Privacy and Data Protection
The processing of personal data is governed by [the Data Protection Bill/Act 2017 the General Data Protection Regulation 2016/679 (the “GDPR” and other legislation relating to personal data and rights such as the Human Rights Act 1998]
1. WHO ARE WE
Our website address is: https://drawingontheword.com.
Any reference to “us” “we” “our” is a reference to this entity. For the purposes of the above-named European Union (EU) Legislation, Drawing on the Word is classified as the data controller of your data.
We are committed to protecting your privacy. This notice along with our Terms & Conditions set out the basis on which any personal data we collect from you that you provide us will be processed by us. Please read the following carefully to have an understanding of our practices regarding your personal data and how we handle it.
2. PERSONAL DATA WE COLLECT AND HOW WE COLLECT IT
2.1 Information you provide to us
2.1.1 Names and email addresses
Whenever you download a digital product (eg eBook, cheat sheet, infographic, book sample etc), we will ask for your name and email address so that we can send you the resource.
When you download the product, you will have a separate option to subscribe to the mailing list by checking a consent box.
Once you do so, we will collect your name and email address. This is to enable you to receive updates about the latest blog post, offers of any resources, newsletters and occasional marketing messages. You will never be sent any spam.
Visitors have the option to subscribe to the mailing list separately for the above-described purposes by clicking here and filling in the form.
Visitors can unsubscribe at any time by following the link provided at the bottom of the emails, or by requesting to be removed by emailing email@example.com.
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
Every time you comment, you have the option to check a consent box saying that you agree to having your data stored and handled by this website.
If you have a Word Press account and choose to comment via that, your name will show a link to your website. Your email address will not be displayed for public viewing.
2.1.3 Contact forms
Whenever visitors use the contact forms, your name and email address are logged.
In this situation, your details are not automatically added to the mailing list but are simply collected in order for us to have a means by which to contact you and respond to your query.
Each time you use the contact form, you have the option to check a consent box saying that you agree to having your data stored and handled by this website.
2.2 Information automatically collected about you
2.2.1 Log Files
Like many other websites, Drawing on the Word makes use of log files. These files merely log visitors to the site – usually a standard procedure for hosting companies and a part of hosting services’s analytics. The information inside the log files includes internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date/time stamp, referring/exit pages, and possibly the number of clicks. This information is used to analyse trends, administer the site, track user’s movement around the site, and for reasons of fraud protection. IP addresses, and other such statistical information about our user’s browsing actions and patterns are not linked to any information that is personally identifiable.
2.2.2 Your Communications Directly To Us
We collect information about you when you send, receive, or engage with messages with us, including when you submit personal information or requests by emailing robert@drawingontheword through our website or when you contact us via a contact form. We retain those communications to process your inquiries, respond to your requests, and improve our services.
The website makes use of the following types of Cookies:
Session Cookies: These types of Cookies store an anonymous session ID on your device during your web session. Once you close your browser, these are automatically deleted. Session Cookies ensure that the Website recognises you and allows you to browse each page without being asked for the same information or consent you have already given to the site. Session Cookies do not collect any personal data that is stored on your device.
Persistent Cookies: These Cookies are stored as a file on your device and remain until you close your web browser. These enable websites to remember your information and settings whenever you visit them in the future. This provides you with faster access (eg so that you don’t have to log in again or will remember your language preferences).
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
2.2.4 Blocking Cookies
2.3 Children's information and protection
We believe it is important to provide added protection for children online. We encourage parents and guardians to spend time online with their children to observe, participate in and/or monitor and guide their online activity. Drawing on the Word does not knowingly collect any personally identifiable information from children under the age of 16 without the consent of the parent or legal guardian of that minor
If a parent or guardian believes that Drawing on the Word has in its database the personally-identifiable information of a child under the age of 16, please contact us immediately at firstname.lastname@example.org. If we discover and have confirmation that we have collected or received personal information from a child under 16 without verification of parental consent, we will promptly remove such information from our records.
2.4. Third party information collection
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
The website may contain links to and from the websites of our Partner Networks, Affiliates and advertisers. You can read more about affiliate links here.
Please note that if you follow any links to these websites you are being redirected off our website on to theirs. Such websites will have separate and independent privacy policies.
We do not accept any responsibility or liability for their policies, nor for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites. Please check these websites and their policies before submitting any personal data to them.
You should consult the respective privacy policies of these third-party ad servers for more detailed information on their practices as well as for instructions about how to opt-out of certain practices.
