Last updated: 26/02/2021
This Policy is provided in a layered format so you can click through to the specific areas set out below.
ARTSFLOW LTD, which operates this LANDING PAGE, the Website artsflow.com and mobile application (hereinafter referred to as, "we", "us", "our", "Artsflow" or "app", "website") and its owner/s respect the privacy of anyone who uses our mobile application and/or our web- page. This Policy was created to demonstrate commitment to privacy.
Children: Our website and our mobile application is not intended for children and we do not knowingly collect data relating to children.For the avoidance of doubt, Artsflow is not intended for children under the age of 18 and we do not knowingly collect data relating to children.
Please read the following carefully to understand our practices regarding your personal data and how we will treat it.
This Policy complies with the General Data Protection Regulation ((EU) 2016/679) (GDPR) and the Data Protection Act 2018 (2018).
Under data protection laws, we are required to provide you with certain information about who we are, how we process your personal data and for what purposes, and your rights in relation to your personal data. This information is provided in this Policy and it is important that you read the information below.
Please contact us for further inquiries:
Our contact details
Owner and Registered Data Protection Controller (ICO Registration Number: ZA845150 ).
Name: ARTSFLOW LTD
Company number: 12728173
The GDPR Artsflow LTD, which operates artsflow.com, is a company incorporated and located in the United Kingdom and is subject to the UK laws.
The General Data Protection Regulation (GDPR) is a European Union (EU) privacy law that regulates how we will store, process and use the personal information of people located in the EU or the UK. Personal data is defined as any piece of data that, used alone or with other data, could identify a person.
If you are an EU/UK citizen, under the GDPR, you have the right to ask us for details about the way we use your personal data and you can ask us to do certain things with that data. These include: • to correct your personal data; • prohibit the use of your personal data for certain tasks; • remove your personal data from our records completely; or • ask how your personal data is being used.
We are the data controllers under the GDPR, as we are collecting and using your Personal DataOwner and Registered Data Protection Controller (ICO Registration Number: ZA845150 ). We use trusted third parties as our data processors for technical and organizational purposes, including for payments and email marketing. We use reasonable efforts to make sure our data processors are GDPR- compliant.
USA Users - CCPA Privacy Rights (Do Not Sell My Personal Information)
- Under the CCPA, among other rights, California consumers have the right to:
- Request that a business that collects a consumer's personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.
- Request that a business delete any personal data about the consumer that a business has collected.
- Request that a business that sells a consumer's personal data, not sell the consumer's personal data.
- If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.
2. Information Collected
2.1 We are committed to safeguarding the privacy of our clients and visitors to our website and mobile application.
2.4 We collect your information when you choose to subscribe to our services, as per our Terms and Conditions, such as without limitation, when you choose to register on our website and mobile application, get a membership with us, get any of the services or have a chat with one of our advisors online or by contacting us via using the relevant features of our website and mobile application and when you visit the app's pages.
2.5 We also use Google AdMob to collect your data. AdMob is a mobile application advertising platform created by Google. It is used to promote mobile apps and to help advertisers make money through mobile apps by enabling in-app advertising. AdMob also works with Google Analytics to help app owners get valuable insight and information about their app's usage and the effectiveness of any advertising campaigns. By agreeing to this Policy, downloading and using our website and mobile application, you hereby understand and agree that we collect, share, and/or use data collected via AdMob.
More information about how Google deals with your Privacy can be found here: https://policies.google.com/privacy?hl=en .
2.7 We do not distribute or share customer's data, unless we need so for the purposes of providing our services. If we do need share some or all information provided by the customer with anyone outside our company, including, but not limited to, our partners- we will notify the customer immediately and request consent.
2.8 We may collect your non-personal information from cookies, server logs and similar technology from your browser or mobile device, including your IP address (please see our COOKIES POLICY below for more information).
2.9 Some of the non-personal information can be combined with the personal information that is collected. When this is done, your non-personal information will be treated as personal information if the information may be used to identify or locate our customers in the same way as the personal information.
2.10 We collect personal information only when you specifically and knowingly give it to us, for example by filling out an online form, giving our representatives your business card, connecting to us through a company account on social media or by sending us an email. We record the date and time when you give us this information and keep track of where we send it.
2.11 We will use the personal information you give us for the reasons stated when you provided it and for the provision of services when such services are requested. We will only use it for other reasons where legally we must or where this is allowed by law.
3. Data collected:
Please note : we do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
3.1 We may process data about your use of our website and mobile application and services (" usage data"). The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and app navigation paths, as well as information about the timing, frequency and pattern of your use of our website and mobile application or services. The source of the usage data is Google Analytics. This usage data may be processed for the purposes of analysing the use of our website and mobile application and services. The legal basis for this processing is the legitimate interest of our company, namely the monitoring and improvement of our website and mobile application and services.
