Aphra Shemza: Privacy Policy 10/05/2021

WHO WE ARE

Aphra Shemza is a multimedia artist based in London. By accessing the website at https://www.aphrashemza.com (the “Website”), you acknowledge and consent to the information collection and use practices described below. If you have questions or concerns, please contact Aphra Shemza at aphra@aphrashemza.com or through the contact page.

PERSONAL DATA

Personal data includes information relating to natural persons who can be identified or who are identifiable, directly from the information in question or who can be indirectly identified from that information in combination with other information. Aphra Shemza collects personal data that you provide (such as name, email address, home address, phone number and IP address) or that you otherwise make available when you access or use the Website.

Most of the personal data is provided when you purchase an artwork from the Website, commission an artwork, fill in forms on the Website, including subscribing to the newsletter and signing up for and attending exhibitions and events. Aphra Shemza may also collect personal data from correspondence with you over letters, emails, calls and social media. 

PURPOSE

Aphra Shemza may use your personal data for the following purposes and reasons:

  • Consent: When you subscribe to the newsletter and enable Aphra Shemza to send it to you on a monthly basis. You have the right to withdraw consent at any time, simply click the link provided in the newsletter.

  • Legitimate Interests: To provide customer support and processing, including some marketing. Aphra Shemza may process a previous customer’s personal data to personalise emails, send updates about Aphra Shemza and the material changes in the Conditions of Sale and Privacy Policy, or for other purposes permitted by law.

  • Contract: Where processing is necessary to carry out the pre-contract and contractual relationship between you and Aphra Shemza.

  • Legal Obligation: To comply with legal obligations, resolve disputes, or enforce terms or agreements with you.

Aphra Shemza may also collect personal data to perform other functions that are not listed above, which will either be described to you when the personal data is collected or it may be collected if you have granted your consent for a particular purpose.

THIRD-PARTY SERVICES

Aphra Shemza uses third-party platforms to support communications. Aphra Shemza is not responsible for their privacy practices and you are encouraged to read their privacy statements. The third-party platforms currently used are set out below, but these might be updated from time to time:

  • Squarespace: A website hosting provider which hosts the Website. Your personal data may be stored and processed in and transferred to countries within and outside of the European Economic Area (EEA) as Squarespace uses servers around the world to ensure fast delivery of content. Squarespace relies on a number of means to transfer personal information which is subject to the European General Data Protection Regulation (“GDPR”) in accordance with Chapter V of the GDPR, including standard data protection clauses and other means (under Articles 45 and 46 of the GDPR). Please read Squarespace’s privacy policy here to understand what personal data they store and how.

  • Mailchimp: A third party email platform to manage Aphra Shemza’s email marketing subscriber lists and send emails to subscribers. When you subscribe to the newsletter your name and email address is held within Mailchimp. Mailchimp has its own security and privacy policy which you can read here.

  • Shopify Payments: In order to process your payment securely Aphra Shemza uses a third party payment processor Shopify Payments which collects, uses, and processes your data, including payment information in accordance with their privacy policy here.

  • iCloud: A cloud storage and cloud computing service from Apple Inc. Aphra Shemza may store the name, email address, address, phone number and purchase history of past clients and attendees of events. Apple has its own privacy policy which you can read here.

Aphra Shemza will not share your personal data with third parties other than as necessary for the purposes outlined above and only with third party service providers that provide business, professional or technical support functions on Aphra Shemza’s behalf or as required by law.

STORAGE AND RETENTION 

Aphra Shemza takes all necessary technical and organizational measures to protect the confidentiality and security of your collected personal data in Aphra Shemza’s databases. While your personal data is protected through a variety of industry-standard access controls, including secure passwords and multi factor authentication, no electronic data transmission or storage of information can be guaranteed to be 100% secure. Aphra Shemza will keep personal data for as long as reasonably necessary to fulfil the purposes it was collected for including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. Aphra Shemza may retain personal data for a longer period in the event of a complaint or where there is a prospect of litigation. Aphra Shemza will then securely dispose your personal data that she holds on her databases by permanently deleting it and any back-up files. Personal data shared with third party service providers is stored and deleted according to their privacy policies. 

COOKIES

A cookie is a small file stored on your computer or device, which enables a website to identify your computer or device as you view our website pages. Cookies allow websites to store your preferences and track how websites are used. The Website is built using Squarespace and for more information on the cookies it uses, please see here. You can use your web browser’s settings to refuse cookies if you wish.

YOUR RIGHTS

Under the Data Protection Act 2018, you have rights including:

  • Right of Access: To ask for copies of your personal data.

  • Right to Rectification: To ask to rectify inaccurate/incomplete personal data.

  • Right to Erasure: To ask for your personal data to be erased in certain circumstances.

  • Right to Restriction of Processing: To ask to restrict the processing of your personal data in certain circumstances.

  • Your right to object to processing: To object to the processing of your personal data in certain circumstances.

  • Your right to data portability: To ask that your personal data be transferred to another organisation, or to you, in certain circumstances.

Please contact Aphra Shemza if you wish to make a request free of charge. Aphra Shemza will come back to you within a month of receipt of your request. 

If you are unhappy with any aspect of how Aphra Shemza handles your data you can make a complaint to the Information Commissioner’s Office (ICO) here. 

CHANGES TO THE PRIVACY POLICY

This Privacy Policy may be updated from time to time. All amendments will take effect immediately upon posting of the updated Privacy Policy on this Website. Aphra Shemza encourages you to periodically review this Privacy Policy to stay informed about how Aphra Shemza is helping to protect your personal data.