Our website hosting companies use the following Cookies:
Strictly Necessary Cookies: These Cookies are required for the overall operation of our Site. These Cookies will also enable you to shop securely through check out shopping cart services and billing services on websites the feature is available.
Analytical/Performance Cookies: These Cookies allow us to recognize and count the number of Visitors and to see how they navigated through our Site. This data helps us to improve technical & design features and overall how the Site ‘works’. This will help ensure you to find information easily.
Functional Cookies: These Cookies are used to recognize you and personalize our content. Perhaps greet you by name, remembering your set preferences or translate content to your language.
Targeting Cookies: These Cookies record your visit to our Site. The pages you have visited and the links you have followed contained within our site. This information is used to make our Site and the advertising that appears on it to be of relevant interest to you. Our hosting companies may also share this information with third parties strictly for this purpose.
If you wish to disable cookies, you may do so through your individual browser options. More detailed information about cookie management with specific web browsers can be found at the browsers’ respective websites.
3. WHO WE SHARE YOUR DATA WITH
3.1 Disclosure to our service providers
Your personal data is treated as strictly confidential.We do not share your data with any third parties except where necessary for the running of the website. These include service or web hosting providers who help with the delivery of our products and business operations and assist us in operating our website and serving our users.
Some of the platforms used to send emails and notifications are built and managed by third parties. The information you provide is sent securely to those services to provide such functionality. They merely process your data and provide the means by which emails can be automated.
In the case of your names and email addresses, this information is processed by ConvertKit LLC [“ConvertKit”], an email service provider. ConvertKit merely process your data and provide the means by which emails can be automated.
All information you provide to us via comments and contact forms is stored on a secure encrypted server hosted by SiteGround Hosting Ltd.
They will have access to your information as reasonably necessary to perform these tasks on our behalf and are obligated not to disclose or use it for other purposes.
Visitor comments may be checked through an automated spam detection service.
3.2 Legal Process
We may also release information when it’s release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property or safety.
4. HOW WE PROTECT YOUR PERSONAL DATA
Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. In addition, all sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology.
We implement a variety of security measures when a user enters, submits, or accesses their information to maintain the safety of your personal information.
The information shared with ConvertKit is stored on a secure cloud, and powered by a number of servers across various locations. This information is protected by the Privacy Shield Framework, as set forth by the U.S. Department of Commerce. This relates to the collection, use, and retention of Personal Data transferred from the European Union (“EU”), European Economic Area (“EEA”), and Switzerland to the United States.
ConvertKit has certified to the U.S. Department of Commerce that it adheres to and subjects all Personal Data received from the EU/EAA and Switzerland to the Privacy Shield Principles. This includes the Supplemental Principles (collectively, the “Privacy Shield Principles”)
At the present time, we do not ask for credit card information. In the event that this information is required in order to complete a transaction, we will employ vulnerability scanning and/or scanning to PCI standards.
While we take precautions and invest in security for any stored user data, if our user data is ever compromised, we promise to send an email to inform users within 72 hours of becoming aware of the breach.
5. HOW LONG WE RETAIN YOUR DATA
If you give consent for us to have your name and email address, these are retained indefinitely until you unsubscribe or request for this data to be deleted.
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
At present, there is no registration required in order to use the website. However, this may change in future if a store front is implemented on the site.
6. RIGHTS YOU HAVE OVER YOUR DATA
GDPR Data protection legislation gives you the right to the following:
• The right to access data: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us.
• The right to delete data: You can also request that we erase any personal data we hold about you.
• The right to edit data: You may ask us to edit, correct or update your personal data if it is inaccurate.
• The right to limit or object to use of data: You can ask us to cease using some or all of your personal data or to limit its use.
• The right to withdraw your consent to use of data: You can withdraw consent to the processing at any time for any data to which consent was sought by contacting me by email at email@example.com
This does not include any data we are obliged to keep for administrative, legal, or security purposes.
If under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to, enforce or apply our Terms & Conditions and other agreements; or to protect our rights, property of safety of our customers, employees or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
To make these or any other requests with respect to your identifying personal data we are holding, please send an e-mail request to: firstname.lastname@example.org
Under this new legislation we have 30 Days in which to respond to your request. We may decline to process requests if we cannot verify the requester’s identity, if we believe the request will jeopardise the privacy of others, if we believe the change would violate any law or legal requirement or cause the information to be incorrect, or for a similar legitimate purpose. In any case, where we provide information access, deletion or correction, we perform this service free of charge, except if doing so would require a disproportionate effort.
Questions regarding our policy can be addressed by contacting us at email@example.com