Splaat Photo Limited: Customer Privacy Notice, Cookie Policy and Consent Form
Splaat Photo Limited, hereafter “Splaat”/”we”/”us” is committed to protecting your privacy and being open and clear about how we use your personal data.
This privacy notice is for our valued Splaat customers and its purpose is to let you know how and why we use and process the personal data you entrust us with, how we keep it safe, who we share it with and to explain the legal rights you have in relation to your personal data.
We may update this privacy notice from time to time and we’ll post the changes on this page. If we make an important change that we need to tell you about, we’ll email you to let you know.
If you have any questions about this notice, please contact team@splaatphoto.co.uk or write to us at Splaat Photo Limited, Caxton Point, Caxton Way, Stevenage, Hertfordshire, SG1 2XY.
Our commitment to you
We process your personal data in accordance with the overarching principles and requirements set out in the in the General Data Protection Regulation and the Data Protection Act 2018 (‘Data Protection Law’). What this means is that Splaat processes your data in a way that is:
-
Lawful, fair and transparent;
-
Compatible with the purposes that we have told you about;
-
Adequate and necessary, we only use the data we need to use for the reason we told you;
-
Accurate and up to date;
-
Not excessive, we only keep your data for as long as we need it; and
-
Secure and protected.
How and why we use personal data?
Pupil Personal Data
Splaat provides photography services to schools. We are instructed by schools to photograph pupils individually and to provide photography coverage at school events. When we carry out this service for the schools we work with we process personal data when we capture images of school pupils. Where we capture images of your child, we rely on you providing your consent, via the attached form and this is our lawful basis for processing this personal data.
We use facial recognition technology when carrying out our services to ensure that we can identify individuals when we process their images and assign the correct images to our photo galleries so that you can view the images of your child. Facial recognition technology is used by us for this purpose only and within our own secure systems. We require your consent to use our facial recognition technology.
Parent or Guardian Personal Data
We collect personal data from you about you and your child when you engage with us to provide you with our photography services or to place orders for photographs via our website or download and share images directly from our online galleries. When you sign up to use our services, access the images that we hold in our photo galleries and place an order with us to send you photographs, we ask you to provide us with personal data to set up a secure account.
Our lawful basis for processing this data under data protection law is contract e.g. it is necessary for us to process the data to fulfil the terms and conditions of our agreement with you.
We will only use you or your child’s Personal Data for the purposes for which we collected it. If we need to use your Personal Data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
It’s possible that images of your child will feature in group photographs captured at school events. These photographs may be shared with multiple parents or guardians via pupil galleries. We ask that all parents and guardians consider the privacy of others before sharing images featuring other children, however, we are unable to control how images are used after they are downloaded from the Splaat Photo platform.
What personal data do we use?
Account Data. To set up your account we will ask you to provide your name, address, email address, phone number and other information relevant to order processing and/or offers. We may use your contact information to get in touch with you about your account from time to time.
Please note that when you place an order with us we do not collect or process your financial information. All payments are processed using the third party platform Stripe. Stripe’s privacy notices and terms can be accessed here:
Website Data. If you enter information within our website contact forms, or contact us directly via the email address on our sites, we will process information about you to respond to your query. We rely on our legitimate interest to process your information for this purpose.
When you visit our site, we may automatically collect the following information:
-
Technical information, including the Internet Protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;
-
Information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our site (including date and time), page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse-overs) and methods used to browse away from the page.
We also rely on our legitimate interest to process your information for this purpose.
Links to other websites
Our website may contain links to our social accounts and/or other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement.
Cookies. Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good browsing experience and also allows us to improve our site. We also use cookies to measure the effectiveness of our advertising activities. Where we use cookies that are essential for the operation of our sites, we rely on our legitimate interest as our legal basis to process this information and we ask you to consent to our use of non-essential cookies.
How we use cookies
A cookie is a small file which asks permission to be placed on your system hard drive. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs and remember information about your preferences.
