Introduction

ArtiCha respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect and process your information when you visit our website, accessible from https://articha.co or https://articha.co.uk, or when you use our products and services. It also outlines what your data is used for, how we keep it safe, and how long we retain it.

Charlène Collet is the founder and owner of ArtiCha (referred to as ‘we’ or ‘our’ in this document). We are fully registered with HMRC and the UK Information Commissioner’s Office (ICO), complying with both the UK GDPR and EU GDPR laws to ensure your data is protected.

What information we collect, use, and why

We collect and process the following information:

• Identity and personal data may include first name, maiden name, last name, title, marital status, gender, occupation, and any other personal data concerning your household (e.g., partner and children).
• Contact data may include your email address, telephone and mobile number(s), and any other address you share with us.
• Financial data may include your bank account and payment card details.
• Technical and usage data may include our login data, IP addresses, browser details, website user journey information, including viewing history and cookies. For more details about cookies handling, see section ‘Cookies Policy’ below.
• Marketing preferences may include your consent for receiving communications about our products and services, testimonials and photos you consent to share with ArtiCha.
• Other information may include preferences and interests shared through client surveys or service delivery, or any information required for legal obligations.

How we use your information:

The information we collect helps ArtiCha understand your needs and provide you with better service. We may use your information in the following ways:

• Service delivery & internal record keeping – your details will be kept for administrative and customer service purposes to perform any contracts entered between you and us.
• Enquiry delivery & correspondence – to contact and manage your requests, and notify you when necessary.
• Marketing communications – to notify you of our services, news, and general information if you have requested or consented to receive our communications.
• Client testimonials & photos – we may use these on ArtiCha’s website and relevant social media accounts if you have given your permission.
• Market research & service improvement – to conduct market research on our services and your interests, to improve our offerings and content.

Legal basis for processing:

We process your data based on:

• Consent: when you have given clear consent for us to process your data.
• Contract: processing is necessary for a contract we have with you.
• Legal obligation: processing is necessary for compliance with a legal obligation.
• Legitimate interests: processing is necessary for our legitimate interests, such as improving our services.

Sharing your information:

We may share your information in the following situations:

• With service providers: we may employ third-party companies and individuals to facilitate our services, provide services on our behalf, or perform service-related tasks. These third parties have access to your information only to perform these tasks and are obligated to agree with this Privacy Policy and not to disclose or use your data for any other purpose.
• Third-party links: our website and delivery materials may include links to other websites, plugins, and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these websites and are not responsible for their privacy policies.
• With your consent: we may disclose your personal information for any other specific purpose with your prior consent.

Cookies Policy

Cookies are files with small amounts of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your computer’s hard drive.

Our website uses necessary and functional cookies to help authenticate users, analyse web page traffic, and improve website performance and user experience. You can instruct your browser to refuse all or some cookies or to indicate when a cookie is being sent. However, disabling cookies may affect website performance and functionality.

How we protect & safeguard your information

We strive to use the best available means to protect your personal data. We cannot guarantee its absolute security, but we handle data with the utmost vigilance and care. Your data is stored in secure, password-protected software with two-factor authentication processes.

In the event of a data breach:

In case of a data breach, we will take the following steps within 72 hours of discovering the incident:

• Notify the police if it is a physical theft or loss of a business laptop or phone.
• Notify phone providers if it is a physical theft or loss of a phone and request that the phone be blocked.
• Notify our email provider in case of email hacking.
• Report the data theft, breach, or hack to the Information Commissioner’s Office (ICO) if there is a high likelihood of a resulting risk to clients’ rights and freedoms.
• Contact all affected clients to provide advice on protecting themselves from the effects of the breach.

Retention: how long will we keep your data

We retain your data only for as long as necessary for the purposes set out in this Privacy Policy. We may retain data longer if required for legal obligations, dispute resolution, or enforcing agreements.

By law, we must keep basic client information (including contact, identity, financial, and transaction data) for six years after they cease being clients for tax purposes.

Your data protection rights

Under data protection law, you have rights including:

• Right of access – you have the right to ask us for copies of your personal data.
• Right to rectification – you have the right to ask us to correct inaccurate date or complete incomplete information.
• Right to erasure – you have the right to ask us to delete your personal data in certain circumstances.
• Right to restriction of processing – you have the right to ask us to restrict the processing of your personal data in certain circumstances.
• Right to object to processing – you have the right to object to the processing of your personal data in certain circumstances.
• Right to data portability – you have the right to ask that we transfer the personal data you gave us to another organisation, or to you, in certain circumstances.
• Right to withdraw consent – when we use consent as our lawful basis you have the right to withdraw your consent.

To exercise your rights, please contact us using the contact details at the bottom of this Privacy Policy. If you make a request, we have one calendar month to respond to you. If you have any concerns about our use of your personal data, feel free to contact us. If you remain unhappy, you can also complain to the ICO. You can find out more about your rights at www.ico.org.uk

The ICO’s address is Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline number is: 0303 123 1113

Changes to the Privacy Policy:

This policy is effective as of 29th July 2024 and is reviewed regularly. We may update our Privacy Policy from time to time. Changes to this Privacy Policy are effective when they are posted on this page. Last updated: July 2024.

Contact:

If you have any questions regarding our Privacy Policy and how your information is handled, or if you wish to access, amend, or update your information, please contact us at hello@articha.co