you are required to provide information.
If you are outside the European Union and opt to receive any free resources, participate in any free training programs, register for a webinar, register for a live event, register for a seminar, or purchase any products sold by the Company on this Website, we will automatically enroll you to receive our free email newsletter. If you do not wish to receive this newsletter, you can unsubscribe anytime. We include an “unsubscribe” link at the bottom of every email we send. If you ever have trouble unsubscribing, you can send an email requesting to unsubscribe from future emails.
If you are in the European Union and opt to receive any free resources, participate in any free training programs, register for a webinar, register for a live event, register for a seminar, or purchase any products sold by the Company on this Website, we will only enroll you to receive our free email newsletter if you affirmatively consent to it. If you do not wish to receive this newsletter, you can unsubscribe anytime. We include an “unsubscribe” link at the bottom of every email we send. If you ever have trouble unsubscribing, you can send an email requesting to unsubscribe from future emails.
How Do We Use the Information That You Provide to Us?
We use personal information for purposes of presenting our Website and its contents to you, providing you with information, providing you with offers for products and services, providing you with information about your subscriptions and products, carrying out any contract between you and the Company, administering our business activities, providing customer service, and making available other items and services to our customers and prospective customers.
From time-to-time, we may use the information you provide to us to make you offers to purchase products and services provided by third parties in exchange for a commission to be paid to us by such third parties. Should you opt to take part in such promotions, the third parties will receive your information.
From time-to-time, we may use the information you provide to us to display advertisements to you that are tailored to your personal characteristics, interests, and activities.
Disclosure Of Your Information
As a general rule, we do not sell, rent, lease or otherwise transfer any information collected whether automatically or through your voluntary action.
We may disclose your personal information to our subsidiaries, affiliates, and service providers for the purpose of providing our services to you.
We may disclose your personal information to a third party, including a lawyer or collection agency, when necessary to enforce our terms of service or any other agreement between you and the Company.
We may provide your information to any successor in interest in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of the Company’s assets and/or business.
We may disclose information when legally compelled to do so, in other words, when we, in good faith, believe that the law requires it or for the protection of our legal rights or when compelled by a court or other governmental entity to do so.
How Do We Protect Your Information and Secure Information Transmissions?
We employ commercially reasonable methods to ensure the security of the information you provide to us and the information we collect automatically. This includes using standard security protocols and working only with reputable third-party vendors.
Email is not recognized as a secure medium of communication. For this reason, we request that you do not send private information to us by email. However, doing so is allowed, but at your own risk. Some of the information you may enter on our website may be transmitted securely via a secure medium known as Secure Sockets Layer, or SSL. Credit Card information and other sensitive information is never transmitted via email.
The Company may use software programs to create summary statistics, which are used for such purposes as assessing the number of visitors to the different sections of our site, what information is of most and least interest, determining technical design specifications, and identifying system performance or problem areas.
For site security purposes and to ensure that this service remains available to all users, the Company uses software programs to monitor network traffic to identify unauthorized attempts to upload or change information, or otherwise cause damage.
Policy Changes
It is our policy to post any changes we make to our privacy policy on this page. If we make material changes to how we treat our users’ personal information, we will notify you by email to the email address specified in your account and/or through a notice on the Website home page. The date the privacy policy was last revised is identified at the bottom of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Website and this privacy policy to check for any changes.
Visitors’ GDPR Rights
If you are within the European Union, you are entitled to certain information and have certain rights under the General Data Protection Regulation. Those rights include:
We will retain the any information you choose to provide to us until the earlier of: (a) you asking us to delete the information, (b) our decision to cease using our existing data providers, or (c) the Company decides that the value in retaining the data is outweighed by the costs of retaining it.
You have the right to request access to your data that the Company stores and the rights to either rectify or erase your personal data.
You have the right to seek restrictions on the processing of your data.
You have the right to object to the processing of your data and the right to the portability of your data.
To the extent that you provided consent to the Company’s processing of your personal data, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based upon consent that occurred prior to your withdrawal of consent.
You have the right to lodge a complaint with a supervisory authority that has jurisdiction over issues related to the General Data Protection Regulation.
We require only the information that is reasonably required to enter into a contract with you. We will not require you to provide consent for any unnecessary processing as a condition of entering into a contract with us.
Contact Us
The Company welcomes your questions or comments regarding the Privacy Policy:
Rebekah Johnston Textile Art,
Nottingham, United Kingdom
Effective as of Oct 01, 2021 | Updated 16 Jan 2025.
Use of this website
This Website is controlled and operated by Rebekah Johnston, Nottingham, United Kingdom. We make no representation that materials in the website are appropriate or available for use in other locations. Anyone who elects to access this website from any other location does so on their own initiative and is responsible for compliance with applicable local laws.
Use of website
The terms and conditions apply to your use of the Rebekah Johnston Textile Art website at rebekahjohnston.co.uk (the “Website”). The terms and conditions apply regardless of how you access the website, including any devices by which you can access the website at home, or on the move. You must read these Terms and Conditions carefully, and we recommend that you print and keep a copy for your future reference. By accessing, browsing, using the Website or sending me information through the website, you confirm that you have read, understood and agree to these terms and conditions in their entirety. If you do not agree to these terms and conditions in their entirety, please do not use this website.
Use restrictions
The copyright in all material provided on this Site is held by Rebekah Johnston Textile Art. Except as advised herein, none of the material on this site may be copied, reproduced, distributed, republished, downloaded, displayed, posted or transmitted in any form or by any means, including, but not limited to, electronic, mechanical, photocopying, recording, or otherwise, without the prior written permission of Rebekah Johnston Textile Art. Any use of these materials on any other site or networked computer environment for any purpose is prohibited.
Permission is granted to display and download the materials for your personal, non-commercial use only, provided you do not modify the materials and that you retain all copyright claims, marks and other proprietary notices contained within the materials. You can share the link to this website’s homepage or individual pages or blog post on social media. You may pin photographs on Pinterest.
Ownership rights / copyright
All rights, including copyright and other intellectual property rights, in and to this website are owned by or licensed to Rebekah Johnston Textile Art.
Links to external websites
Links to third party websites on this site are provided solely as a convenience to you. If you use these links, you will leave the Rebekah Johnston Textile Art website. We do not actively review all of these third party sites, nor do they possess any control and are not responsible for any of these sites or their content.
Thus, Rebekah Johnston Textile Art does not endorse or make any representations about any other linked site, or any information, software or other products or materials found there, or any results that may be obtained from using them. If you decide to access any of the third party sites linked from this Site, you do this entirely at your own risk.