These cookies are necessary to provide you with services available through our website and to use some of its features, such as access to secure areas. However, these identifiers do not store any personal data.
Below are the cookies that may be used from our website.
PHPSESSID
Random value to start sessions
ms_session
A unique random identifier for user experience and actions such as saving contents of your shopping cart.
persid
An encrypted ID to automatically log you into your account if you choose the remember me option when creating an account or logging in.
vid
A visitor ID number used for our statistical system.
lv
The date of your last visit for our statistical system.
emview
Set if you have viewed our mailing list popup offer (value of 1). Required so it does not show to you each time you visit our site.
How Can I Control the Use of Cookies?
If you don’t want us to use cookies in your web browser, you can remove them from your computer or change your browser settings so that it either blocks cookies altogether or asks you if you’d like to accept them from some websites.
You can use your web browser settings to:
-
delete, block or allow all cookies;
-
block cookies set by 3rd parties (i.e. cookies set by online services other than the one you are visiting);
-
clear cookies when you finish your browsing session;
-
view in a ‘private browsing’ session, which allows you to browse the web without recording your browsing history; and
-
install add-ons and plugins to extend browser functionality.
A trusted source which gives information about how to delete and control cookies is https://www.aboutcookies.org . Alternatively, you can contact us at team@splaatphoto.co.uk to ask us to change your cookie preferences.
Please note, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.
Marketing Data. When you create your account with us, we ask you to set your marketing preferences to confirm whether you consent to receiving marketing materials from us about similar products and services that we think will be of interest to you. You may instruct us to market to you by email or text and we will communicate with you in this way. Our basis under law for processing your personal data in this way is consent.
You may opt out of receiving promotional messages from us by following the instructions in those communications. If you opt out, we may still send you non-promotional messages, such as service emails about your account or changes to our services.
You may also send requests about your contact preferences and changes to your information including requests to opt-out of sharing your personal information with third parties by emailing team@splaatphoto.co.uk.
Who do we share your data with?
We employ a third party, to assist us with the development and maintenance of our website. This third party may have access to your personal information in the course of providing us with their services. Where third parties process data on our behalf, they won’t use your personal information for their own purposes and we only permit them to use it in accordance with our instructions and the law.
We do not share your information with any other third parties without your consent. This includes third party marketing companies or advertising agencies.
How do we keep your data safe?
We have put in place appropriate security measures to protect your personal information and prevent it from being lost, destroyed, damaged, used, altered or disclosed. Our data is hosted on cloud servers by Amazon AWS within the EU.
How long do we keep your data for?
We will only keep your data for as long as we need to and for the reason we have collected it. If you close your account, we will retain your data and the nominee data for a reasonable amount of time after you leave us in order to allow you the opportunity to retrieve information from us and if your account becomes dormant, we may contact you to ask you if you wish to keep your account open. We will retain the images we have and archive these securely to allow access for pupils to their school photographs beyond their period of schooling.
Your legal rights
You have a number of rights under data protection law in relation to your personal information and if you want to exercise any of these rights, please contact us at team@splaatphoto.co.uk and we’ll be happy to help. These rights are as follows:
-
right to request access to your personal information - you can request a copy of the personal information we hold on you;
-
right to request correction of your personal information - if any personal information we hold on you is incorrect, you can request to have it corrected;
-
right to request erasure of your personal information - you can ask us to delete your personal information in certain circumstances;
-
right to object to processing or restrict processing of your personal information - you may object to our processing of your personal data in certain circumstances;
-
right to request the transfer of your personal information - to provide you, or a third party you have chosen, with your personal information; and
-
right to withdraw consent – where we process your data on the basis of consent, you can notify us that you want to withdraw consent any time.
If you have any data protection complaints, you may contact the Information Commissioner's Office (ICO) by post at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Email: casework@ico.org.uk Telephone: 0303 123 1113
We’d like to try and help with any concerns you may have before you contact the ICO, so please get in touch with team@splaatphoto.co.uk in the first instance.