This privacy statement was last updated on April 15, 2021 and applies to citizens of the United Kingdom.

In this privacy statement, we explain what we do with the data we obtain about you via https://nicholasvince.com. We recommend you carefully read this statement. In our processing we comply with the requirements of privacy legislation. That means, among other things, that:

  • we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
  • we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
  • we first request your explicit consent to process your personal data in cases requiring your consent;
  • we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
  • we respect your right to access your personal data or have it corrected or deleted, at your request.

If you have any questions, or want to know exactly what data we keep of you, please contact us.

1. Purpose, data and retention period

1.1 Contact – Through phone, mail, email and/or webforms

For this purpose we use the following data:

  • Name, Address and City
  • Email address

The basis on which we may process these data is:

Consent obtained

Retention period

We retain this data until the service is terminated.

1.2 Payments

For this purpose we use the following data:

  • Name, Address and City
  • Email address
  • Financial data
  • Location

The basis on which we may process these data is:

Consent obtained

Retention period

Upon termination of the service we retain this data for the following period: 7 years.

1.3 Newsletters

For this purpose we use the following data:

  • Email address
  • Other:
First Name

The basis on which we may process these data is:

Consent obtained

Retention period

We retain this data until the service is terminated.

1.4 To support services or products that a customer wants to buy or has purchased

For this purpose we use the following data:

  • Name, Address and City
  • Email address
  • Financial data
  • Location
  • Visitor behavior

The basis on which we may process these data is:

Consent obtained

Retention period

We retain this data until the service is terminated.

1.5 To be able to comply with legal obligations

For this purpose we use the following data:

  • Name, Address and City
  • Email address
  • Financial data

The basis on which we may process these data is:

Consent obtained

Retention period

Upon termination of the service we retain this data for the following period: 7 years.

1.6 Compiling and analyzing statistics for website improvement.

For this purpose we use the following data:

  • Location
  • Visitor behavior

The basis on which we may process these data is:

Consent obtained

Retention period

Upon termination of the service we retain this data for the following period: 14 months.

1.7 To be able to offer personalized products and services

For this purpose we use the following data:

  • Other:
Dedication text to be added in addition to my signature

The basis on which we may process these data is:

Consent obtained

Retention period

Upon termination of the service we retain this data for the following period: 7 years as part of order data.

2. Sharing with other parties

We only share or disclose this data to processors for the following purposes:

Processors

Name: stripe.com
Country: Ireland
Purpose: Payment processing

Name: PayPal.com
Country: Luxembourg
Purpose: Payment processing

Name: maxmind.com
Country: USA
Purpose: To identify shipping rate

Name: royalmail.com
Country: United Kingdom
Purpose: Creation of shipping labels

Name: mega.io
Country: New Zealand
Purpose: Data backups

Name: Apple
Country: USA
Purpose: Data storage

Name: Aut O’Mattic A8C Ireland Ltd.
Country: Ireland
Purpose: Wordpress and WooCommerce

Name: NameCheap
Country: USA
Purpose: Website hosting

Name: MailChimp
Country: USA
Purpose: Newsletter

Name: Google
Country: USA
Purpose: Anonymised analysis of website traffic

Name: WeTransfer
Country: USA
Purpose: Transfer of Virtual Convention video files

3. Cookies

Our website uses cookies. For more information about cookies, please refer to our Cookie Policy. We have concluded a data processing agreement with Google.Google may not use the data for any other Google services.The inclusion of full IP addresses is blocked by us.

4. Security

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorised access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

5. Third-party websites

This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.

6. Amendments to this privacy statement

We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.

7. Accessing and modifying your data

If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the information below. You have the following rights:

  • You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
  • Right of access: You have the right to access your personal data that is known to us.
  • Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish.
  • If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted.
  • Right to transfer your data: you have the right to request all your personal data from the controller and transfer it in its entirety to another controller.
  • Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.

Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.

8. Automated decision-making

We make decisions on the basis of automated processing with respect to matters that may have (significant) consequences for individuals. These are decisions taken by computer programmes or systems without human intervention.

We use Maxmind geolocation to automatically provide you with the appropriate shipping rate to your country in GBR, CAN and USA. This is calculated only at the COUNTRY level and no personally identifiable data is retained by us. Maxmind’s Privacy Policy can be found here: https://www.maxmind.com/en/privacy-policy

9. Submitting a complaint

If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Information Commissioner’s Office:Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

10. Data Protection Officer

Our Data Protection Officer has been registered with the Information Commissioner’s Office. If you have any questions or requests with respect to this privacy statement or for the Data Protection Officer, you may contact Nicholas Burman-Vince, or via nburmanvince@me.com.

11. Children

Our website is not designed to attract children and it is not our intent to collect personal data from children under the age of consent in their country of residence. We therefore request that children under the age of consent do not submit any personal data to us.

12. Contact details

Bibliofear
13 Macclesfield Road
LONDON
SE25 4RY
United Kingdom
Website: https://nicholasvince.com
Email: nicholas.vince@me.com

Annex

3rd Party Privacy Policies Below are links to the privacy policies of 3rd parties with expanded explanations of how we use their services.

  • NameCheap – our website hosting company. (Anonymised data.)
  • Automattic – Data Processor for WordPress website management and WooCommerce order processing.
  • MailChimp  – for the creation of newsletters
  • Royal Mail for the purposes of creating shipping labels, which include your name, address and for international order the products for customs purposes.
  • MEGA for the purpose of encrypted data backups of order information to comply with HMRC tax record keeping.
When processing payments, some of your data will be passed to the payment processor, including information required to process or support the payment, such as the purchase total and billing information. 

What third parties we receive data from

We use data from these third parties:
  •  MaxMind for geolocation purposes to present the correct shipping cost and displaying relevant Cookie and Privacy policies .
  • Google – analysis of visitor numbers, browsing history and location etc.

How long we retain your data

Order data. Under UK HMRC tax rules we keep copies of invoices and orders for 5 years from the 31st January following the end of the previous tax year end on 5th April. E.g. records of an order placed on 15th October 2021 will be kept until 31st January 2027. Email correspondence relating to acting, appearances and general correspondence generated via the Contact page, 12 months or until the completion of a project, whichever is the longer.

What rights you have over your data

You can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.  

WordPress

Who we are

Suggested text: Our website address is: https://nicholasvince.com.

Comments

Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year. If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed. If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

Suggested text: If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Suggested text: Visitor comments may be checked through an automated spam detection service.