Privacy Notice

At matthewkingarts, we take your privacy very seriously. Please read this privacy policy carefully as it contains important information on who we are and how and why we collect, store, use and share your personal data. It also explains your rights in relation to your personal data and how to contact us or supervisory authorities in the event you have a complaint.

Personal data is any information relating to an identified or identifiable individual, and our use of it is subject to your instructions and relevant Data Protection legislation.

Personal data we collect about you

We only collect very limited personal data, sufficient to conduct a transaction with you or to facilitate an ongoing relationship. This includes:

Your name, address, email address and telephone number
Information required to process payment for a product purchased via this site, as stipulated by our payment providers
Your website address, where you choose to provide this on a contact form or comment form on this site, or by direct contact with us
Any other personal data that you choose to enter into a free form text field on this website
Information automatically collected by our IT, communication and other systems, and other information about your use of our information and communications systems
Details of your online social media presence (e.g. Twitter name) where you use the social media sharing buttons on this site
Details of any special needs or requirements you have in order to ensure your safety and wellbeing on one of our workshops

This personal data is required to enable us to provide our service to you. If you do not provide personal data we ask for, it may delay or prevent us from providing services to you.

We collect most of this information from you direct or via our website. However, we may also collect information from publicly accessible sources, e.g. Facebook, Twitter, LinkedIn; directly from a third party, e.g. payment processing providers; and via our information technology (IT) systems.

How and why we use your personal data

Under data protection legislation, we can only use your personal data if we have a proper reason for doing so, e.g.:

to comply with our legal and regulatory obligations;
to take steps at your request prior to entering into a contract;
for the performance of our contract with you; or
for our legitimate interests or those of a third party and your interests and fundamental rights do not override those interests.

We use (process) your personal data for the following purposes:

To sell products or services to you – for the performance of our contract with you or to take steps at your request before entering into a contract
To update and enhance client records so that we can perform our contract with you, take steps at your request before entering into a contract, and to ensure that we can keep in touch with you about existing and new services in the legitimate interests of our business
To ensure safe working practices so that we can deliver the best workshop experience to you and to comply with legal and regulatory obligations
To market our services and products to existing and former customers and third parties who have expressed an interest in our services for our legitimate interests in promoting our business
To process invoices and payments to comply with our legal and regulatory obligations and for the performance of our contract with you, or to takes steps at your request before entering into a contract.
Gathering and providing information required for audits, statutory returns and regulatory bodies in order to comply with our legal and regulatory obligations
Other processing necessary to comply with professional, legal and regulatory obligations that apply to our business
To prevent unauthorised access and modifications to our systems, prevent fraud and to detect other criminal activity

The above does not apply to special category personal data, which we will only process with your explicit consent.

Marketing communications

We may use your personal data to send you updates (by email, text message, telephone or post) or information about our services that might be of interest to you and information about including exclusive offers, promotions or new services.

We have a legitimate interest in processing your personal data for marketing purposes (see above ‘How and why we use your personal data’). This means we do not need your consent to send you promotional communications. However, where consent is needed, we will ask for this consent separately and clearly.

We will always treat your personal data with the utmost respect and never sell or share it with other organisations for marketing purposes.

You have the right to opt out of receiving promotional communications at any time by:

contacting us by email at matthewkingarts@outlook.com
using the “Contact” page on our website
using the ‘unsubscribe’ link in emails
communicating your preference to us clearly in any other way

Who we share your personal data with

So far as is necessary, we may share personal data with our professional advisers (e.g. accountants, lawyers); our external auditors (in relation to any audit of our accounts); our insurers and brokers (where this is necessary to ensure adequate insurance cover for our business and participants in our workshops); our bank; external service suppliers, representatives and agents that we use to make our business more efficient; and other third parties where necessary to carry out your instructions.

We only allow our service providers to handle your personal data if we are satisfied they take appropriate measures to protect your personal data. We also impose contractual obligations on service providers relating to ensure they can only use your personal data to provide services to us and to you.

We may disclose and exchange information with law enforcement agencies and regulatory bodies to comply with our legal and regulatory obligations.

Location and security of your personal data

Information may be held at our offices and those of our third party agencies, service providers, representatives and agents as described above (see ‘Who we share your personal data with’). Some of these third parties may be based outside the European Economic Area (EEA), or you may be based outside the EEA.

These transfers are subject to special rules under European and UK data protection law.

We will ensure that any transfer complies with data protection laws and that relevant contracts contain appropriate clauses to confirm this. We will ensure that all personal data will be secure.

We have appropriate security measures to prevent personal data from being accidentally lost, or used or accessed unlawfully. We limit access to your personal data to those who have a genuine business need to access it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

How long your personal data will be kept

We will keep your personal data after completion of our services. We will do so for one of these reasons:

to respond to any questions, complaints or claims made by you or on your behalf;
to show that we treated you fairly;
to keep records required by law.

We will not retain your data for longer than necessary for the purposes set out in this policy. Different retention periods apply for different types of data.

When it is no longer necessary to retain your personal data, we will delete or anonymise it.

Your rights

You have the following rights, which you can exercise free of charge:

Access – the right to be provided with a copy of your personal data
Rectification – the right to require us to correct any mistakes in your personal data
To be forgotten – the right to require us to delete your personal data – in certain situations
Restriction of processing – the right to requires us to restrict processing of your personal data – in certain circumstances, eg if you contest the accuracy of the data
Data portability – the right to receive the personal data you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party—in certain situations
To object – at any time to your personal data being processed for direct marketing (including profiling); and in certain other situations to our continued processing of your personal data, eg processing carried out for the purpose of our legitimate interests.
Not to be subect to automated individual decision-making – the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you

If you would like to exercise any of those rights, please:

Email, or write to us using the contact form on this website;
Let us have enough information to identify you and the personal data that we hold relating to you;
Let us know what right you want to exercise and the information to which your request relates.

Changes to this privacy policy

We may change this privacy policy from time to time. The latest version will be available on our website.