top of page

Privacy Policy 

​

1. Introduction

This Privacy Policy is provided in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all relevant UK privacy legislation. It explains how personal information is collected, processed, stored, and protected by Joanna Carrick as the Data Controller. This Privacy Policy explains how your personal information is collected, used, and protected. By engaging with services provided by Joanna Carrick, you agree to the terms outlined below.

​

2. Lawful Basis for Processing

Personal information is processed under the following lawful bases as defined in Article 6 of UK GDPR:

  • Consent: When you provide information voluntarily.

  • Contract: When processing is necessary to provide the services requested.

  • Legal Obligation: When data must be retained for tax, accounting, or regulatory purposes.

  • Legitimate Interest: For business operation, communication, and client management, where such interests are not overridden by your rights.
     

3. Information Collected

We may collect the following personal data:

  • Name

  • Email address

  • Phone number

  • Postal address

  • Service-related communications

  • Booking and payment history (where applicable)

Sensitive personal data (special category data) will not be collected unless necessary and explicit consent is obtained. Your information may be used for:

  • Contacting you regarding bookings, services, or enquiries

  • Sending confirmations, updates, and relevant service information

  • Internal record keeping and business administration

  • Compliance with legal obligations
     

4. Data Storage, Security & Transfers

Your data is stored securely in digital and/or physical formats. Industry-standard security measures are used to prevent loss, access, misuse, alteration, or disclosure.

Data may be stored using third-party providers such as email or scheduling platforms. Where such services are used, reasonable measures are taken to ensure compliance with UK GDPR.

Data will not be transferred outside the UK without appropriate safeguards in accordance with Chapter V of the UK GDPR.
 

5. Sharing of Information

Your data is not sold or shared with third parties except:

  • When legally required (e.g., law enforcement requests)

  • When necessary for business operations such as accounting or website administration
     

5. Data Retention

Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal, tax, or reporting requirements.
 

6. Data Security

Reasonable measures are taken to protect your information from loss, misuse, or unauthorised access. However, no digital or physical system can guarantee 100% security.

 

7. Your Rights Under UK GDPR

You have the following rights:

  • Right to Access: Request a copy of your personal data.

  • Right to Rectification: Request corrections to inaccurate or incomplete information.

  • Right to Erasure: Request deletion of your data when legally permissible.

  • Right to Restrict Processing: Request limits on how your data is used.

  • Right to Data Portability: Request transfer of your data to another provider.

  • Right to Object: Decline processing under legitimate interests.

  • Right to Withdraw Consent: If processing is based on consent, you may withdraw at any time.

All requests will be responded to within one month, in accordance with UK GDPR timeframes. You have the right to:

  • Request access to the personal information held about you

  • Request correction or deletion of your data

  • Withdraw consent at any time

  • Request limitations on how your data is processed

Requests can be made using the contact details above.
 

8. Cookies and Online Data

If a website or digital platform is used, cookies or similar technologies may collect usage data such as:

  • Browser type

  • IP address

  • Pages visited. This helps improve user experience and site functionality.
     

9. Third‑Party Links

Any external websites linked are not controlled by us. Please review the privacy policies of those sites independently.
 

10. Complaints

If you believe your data rights have been violated, you may lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Website: www.ico.org.uk Phone: 0303 123 1113
 

11. Updates to This Policy

This policy may be updated occasionally. The most recent version will always be available upon request or posted publicly if applicable.

For any questions or data requests, please contact: Email: signaturefaces@outlook.com
 

bottom of page