We are committed to data protection and data privacy.
With the General Data Protection Regulation (GDPR) enforceable from 25th May 2018, we have undertaken a GDPR readiness programme to review our entire business, the way we handle data and the way in which we use it to provide our services and manage business operations. We have discussed any possible issues with the Information Commissioner's Office (ICO) and they are more than satisfied with our practices.
Information for our school partners
We are very aware of the need to protect vulnerable children. In compliance with the ICO's data protection guidelines, we can assure parents/guardians that their child's name will not be published on any public forum, online or offline. Only parents/guardians of participating schools are given details on how to access our Online Shops. A Unique Reference Number allows parents to source and order their child's design without the child's name ever being entered into our databases.
The following explains what data we collect from you or that you provide to us, how we process it and what we do to keep it safe.
Who is collecting the data?
Employees of Surfprint. Nothing is outsourced.
What data is being collected?
Surfprint only collects the data necessary to supply goods to our customers, eg. names and delivery addresses. We do NOT collect names of individual children. Our system uses a Unique Reference Number allowing parents/guardians to source and order their child's work without the child's name ever being entered into our databases.
What is the legal basis for processing the data?
We require minimum data to process orders.
Will the data be shared with any third parties?
How will the information be used?
Customers' names and addresses will be printed onto address labels and attached to their items before being mailed.
How long will the data be stored for?
All data will be deleted within four months of the customer's order.
What rights does the data subject have?
All rights to personal data remain with our customer and we will allow them access to (or delete) their details immediately if requested.
How can the data subject raise a complaint?
Call 01475 675158 or email firstname.lastname@example.org
Surfprint is a company limited in Scotland at 120 Main Street, Largs, North Ayrshire, Scotland. Company Reg. No. 433673.