ADM Web Studios respect your right to privacy and comply with obligations under the Data Protection Acts 1988 & 2002 and the EU General Data Protection Regulation 2018 (GDPR).
We are committed to protecting any personal data that we collect. The purpose of this Privacy Policy is to enable you to understand what personal information of yours is collected, how and when we might use or share your information, and how you can correct any inaccuracies in the information.
This Privacy Policy also explains our online information practices and the choices you can make about the way your information is collected and used. By using our services, you agree to the use, collection and disclosure of the data that we collect in accordance with this Privacy Policy.
(1) Definitions
In this privacy policy “we”, “us”, “our”, “ADM” and “ADM Web Studios” means ADM Web Studios, 3 Wilson Street, Workington, Cumbria, CA14 4AZ.
All references to the client will be referred to as “you”, “your”, “customer” or “client”.
(2) Who we are
ADM is a creative design studio based in Workington, which is focused on creating strong and effective branding, marketing and websites for businesses throughout Cumbria and the UK. From logos and branding to stationery and online media, ADM has a proven track record of delivering outstanding creative solutions for its clients.
Data Controller
ADM Web Studios is the Data Controller for all the personal data that you submit.
We encourage individuals covered by this Privacy Policy to raise any concerns about our processing of personal information by contacting the data controller using the details below:
Company Name: ADM Web Studios
Address: 3 Wilson Street, Workington, Cumbria, CA14 4AZ
Email: info@admwebstudios.co.uk
Phone: 01900 838216
(3) Types of Information Collected
We the following types of information:
Personal Data
This is data that identifies you or can be used to identify or contact you and may include your name, company name, address, email address and telephone no. Such information is only collected from you if you voluntarily submit it to us.
When you contact us, whether by telephone, through our website or by e-mail, we collect the data you have given to us in order to reply with the information you need. We record your request and our reply in order to increase the efficiency of our business.
Non-Personal Data
Like most websites, we gather statistical and other analytical information collected on an aggregate basis of all visitors to our website. This Non-Personal Data comprises information that cannot be used to identify or contact you. Such as user IP addresses where they have been clipped or anonymised, browser and operating system types and other anonymous statistical data involving the use of our website.
Children
Our services are not directed towards children and as such we do not seek to collect any personal information from children.
If a parent or guardian becomes aware that his or her child has provided us with personal information without such parent or guardian’s consent, he or she should contact us.
If we become aware that personal information from a child under the age of 13 has been collected, we will use all reasonable efforts to delete such information from our database.
Social Media
Our website may include social media features (such as the Facebook “Like” button). Social media features and widgets may be hosted by a third party or directly on our website. Your interactions with these features are governed by the privacy policy of the company providing the feature.
When contacting us via social media, whether a public or private message, any personal information you provide through these social media platforms, such as Facebook and Twitter, are governed by the privacy policy of the company providing the platform and not ADM Web Studios.
(4) Purposes for which we hold your Information
We will process any data you provide to us for the following purposes:
- to respond to your comments, queries and technical support requests.
- to carry out our obligations arising from any contracts entered into between you and us.
- to keep you informed of any changes to our services.
- to check that use of our services is in accordance with our terms and conditions.
- to assist us in offering you a personalised experience or otherwise tailor our services to you.
- for the purposes of security, and prevention and detection of fraud.
- to contact you with marketing materials and news, should you have given consent.
- we use the Non-Personal Data gathered from visitors to our website in an aggregate form to get a better understanding of where our visitors come from and to help us better design and organise our website, products and services.
Our legal basis for holding your personal data under GDPR
- We are entitled to use your data as described in point (1) as we are responding to your request and therefore you have given consent to this processing.
- We are entitled to use your data as described in points (2), (3) and (4) as we require to do this as part of our contractual obligations to provide our services.
- We are entitled to use your data as described in points (5), (6), (7) and (8) as the purposes stated are within our legitimate interests.
(5) Storage and Management of your Personal Data
Data Storage
The data that we collect in connection with our services is stored locally on our computer systems. Data collected through our website and emails is also stored on our secure web server, which is located in a UK Data Centre with 24/7 onsite security.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website or services, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Cross-Border Data Transfers
When we share your personal information with our partners and service providers (see 7. Disclosure of Information to Third Parties), your personal information may be transferred to and/or made accessible from countries out of the European Economic Area. In such circumstances, we will enter into model contractual clauses as adopted by the European Commission, or rely on alternative legal bases such as the Privacy Shield, where applicable, or binding corporate rules where our partners or service providers have adopted such internal policies approved by European data protection authorities.
Personal Data Retention Schedule
By law we have to keep basic information about event attendees and their contact details for a minimum of 6 years for tax purposes.
We only store your information for as long as is necessary for the purpose it was obtained or for any additional purpose we have explained to you. We also implement policies to regularly audit the personal data we hold to ensure we do not retain any personal data for longer than we are entitled to.
