GDPR Information

Last updated: January 2024

Our Commitment to Data Protection

Merry Hollow is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how we comply with data protection legislation and how you can exercise your rights.

Data Controller

Merry Hollow is the data controller responsible for your personal data.

Contact details:
Email: [email protected]
Address: 47 Artisan Lane, Cotswolds, GL54 2BN, United Kingdom

Lawful Basis for Processing

We process personal data under the following lawful bases:

Contract Performance

Processing necessary for the performance of a contract with you, including:

  • Processing orders for photo books and albums
  • Communicating about your projects
  • Delivering products to you

Legitimate Interests

Processing necessary for our legitimate business interests, provided these do not override your fundamental rights:

  • Improving our services and website
  • Preventing fraud and ensuring security
  • Maintaining business records

Consent

Where you have given specific consent:

  • Marketing communications
  • Non-essential cookies

Legal Obligation

Processing necessary to comply with legal requirements:

  • Tax and accounting records
  • Response to lawful requests from authorities

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of Access

You can request a copy of the personal data we hold about you. We will respond within one month of receiving a valid request.

Right to Rectification

You can request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You can request deletion of your personal data in certain circumstances, including when:

  • The data is no longer necessary for the purpose it was collected
  • You withdraw consent (where processing is based on consent)
  • You object to processing and there are no overriding legitimate grounds

Right to Restriction

You can request that we restrict processing of your data in certain circumstances.

Right to Data Portability

You can request that we provide your data in a structured, machine-readable format for transfer to another service.

Right to Object

You can object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects concerning you.

Exercising Your Rights

To exercise any of these rights, please contact us:

We may need to verify your identity before processing your request. We will respond within one month, or inform you if an extension is necessary.

Data Security Measures

We implement appropriate technical and organisational measures to protect your data:

  • Encryption of personal data in transit and at rest
  • Access controls and authentication procedures
  • Regular security testing and assessments
  • Staff training on data protection
  • Incident response procedures

Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, providing information about:

  • The nature of the breach
  • The likely consequences
  • The measures taken or proposed to address it

International Transfers

Your data is primarily stored within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as:

  • Adequacy decisions
  • Standard contractual clauses
  • Binding corporate rules where applicable

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Helpline: 0303 123 1113

We encourage you to contact us first so we can address your concerns directly.

Updates to This Information

We may update this GDPR information from time to time. The date of the last update is shown at the top of this page.