We are GDPR compliant here at Matt-at-Lotus. We collect very little information, most is collected via Google analytics to assess website performance.
The type of information we collect:
We receive, collect and store any information you enter on our website or provide us in any other way, such as signing up for our newsletter*, where we collect your email address. In addition, we collect the Internet protocol (IP) address used to connect your computer to the Internet. We also collect your purchase history and details added when paying via a third party payment processor. Namely: email address, physical address (where attached to your payment processor account), real name and amount paid/to be paid. We do not directly collect, store or see your card details as these are collected by the payment processor, a third party. We are not responsible for these details or how they are stored.
We may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse away from the page. Although we do not directly store this information - it is stored by Google analytics - we advise, and use ourselves, a VPN for added peace of mind. You always have the right to be forgotten - details further down the page.
How we collect information:
When you conduct a transaction on our website, as part of the process, we collect personal information you give us such as your name, address and email address. Your personal information will be used for the specific reasons stated above only. With regard to transactions, these are stored by the third party payment processor and we are not directly responsible for them, although we do have access to them. With regard to signing up to our newsletter*, this is stored by our website provider, details such as email address (usually just this and your name if you have entered it) and can be deleted at any time at your request or opt out.
Why we collect this information:
We collect the above mentioned non-personal and personal Information for the following reasons:
To provide and operate the website;
To provide our customers with fast response times
To book appointments
To take payments (via a payment third party facilitator)
To be able to contact our customers and users with general or personalised service notices and promotional messages**;
To collect statistical data which we or our business partners (only ever third party payment processors, we never share other data) may use to provide and improve our respective services to you, the customer;
To comply with any applicable laws and regulations.
How we store, use, share and disclose your information:
Our business is hosted on the Wix.com platform. Wix.com provides us with the online platform that allows us to sell our products and services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall. You can have your data permanently removed from our website provider's platform by emailing (with 'Right to be Forgotten' in the subject box). Please note if the only information we store about you is your IP address you will need to provide this. To have your mobile number removed from our business mobile simply text 'REMOVE GDPR' to.
We do not handle direct payments. We therefore do not store ANY payment details related to your purchase on this website. As above, card details are only seen and stored by our payment facilitator. To have your details removed from them, you will need to email them directly. We can provide you with their details if you email us with this request.
We do not share your: email address, phone number, name, physical address, IP address with ANYONE, except in circumstances that require this by law: if our staff are in or perceived to be in immediate or possible future danger: if a member of our staff is harassed or in the event a customer or potential customer gives serious cause for concern that requires certain industry-standard procedures (such as reporting crime to the police or NUM) to be implemented.
How we communicate with site visitors:
We may contact you to notify you regarding your account, your contract (written or verbal) to pay for services received, to troubleshoot problems with your account, to resolve a dispute, to collect fees or monies owed, to poll your opinions through surveys or questionnaires (only when signed up to our newsletter*), to send updates about our company, or as otherwise necessary to contact you to enforce our Terms of Service, applicable national laws, and any agreement we may have with you. For these purposes we may contact you via email, telephone, text messages****, and postal mail.
Withdrawing your consent and your right to be forgotten:
If you don’t want us to process your data anymore, please contact us at Email Us. Any information stored directly by us will be removed. We will make it clear if your information is stored by third parties and what to do about this. For more information see this article.
If you would like to: access, correct, amend or delete any personal information we have about you, you are invited to contact us at Email Us.
* We no longer send out the newsletter. If you signed up previously your email address, name and mobile number may still be stored by us. If you wish this to be deleted, please contact us.
** Most mobile numbers are immediately deleted once you have made/booked your appointment. We reserve the right, as mentioned above, to use your mobile number to chase payment or to confirm your booking. However, discretion is important and thus we rarely contact customers unless they have contacted us first.
***It is highly unlikely we will text you with promotional text messages or to keep you updated. If you are a regular customer we do sometimes keep in touch out of courtesy, if you want to be removed or forgotten completely, text 'REMOVE' to. Again, unless you are a regular customer, it is unlikely we will have your details stored.
There are legal or safety reasons we might store or share your details. This is rare, please see above for further information (How we store, use, share and disclose your information).
Thank you and remember that Matt is a one man business, we are GDPR compliant but the details we store are tiny and often anonymous anyway. The main concern you might have would be mobile phone numbers so do review this above policy and get in touch if you have any worries. See you soon! More SMALL print? Click on Terms. xXx ;-)