top of page

I am committed to keeping buyers’ personal information secure and confidential. Lawful Basis for Processing Personal Data For the purposes of The GDPR, I am the Data Processor when selling on and processes all personal data lawfully, fairly and in a transparent manner. Under Article 6 of The GDPR, the lawful basis on which we process personal data received from shirleys pencil art  is that of “Contract” - whereby processing is necessary in order to fulfill buyer orders and enquiries.  I retain information provided by shirleys pencil art, such as transaction information for internal financial accounting purposes. It is a legal requirement to retain this information for a period of 7 years.   Data We Receive: Personally Identifiable Information. I receive personally identifiable information from shirleys pencil art only when it is voluntarily submitted by buyers when placing an on-line order. The data we receive includes: name, billing address, delivery name, delivery address, e-mail address (in encrypted format), telephone number, date of order, items ordered, value of items ordered, chosen method of delivery.  do not sell or rent personally identifiable information to any third party for any purpose.  How I use buyers’ personal information.  I may use any personal buyer information provided by shirleys pencil art to:  Process and dispatch buyers’ order/s, via RoyalMail or MyHermes,  carry out regulatory checks to meet our legal obligations, Prevent and detect crime, Develop and improve our products. I treat all information we hold about buyers as private and confidential. I will not reveal any personal details or details concerning buyers’ orders to anyone not connected with us, unless: The buyer asks us to reveal the information, or I have a buyer’s permission to do so, I am required or permitted to do so by law, It is required by law enforcement, fraud prevention or credit reference agencies, Data Subject Access Requests. Under The GDPR buyers are entitled to obtain from us (the Data Processor for the purposes of The GDPR when selling on shirleys pencil art) a copy of the data held concerning them and to have any inaccuracies in the data rectified. I am obliged to provide this data to within 30 calendar days of the month of the request and free of charge. However I have the right to refuse or charge for requests that are manifestly unfounded or excessive and repetitive. Click her

bottom of page