3.2 We may process information needed to set up and maintain an account with us in order to provide you with our services (" account data"). This account data may include your name, email address and password. The source of the account data is the information you provide. The account data may be processed for the purposes of, providing our services, ensuring the security of our website and mobile application and services, maintaining back-ups of our databases and communicating with you. The legal bases for this processing is to allow the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract.
3.3 We may process information to be included in your personal client profile on our website and mobile application (" profile data"). This profile data may include your name, address, telephone number, email address, profile pictures, gender, date of birth and any other information that you may wish to share. Profile data may be processed for the purposes of enabling your use of our services. The legal basis for this processing is to allow the performance of a contract between you and us and/or taking steps, at you request, to enter into such a contract.
3.4 We may process your personal data that are provided in the course of the use of our services (" service data"). This service data may include information about your academic performance and any factors relevant to this, your current, past or future academic institutions, your availability for tuition sessions, your preferred tuition location, and your experience or qualifications. We gather this information directly from you. Service data may be processed for the purpose of effectively providing our services. The legal basis for this processing to facilitate the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract.
3.5 We may process information that you post for publication on our website and mobile application or through our services (" publication data"). The publication data may be processed for the purposes of enabling such publication and administering our website and mobile application and services. The legal basis for this processing is consent.
3.6 We may process information contained in any enquiry you submit to us regarding our services (" enquiry data"). Enquiry data may be processed for the purposes of offering or providing relevant services to you. The legal basis for this processing is the legitimate interest of our company, namely to respond to enquiries concerning our services and to make our services available to potential clients.
3.7 We may process information relating to our customer relationships, including customer contact information (" customer relationship data"). The customer relationship data may include your name, your contact details, and information contained in communications between us and you. The source of the customer relationship data is you. The customer relationship data may be processed for the purposes of managing our relationships with customers, communicating with customers, keeping records of those communications and promoting our services to customers. The legal basis for this processing is the legitimate interest of our company, namely the proper management of our customer relationships.
3.8 We may process information relating to transactions, including purchases of goods and services, that you enter into with us and/or through our website and mobile application (" transaction data"). Transaction data may include your contact details, details of the payment method used, including details of specific payment cards, your billing address, and the details of the transaction itself. The transaction data may be processed for the purpose of supplying the purchased goods and services and keeping proper records of those transactions. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract and our legitimate interests, namely the proper administration of our website and mobile application and business.
3.9 We may process information that you provide to us for the purpose of subscribing to our email notifications (" notification data"). The notification data may be processed for the purposes of sending you the relevant notifications. The legal basis for this processing is the legitimate interests of our company, namely the need to inform clients of relevant developments in relation to their use of our services, for example any charges to be levied in respect of those services.
3.10 We may process information that you provide to us for the purpose of subscribing to our email newsletters, and/or promotional information (" marketing data"). This marketing data may be processed for the purposes of sending you the relevant newsletters. The legal basis for this processing is consent.
3.11 We may process information contained in or relating to any communication that you send to us (" correspondence data"). The correspondence data may include the communication content and metadata associated with the communication. Our website and mobile application will generate the metadata associated with communications made using the app contact forms. The correspondence data may be processed for the purposes of communicating with you and record-keeping. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and mobile application and business and communications with users.
3.12 We may process any of your personal data identified in this policy where necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others.
3.13 We may process any of your personal data identified in this policy where necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice. The legal basis for this processing is our legitimate interests, namely the proper protection of our business against risk.
3.14 In addition to the specific purposes for which we may process your personal data set out above, we may also process any of your personal data] where such processing is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
4. We will collect and process the following data about you:
4.1 Information you give us - This is information (including Identity, Contact, Financial, and Marketing and Communications Data) you consent to giving us about you by filling in forms on the App Site and the Services Sites (together Our Sites), or by corresponding with us (for example, by email or chat). It includes information you provide when you register to use the App Site, download or register an App, subscribe to any of our Services, search for an App or Service, make an in-App purchase, share data via an App's social media functions, enter a competition, promotion or survey, or any OTHER ACTIVITIES COMMONLY CARRIED OUT IN CONNECTION WITH OUR WEBSITE AND MOBILE APPLICATION, such as without limitation information about your interests, including movies, sports, music and other information that you choose to share.
4.2 We also store the information when you report a problem with an App, our Services, or any of Our Sites. If you contact us, we will keep a record of that correspondence.
4.4 Location Data- We may also use the GPS technology OR other technology to determine your current location. Some of our location-enabled Services require your personal data for the feature to work. If you wish to use the particular feature, you will be asked to consent to your data being used for this purpose. You can withdraw your consent at any time by disabling Location Data in your settings or contacting us.
Information we receive from other sources including third parties and publicly available sources:
We will receive personal data about you from various third parties [and public sources] as set out below:
THIS LIST IS NON-EXHAUSTIVE AND MAY BE UPDATED FROM TIME TO TIME.
