We use your information to make our relationship with you run as smoothly as possible. If we change the way we approach privacy, we will update this policy. So, check in on this page from time to time to see if you’re still happy with how we do things.
Please note, RSVP Lucy will never sell your information to any third parties, nor share your information with third parties for any marketing purposes. We don’t generate a newsletter, offer any subscriptions or generate bulk or direct mail shots for marketing. Rest assured that if we contact you, it will be about an enquiry you’ve made or any of the design services we have agreed upon. All communications will be sent directly from RSVP Lucy to you.
What information does RSVP Lucy collect?
When you make an enquiry, either via the website, via social media, by phone, by email, or in person, we will collect some personal data from you. For example, this could include your name, email address, telephone number, and home/business address. If you go onto engage us to design your invitations for you, you may also provide other event details such as event date, event location, guest names, and gift list information.
What does RSVP Lucy do with the personal information you provide?
We only process the personal information that you give to us so that we can carry out the project you’re engaged us to do, and to improve the service we offer you. To fulfil these objectives, we may process the following categories of personal data about you:
Communication Data this includes any communication that you send to us whether it be through email, text, Whats app message, social media messaging, social media posting or any other communication you send us. We process the data so we can communicate with you, and for record keeping, and for the establishment, pursuance or defence of legal claim. Our lawful ground for this processing is our legitimate interests which in this case are to reply to communications sent to us, to keep records and to establish, pursue or defend legal claims.
Customer Data that includes data relating to any purchases of goods and/or services such as your name, title, billing address, delivery address email address, phone number, contact details, purchase details and your card details. We process this data to supply the goods and/or services you have purchased and to keep records of these transactions. Our lawful ground for this processing is the performance of a contract between you and us and/or taking steps at your request to enter into such a contract.
Limited circumstances when we may share your information with select third parties RSVP Lucy requires that all third parties to whom we transfer your data respect the security of your personal data and to treat it in accordance with the law. We only allow such third parties to process your personal data for specified purposes and in accordance with our instructions. RSVP Lucy shares personal information with the following third parties:
RSVP Lucy engages external professional printers to carry out the printing of all RSVP Lucy invitations. To fulfil the contract between us, and print your invitations, we have to share your personal information with the printers for the duration of the printing process. We send the artwork for your invitations, containing personal information such as names and addresses, to our external printers by either email attachment and / or by using a file transfer service such as WeTransfer.
RSVP Lucy shares sample invitations with other RSVP Lucy customers. If your invitation contains personal information as part of the design, we will seek your express permission before sharing the invitation design with a third party or redact the personal information prior to showing the invitation to the third party.
RSVP Lucy will photograph all assets designed by us to share on our website and social media platforms, after the event has taken place. If you don’t want the designs we have done for you to feature in our marketing, please let us know in writing. For the avoidance of doubt, we will never share images which feature your contact details (for example telephone number, home address), however your full names and event date and time and location may be visible.
We have put in place security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed without authorisation. Access to our computers is secured by password. Our computers re regularly backed up to external hard drives, which along with our computers are always kept in our locked office. Any information that has been transmitted to paper is filed and kept secure in our locked office. Your invitations, once printed but before being distributed, will be kept locked in our office too.
We also allow access to your personal data only to those partners who have a business need to know such data. They will only process your personal data on our instructions and they must keep it confidential.
We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach if we are legally required to.
Keeping hold of your data
We will only keep your personal information for as long as necessary to provide the services you have requested, or for other essential purposes such as complying with our legal and tax obligations, resolving disputes and enforcing our policies.
We will delete all data after it is no longer necessary for us to retain it OR immediately upon request in compliance with your data protection rights.
You’ve got lots of rights when it comes to your personal information. While some of these rights apply generally, certain rights only apply in limited cases. We’ve described them below:
You may have the right to access and receive a copy of the personal information we hold about you by contacting us using the contact information below.
Change, restrict, delete.
You may also have rights to change, restrict our use of, or delete your personal information. Unless there are exceptional circumstances (like where we are required to store data for legal reasons) we will generally delete your personal information upon request.
You can object to our processing of some of your information based on our legitimate interests. If you do object, we will of course delete your personal information unless we have compelling and legitimate grounds to carry on using that information or if it is needed for legal reasons.
If you want to raise a concern about our use of your information you have the right to do so with your local data protection authority.
How to Contact me
For purposes of EU data protection law, I, Lucy Barnett, am the data controller of your personal information. If you have any questions or concerns, you may contact me at firstname.lastname@example.org