Privacy Notice

This privacy notice gives you information about how our business, operated through Surface Horizon Limited, collects and uses certain limited personal information about you. It is important that you read this privacy notice so that you are fully aware of how and why we are using your data.

Controller

Surface Horizon Limited is a data controller and is responsible for your personal data. We are a company registered in England and Wales. Our registered address is 7 Bell Yard, London WC2A 2JR.Our registration number with the Information Commissioner’s Office is ZC146734.

Should you have any questions or complaints please do contact us in the first instance.We hope to address any issue directly but we need to tell you that you also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), with respect to data protection issues (www.ico.org.uk).

How we will use your personal data

We will only use your personal data when the law allows us to. We will use your personal data in the following circumstances:

  • If you consent; or
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; or
  • Where we have a contractual obligation to fulfil; or
  • Where we need to comply with a legal or regulatory obligation.

Specifically, the above circumstances apply as follows:

Data relating to our business contacts (e.g. name, contact details, email address)

  • Where it is necessary for our legitimate interests
  • Where we have a contractual obligation to fulfil; or
  • Where we need to comply with a legal or regulatory obligation.

Data relating to anyone interested in our work (e.g. name, contact details, email address).

  • If you consent; or
  • Where it is necessary for our legitimate interests

Cookies

On our website, we have chosen not to use any “non-essential” cookies.Instead, we use a cookie-less analytics option that aggregates data about website visitors to make it non-identifiable so that no personal data is collected.

We may also place strictly necessary cookies that are essential for the website to function.

Disclosures of your personal data

As most companies do, we use third party service providers to assist us in operating our business. As you would expect, these services include, but are not limited to, IT provision, CRM database and accounting software.We may share your information with these third parties only so that we can operate our business. Any company providing services to us like this acts as a data processor and is contractually bound only to use personal data we share with them, for the purposes prescribed by us.We do not allow our service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

We may also share certain limited personal information with third parties where one of the above lawful justifications applies (e.g. you ask us to do so or we consider it is in our legitimate interests).

We may also share your personal information with third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Privacy Policy.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

International transfers

We do not generally transfer any personal data outside of the UK or the European Economic Area.

Where our service providers are based outside the UK/EEA, we ensure that any transfer of personal data to them is done in accordance with current UK data protection laws so that you have the comfort that your data will be protected even outside the UK/EEA. Should you have any specific questions about this, please do let us know.

Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have procedures for dealing with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Data retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances, you can ask us to delete your data: see below for further information.

Your legal rights

You have a number of rights under the UK data protection laws in relation to your personal data.

You have the right to:

  • Request access to your personal data (commonly known as a "subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
  • Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
  • Request erasure of your personal data in certain specific circumstances. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
  • Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) as the legal basis for that particular use of your data. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your right to object.
  • Request restriction of processing of your personal data.

Contact details

If you have any questions about this privacy policy or about the use of your personal data or you want to exercise your privacy rights, please contact us by email here: studio@margueritehumeau.com.