Device Data from the following parties:
- analytics providers, such as Google based outside the EU;
- advertising networks [such as [NAME] based [inside OR outside] the EU]; and
- search information providers [such as [NAME] based [inside OR outside] the EU].
- Contact, Financial and Transaction Data from providers of technical, payment and delivery services [such as [NAME] based [inside OR outside] the EU];
- Identity and Contact Data from data brokers or aggregators [such as [NAME] based [inside OR outside] the EU];
- Unique application numbers. When you want to install or uninstall a Service containing a unique application number or when such a Service searches for automatic updates, that number and information about your installation, for example, the type of operating system, may be sent to us.
5. Our use of your Personal Data
5.1 We may send you a welcome email/text or otherwise contact you to verify your account and other transactional emails for operational purposes. Those communications can be stopped by terminating your account with us and by emailing firstname.lastname@example.org
5.2 We may also use the information to contact customers and prospects to further discuss their interest in our company, the services we provide and ways we can improve them. We may also Email a customer newsletter and updates about the services or the business. You can opt out of receiving these communications by emailing us as per our opt-out policy (below).
5.3 You agree that we may use your personal information in relation to our services and tools, deliver targeted marketing and promotional offers. You agree that we will use and collect your information and share it with Google AdMob.
TABLE OF PURPOSES FOR WHICH WE WILL USE YOUR PERSONAL DATA
|Purpose/activity||Type of data||Lawful basis for processing|
|To install the App and register you as a new App user||Identity, Contact, Financial, Device||Your consent|
|To process in-App purchases and deliver Services including managing payments and collecting money owed to us||Identity, Contact, Financial, Transaction, Device, Marketing and Communications, Location||Your consent; Performance of a contract with you; Necessary for our legitimate interests (to recover debts due to us)|
|To manage our relationship with you including notifying you of changes to the App or any Services||Identity / Contact Financial / Profile / Marketing and Communications||Your consent; Performance of a contract with you; Necessary for our legitimate interests (to keep records updated and to analyse how customers use our products/ Services); Necessary to comply with legal obligations (to inform you of any changes to our terms and conditions).|
|To enable you to connect with other users, share your interests, participate in a competition||Identity / Contact / Device / Profile / Marketing and Communications||Your consent; Performance of a contract with you / Necessary for our legitimate interests (to analyse how customers use our products/Services and to develop them and grow our business).|
|To administer and protect our business and our mobile application and website including troubleshooting, data analysis and system testing||Identity / Contact / Device||Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security)|
|To deliver content and advertisements to youTo make recommendations to you about goods or services which may interest youTo measure and analyse the effectiveness of the advertising we serve youTo monitor trends so we can improve the App and the Website||Identity / ContactDevice / Content / Profile / Usage / Marketing and Communications / Location||ConsentNecessary for our legitimate interests (to develop our products/Services and grow our business)|
6. Providing your personal data to others:
We may disclose your personal data to any member of our group of companies (this means our subsidiaries, our ultimate holding company and all its subsidiaries) insofar as reasonably necessary for the purposes, and on the legal bases, set out in this policy.
We may disclose your personal data to our insurers and/or professional advisers insofar as reasonably necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, obtaining professional advice, or the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
We may disclose all or any of the personal data set out in this Policy to Google AdMob.
We may disclose enquiry data, profile data, service data or correspondence data to another or multiple clients of our company insofar as reasonably necessary to effect an introduction between CREATIVES and Clients, and to facilitate and administer that relationship, and to assist in the performance of the contract between Creatives and Clients (please see our Terms and Conditions for further definitions and the explanation of the services provided). The legal basis for this is the legitimate interest of our company, namely the provision of our services.
Financial transactions relating to our website and mobile application and services may be handled by our payment services provider. We will share transaction data with our payment services providers only to the extent necessary for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds. You can find information about the payment services providers' privacy policies and practices on their apps and/or websites.
We will also store and use the Personal Data you give to us in order to process your payment for the purchase or subscribe to our services as per our Terms and Conditions and under a contract. We only use third party payment processors that take the utmost care in securing data and/or comply with the GDPR.
We may disclose your transaction data to our accountant(s) for the purpose of enabling them to manage our financial records. This third party will act as a data controller in relation to the data that we supply to it.
In addition to the specific disclosures of personal data set out in this Section, we may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. We may also disclose your personal data where such disclosure is necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
7. International Transfers of Your Personal Data
7.1 Our website and mobile application usage analytics provider, Google Analytics, is situated in the USA. Some of our preferred Social Media Platforms, may also be situated in the USA. The European Commission has made an "adequacy decision" with respect to the data protection laws of the USA. Transfers to the USA will be protected by appropriate safeguards, namely the use of standard data protection clauses adopted or approved by the European Commission.
