Effective from: 01/07/2020
This policy covers:
Your legal rights
What information do we collect?
We receive, collect, use, and store different kinds of personal data about you, in addition we collect the Internet Protocol (IP) address you used to connect your computer to the Internet. We may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse away from the homepage. We also collect personally identifiable information (including name, email, password, communications); payment details (including credit card information), comments, feedback, reviews and recommendations and personal profile.
You can request a copy of the personal data we have collected about you at any time by contacting us (click "Contact" in the menu bar at the top of this page to find out how to contact us). To verify we are providing personal information to the owner of that information we are required to as for additional information to verify your identity and contact details and for security details.
Why do we collect your personal information?
We collect such non-personal and personal information for the following purposes:
To provide and operate the Services;
To provide our Users with ongoing customer assistance and technical support;
To be able to contact our Visitors and Users with general or personalized service-related notices and promotional messages;
To create aggregated statistical data and other aggregated and/or inferred non-personal information, which we or our business partners may use to provide and improve our respective services;
To comply with any applicable laws and regulations.
South Coast Studio uses Google Cloud Platform (GCP) Stackdriver Logging to collect information required to improve service, monitor website performance, ensure a reliable service and allow us to review and allocate refunds where appropriate. Google Cloud Platform (GCP) Stackdriver collects data automatically and continuously, logging the e-mail associated with your User Account to monitor how users interact with the site, and which pages are accessed by each user.
How your personal data is collected
When you register for an account with South Coast Studio, subscribe to the newsletter, and/or purchase or use any of our Services we obtain information containing your identity and contact data. When you conduct a transaction on our Website, as part of the process, we collect personal data you have provided. This data is used as outlined below.
How do we use, share and disclose your personal data?
Our legal bases for holding and processing your personal data include:
Legitimate interest For our (or third parties') legitimate interests, as long as they aren't overridden by your interests and rights
Consent Your consent has been given
Obligation To comply with any relevant legal obligations.
South Coast Studio is hosted on the Wix.com platform, any personal information you provide us along with consent to use that data may be processed by Wix on behalf of South Coast Studio for purposes including managing contact lists. The personal information we record is used to manage your registration, maintain a record of any purchases and record how you use the Website. From time-to-time you may provide us with feedback or leave a review for our Services, or otherwise engage with us in ways that, in combination with other data we hold, may be included in your Profile Data. In using the South Coast Studio Website we use and combine data that might include identity, contact, profile, transaction, financial, technical, usage and marketing and communications, where consent is required and has been provided to improve our Services and send more relevant communications.
Where a complaint is raised regarding the services we provide we may use your identity and contact information to resolve the issue. Your identity, contact information and site usage information is also used by South Coast Studio in order to review and fulfill requests for refunds where appropriate.
We will only use your personal data for the above purposes, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. We may process your personal data without your knowledge or consent where this is required or permitted by law.
How long will we keep your personal data for?
How do we keep your data secure?
South Coast Studio is hosted on the Wix.com platform. Wix.com provides us with the online platform that allows us to sell our products and services to you. Your data may be stored through Wix.com's data storage, databases and general Wix.com applications. They store your data in secure servers behind a firewall.
All direct payment gateways offered by Wix.com and used by South Coast Studio adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS (Payment Card Industry Data Security Standards) requirements help ensure the secure handling of credit card information by our store and its service providers.
Your legal rights
Under the law, you have the right to:
Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of new data you provide to us.
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be in a position to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Withdraw consent where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.
If you wish to exercise any of the rights set out above, please contact us - click "Contact" in the menu bar at the top of this page to find out how to contact us. You will not have to pay a fee to exercise any of your legal rights as specified above. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
Before fulfilling your request, we may ask you for additional information in order to confirm your identity and for security purposes. You have the right to file a complaint with your local supervisory authority for data protection (but we still recommend that you contact us first).
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.