STEPHANIE NEWMAN FINE ART


Terms & Conditions

Terms and Conditions for use of my website.

Definitions

The terms 'I', 'me', 'we' or 'us' refers to the Owner ('Stephanie Newman') and Operator ('Mike Tubby') of the website and it's content whose address is set out at the end of this document in the section entitled Business Information.

The term 'you' or 'user' refers to the User of our website regardless of whether the user is a natural person or body corporate.

The term 'website' means the Internet website accessible at the internet URL address https://stephanienewman.uk

Agreement

These Terms and Conditions shall govern all interactions between the User and the Website operated by the Owner(s) and by accessing information on the Website the User agrees to these Terms and Conditions in full.

  1. The content of the pages of this website are provided for your general information only and subject to change without notice.
  2. Neither we nor any third parties provide any warranty or guarantee as to the accuracy, timeliness, performance, completeness or suitability of the information and materials provided on this website for any particular purpose.
  3. You acknowledge that the information and materials on this website may contain inaccuracies or errors and we expressly exclude liability for any such inaccuracies or errors to the fullest extent permitted by law.
  4. Your use of any information or materials on this website is entirely at your own risk, for which we shall not be liable. It shall be your own responsibility to ensure that any products, services or information available through this website meet your specific requirements.
  5. This website contains material which is owned by us and or licensed to us. This material includes, but is not limited to, the design, layout, look, appearance, graphics and photographs as defined in the Copyright and Acknowledgements sections.
  6. You may not publish, redistribute, sell, rent, license, sub-license, reproduce, duplicate, copy or otherwise deal in or exploit material on this website for any purpose.
  7. You may not upload, publish or post photographs from this website to any other website or social media site including but not limited to Facebook, Instagram, WhatsApp, Twitter, TikTok, Snapchat, etc.
  8. We may include or embed digital fingerprints, watermarks, special metadata or forensic information (''watermarks'') in photographs used on this website to protect our assets and Copyright material. Any watermarks that we embed in photographs or images may be overt (visible) or covert (invisible) and are intended to protect our assets.
  9. This website may use 'Cookies' or similar Internet technologies to monitor pages viewed and browsing preferences. Our use of Cookies is set out in our Cookie Policy below.
  10. Any and all trade marks reproduced in this website which are not the property of, or licensed to, me are duly acknowledged.
  11. This website may include links to other websites. These links are provided for your convenience to provide further information. Any links provided do not signify that we endorse the website(s) to which we link and we are not responsible for the content of the any website for which we provide a link.
  12. Other websites may link to this website and prior permission is not required as long as this website is not misrepresented or misused in any way.
  13. You may not use this website to upload, transmit or distribute any computer virus, trojan, malware or harmful software.
  14. You may not use this website for cross-site scripting, denial of service or other forms of attacks on this or any other computer on the Internet.
  15. You must not use this website in any way that causes, or may cause, damage to the website or impairment of the availability or accessibility of the website; or in any way which is unlawful, illegal, fraudulent or harmful, or in connection with any unlawful, illegal, fraudulent or harmful purpose or activity.
  16. Unauthorised use of this website may give rise to a civil claim for loss or damages under Tort and be a criminal offence.
  17. No part of these Terms & Conditions are intended to be part of an Offer to provide Goods or Services or to form any part of a Contract.
  18. No part of these Terms & Conditions are intended to transfer any rights to a third-party.
  19. Your use of this website and any dispute that may arise out of such use shall be subject to the jurisdiction and laws of England & Wales.

Privacy Policy

This Privacy Policy sets out how I, Stephanie Newman, as a self-employed individual, comply with the General Data Protection Regulation (GDPR) and the Data Protection Act (2018).

I value the security of your information, however muich of the leglislation and rules are designed for organisations and most self-employed people have to do our best to keep up. I used the ICO booklet, “Preparing for the General Data Protection Regulation – 12 Steps to Take Now.” and have based this policy on that guidance. Further information is available on the ICO Website.

Awareness

As a self-employed individual there is no one else in my organisation to make aware of GDPR regulations.