7.2 Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.
7.5 We take commercially reasonable steps to protect the Personal Data you provide to us from misuse, disclosure or unauthorized access. We only share your Personal Data with trusted third parties who use the same level of care in processing your Personal Data. That being said, we cannot guarantee that your Personal Data will always be secure due to technology or security breaches. Should there be a data breach of which we are aware, we will inform you immediately.
7.6 You acknowledge that personal data that you submit for publication through our website and mobile application or services may be available, via the internet, around the world. We cannot prevent the use (or misuse) of such personal data by others.
8. Retaining and deleting personal data
8.1 Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
8.2 We will retain your personal data as follows:
account data, profile data, service and customer relationship data will be retained for a minimum period of one year from the time of the receipt of this data, and for a maximum period of six years from the end of the period in which the client is in receipt of our services.
In some cases it is not possible for us to specify in advance the periods for which your personal data will be retained. In such cases, we will determine the period of retention based on the following criteria:
the period of retention of correspondence, usage, transaction and notification data will be determined based on their likely relevance to future reviews of company processes, or legal proceedings.
the period of retention of publication data will be determined based on the period of time for which this data is intended to remain in publication.
the period of retention of enquiry data will be determined based on the likelihood of an enquiry resulting in the provision of services to the data subject.
8.3 Notwithstanding the other provisions of this Section, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
9. Third party sites
Our Website and mobile app may contain links to other apps. We are not responsible for the privacy practices or the content of these other apps. Customers and visitors must check the policy statement of these other apps to understand their policies. Customers and visitors who access a linked site may be disclosing their private information. It is your responsibility to keep such information private and confidential.
11. Your data protection rights and Opt-out Policy
If, at any time after registering for information or ordering the Services, you change your mind about receiving information from us or about sharing information with third parties, send us a request specifying your new choice at email@example.com .
Under data protection law, you have rights including:
- Your right of access - You have the right to ask us for copies of your personal information.
- Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing -The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing.
- Your right to object to processing - You have the the right to object to the processing of personal data, (where applicable i.e. where processing is based on legitimate interests, direct marketing and processing for the purposes of scientific/historical research and statistics).
- Your right to data portability - You have the right to request that we provide you with your personal data and where possible, to transmit that data directly to another data controller, (known as the right to data portability), (where applicable i.e. where the processing is based on consent or is necessary for the performance of a contract with the data subject and where the data controller processes the data by automated means)
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at firstname.lastname@example.org .
Please contact via email in first instance.
12. How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at email@example.com .
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues [or other competent supervisory authority of an EU member state if the App is downloaded outside the UK. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
The ICO's address:
Information Commissioner's Office
Helpline number: 0303 123 1113
ICO app: https://www.ico.org.uk
13. Cookies Policy
What are Cookies?
Cookies are files that can be downloaded and saved to your computer, mobile, tablet or other electronic devise when you visit a app. Cookies are used by many apps and can do a number of things, such as remembering your preferences, recording what you have put in your shopping basket, and counting the number of people looking at a app.
The rules on cookies are covered by the Privacy and Electronic Communications Regulations 2003 (PECR). PECR also covers the use of similar technologies for storing or accessing information, such as 'Flash cookies' and device fingerprinting.
A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.
- Cookies may be either "persistent" cookies or "session" cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.
- Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.
Cookies that we use:
Cookies used by our service providers:
- Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and from version to version. You can however obtain up-to-date information about blocking and deleting cookies via these links:
- https://support.google.com/chrome/answer/95647 (Chrome);
- https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-app-preferences (Firefox);
- http://www.opera.com/help/tutorials/security/cookies/ (Opera);
- https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies (Internet Explorer);
- https://support.apple.com/en-us/HT201265 (Safari); and
- https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy (Edge).
- Blocking all cookies will have a negative impact upon the usability of many apps.
- If you block cookies, you will not be able to use all the features on our website and mobile application.
- A number of apps provide detailed information on cookies, including AboutCookies.org and AllAboutCookies.org.
- The European Interactive Digital Advertising Alliance app Your Online Choices allows you to install opt-out cookies across different advertising networks.
- Google has developed a browser add-on to allow users to opt-out of Google Analytics across all apps which use it. This is also available in the Chrome web store.
- Some browsers include a feature known as 'Do Not Track' or DNT. This allows you to indicate a preference that apps should not track you. However, whilst DNT is available in many browsers, apps are not required to recognise its request, so it may not always work. You can get help on how to use DNT in Microsoft Edge, Internet Explorer, Firefox, Chrome, Safari and Opera.
- Internet Explorer has a feature called Tracking Protection Lists which allows you to import a list of apps you want to block.
- For more information on how private browsing works as well as its limitations, visit the support pages for your browser: Microsoft Edge, Internet Explorer, Firefox, Chrome, Safari (mobile and desktop) and Opera.