Who we are
Our website address is: https://www.paintndecorate.co.uk.
What personal data we collect and why we collect it
When visitors leave comments or reviews on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
We use Ninja forms for customers and visitors to use to contact us as an alternative to calling or emailing. We only collect enough information to contact you to answer the query. We do not store personal information on the database or website, the information is emailed only. No information collected via the form is stored in website back-ups.
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
We use Google Analytics to monitor the running of the website and it’s performance. We use an anonymised version of the tracking code so no personal information is collected, the access to the analytics information is not kept on the website and with limited access. The data is not shared with any third parties.
Who we share your data with
We pass your delivery details on to the courier company and where necessary, the product suppliers. This is to ensure that your order is delivered as requested.
How long we retain your data
If you leave a comment or review, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
We send information to the delivery company, ANC and potentially other courier companies should it be necessary. This is done either by telephone or via email.
Your contact information
For any further information on the use of personal information please contact our data processor on firstname.lastname@example.org
How we protect your data
We use an encrypted domain and mail, we only ask for the minimum required information to fulfil orders, create accounts or to contact customers with enquiries. We only store information as required for business records or to ensure our customers can enjoy discounts and special offers.
We delete all non-essential data before running updates and back ups.
Our website uses the most up to date versions of software, code and we run updates regularly as well as security scans to ensure our website and your data is kept as secure as possible.
Our business is run on devices password protected and with the capability of remote wipe should it be required.
What data breach procedures we have in place
Should there be a data breach we will suspend the website until the breach is located and dealt with. Where needed, counter measures put in place and any affected parties notified as well as informing the ICO as per the regulations in the GDPR.
What third parties we receive data from
We sometimes receive data from suppliers if another store is unable to fulfil the order or carry out delivery.
What automated decision making and/or profiling we do with user data
We do not have any of these systems in place.