Information I collect

I collect and hold the following information:

  1. Contact details for potential clients and customers which may include your name, address, email address and telephone number.
  2. Names, addresses and billing information for clients for which I do work, saved on my personal computer (not part of this website).
  3. Access logs for my webserver that includes your IP address, date and time of accesss, and type of of computer, operating system and webrowser (called the User Agent).

Communicating privacy information

I have communicated privacy information in the following ways:

Lawful basis for processing data

As set out in the GDPR and ICO guidance I process your information under the following lawful basis:

Consent If you fill out my 'Contact form', send me email or telephone me I consider this consent to have and use your contact information as it forms legitimate interest for me in order to provide my goods and services.

Contract If I provide goods or services for you then we enter into a contractural arrangement for which I need your name, address and contact details and I have a legal obligation to record these details - for example on an invoice or to HMRC if requested.

Data Protection Officer

As I am a sole-trader I have appointed myself as the Data Protection Officer.

Data Protection Impact Assessment

I have performed a Data Protection Impact Assessment (DIPA) and determined that I use the smallest set of data needed for my self-employed status.

Data Protection by Design

I use the smallest set of data practical combined with separation of presentation, i.e. this website and back office systems, i.e. my accounts on my personal laptop.

Individuals’ rights

I will provide a copy of the information that I hold on you by request (Data Access Request) but I may require proof of identity before providing this information.

I will ammend contact details (name, address, telehone number, email address, etc.) if they are incorrect but I may require proof of identity before updating this information.

I will delete any information that I hold on you if requested by you, but subject to legal obligations or restrictions - for example your contact details on invoices will remain in my Accounts.

International

I live and work in the United Kingdom (UK) and my intended audience and clients are based in the UK.

I do not transfer any information outside of the UK or process any information outside of the UK.

The data protection supervisory authority in the UK is Information Comissioners Office (ICO).


Security Policy

This section addresses data and website security.

Website security

This website runs on a server located in the United Kingdom (UK) that is maintained and updated in line with NCSC Cyber Essentials and ISO27001 best current practice.

The webserver uses TLS 1.2 (or higher) security with 256-bit AES encryption and a Domain Validated (DV) server certitficate issued by LetsEncrypt.

This website scores 'A' on the Qualys SSL Labs Website Security test suite - click here to verify.

The website, server and hosting facility undertake periodic penetration testing and other security testing.

Data security

I beleive that I have used reasonable endeavours to prevent data breaches by:

  1. Using a webserver provided in the UK by a reputable orgaisation.
  2. Minimising as far as possible the information stored on the webserver other than my content.
  3. Storing only webserver access logs and no other Personally Identifiable Information (PII)
  4. Storing customer and client information 'off line' on a laptop computer which is encrypted and uses a strong password.
  5. Using 'strong passwords' for my laptop, email and the webserver admin functions.

Cookie Policy

About Cookies

Cookies are small peices of data that are downloaded to your computer, to improve operation of a website and your user experience. For information about Cookies and how they work see the Wikipedia article HTTP Cookies.

Cookies not used here

At the time of writing this policy, this website does not use any Cookies for its operation and as a consequence there are no cookies set, stored in your browser or sent by this website. There is nothing to disclose and nothing that you can disable in respect of Cookies and as a consequence there are no Cookie warnings or pop-ups.

You can verify that we do not use Cookies by clicking on the padlock symbol next to the website address in your browser to obtain security information for the webite and observe that no Cookies are in use.

If we change the website in such a way that Cookies become desireable or necessary will update this polic and add a Cookie warning.


Business Information

For the purpose of the Companies (Trading Disclosures) Regulations 2008 this website is run for, and on behalf of, Stephanie Newman who is a self-employed individual and does not have a Limited Company or Registered Office.

For the purpose of privacy and security my home address is not published on this website. Written correspondance can be sent to me via Stephanie Newman C/O Unit 96E, Blackpole Trading Estate West, Worcester, WR3 8TJ.

The operator of the website is Mike Tubby, of Unit 96E, Blackpole Trading Estate West, Worcester, WR3 8TJ on behalf of Stephanie Newman and may be contacted via email: hello@stephanienewman.uk or by phone 01905888007.