(6) Security of your Personal Data
We place great importance on the security of all personally identifiable information associated with our customers. We use technical security measures to prevent the loss, misuse, alteration or unauthorized disclosure of information under our control. We use security measures including and not limited to: physical, electronic and managerial procedures to safeguard and secure the information we collect online. All sensitive information is collected through an encrypted connection on our secure server through Secure Sockets Layer (SSL) technology.
Online Payment Processing
We use Stripe as our online payment processing partner who use the most secure up to date encrypted SSL (secure socket layer) when transferring transaction details from our online payment terminal. This means that no information submitted during this process can be examined, used or modified by any unauthorised third parties. Our customers Debit/Credit card information never hits our servers, it goes from our customer’s device straight to Stripes servers keeping their information encrypted and safe.
SSL Certificate
Our website utilises industry-standard Secure Sockets Layer (SSL) technology to allow for the encryption of potentially sensitive information such as your name, address and other critically sensitive information. Information passed between your computer and our website cannot be read in the event someone else intercepts it.
This technology includes the following features:
- Authentication – this assures your browser that your data is being sent to the correct computer server, and that the server is secure.
- Encryption – this encodes the data, so that it cannot be read by anyone other than the secure server.
- Data Integrity – this checks the data being transferred to ensure it has not been altered.
When you access a website secured by an SSL certificate, you will see https:// at the beginning of its URL. Your web browser may also show the connection as secure by displaying a “lock” icon in the address bar.
Website & Server Security
We ensure best to our ability that our systems and servers are protected from hackers, viruses, intruders and other online and offline problems by utilising the latest web security features, along with real-time file scanning for malicious files, a comprehensive firewall and advanced email filters to protect our systems.
Emails sent by ADM Web Studios
Any information contained in or attached to an email sent by ADM Web Studios (@admwebstudios.co.uk) is sent through an SMTP mailbox connection that is secured with an SSL Certificate. This ensures that all the email contents (attachments, headers, message body, username, and password) are encrypted and secured from any potential eavesdroppers or hackers.
Email Newsletter
If you choose to join our email newsletter, the email address that you submit to us will be forwarded to SendinBlue who provide us with email marketing services. We consider SendinBlue to be a third party data processor (see section 7 below).
Your email address will remain within SendinBlue’s database for as long as we continue to use SendinBlue’s services for email marketing or until you specifically request removal from the list. You can do this by unsubscribing using the unsubscribe links contained in any email newsletters that we send you or by requesting removal via email. When requesting removal via email, please send your email to us using the email account that is subscribed to the mailing list.
While your email address remains within the SendinBlue database, you may receive periodic newsletter-style emails from us.
As SendinBlue is a third party provider, please also refer to their privacy policy on how they manage and protect your data.
(7) Disclosure of Information to Third Parties
We share personal information in the following ways:
- Partners and Sponsors.
Some of our products or services are offered or promoted in conjunction with a partner or sponsor, or another brand. We may share your information with these parties to offer the product or service or to facilitate your use of additional amenities included with your web hosting account. For example, one of our partners may provide services to you based on links that you access from your control panel. - Service Providers.
We may transfer (or otherwise make available) your personal information to third parties that help us provide our services or provide services on our behalf. For example, we may use service providers to authorise and process online payments or to send you periodic newsletter-style emails. Our service providers are given the information they need to perform their designated functions, and we do not authorise them to use or disclose personal information for their own marketing or other purposes. - Domain Name Registration.
When you purchase Domain Registration services for top level domains (“TLDs”), our domain registrar, Public Domain Registry (PDR) is required to collect the following personal information from you: Name, Business Name, Address, Email, Fax, and Phone Number. The collection of Personal Information is necessary to comply with contractual obligations we have with the Internet Corporation for Assigned Names and Numbers (“ICANN”) and with certain TLD registries (“Registries”) so that you can validly register your domain name. In addition to Personal Information, our contracts with some Registries may require us to collect other personal information for the registration of a TLD such as certain professional affiliations, identification or other qualifiers (“Additional Personal Information”).
Disclosure of Information- Public Whois. Our contracts with ICANN and other Registries require us to make certain domain name information (“WHOIS Information”) available and accessible to the public through a searchable port 43 “WHOIS” Service via a public webpage operated by the applicable registrar of record (“WHOIS Site”). The WHOIS Site is a publicly accessible database that lists WHOIS Information, including a particular domain name, the name server(s) to which the domain name points, and the domain name’s creation and expiration date. Except for EU/EEA natural persons (as described below), your Personal Information could be displayed on the WHOIS Site.
- EU/EEA natural persons. Notwithstanding the foregoing, pursuant to the European Union’s General Data Protection Regulation 2016/679, or GDPR, if you are a EU/EEA natural person (as defined by the GDPR), other than as specified in this addendum, our publication of WHOIS Information will not contain any Personal Information. Accordingly, we will not display Personal Information of a EU/EEA natural person on the WHOIS Site.
- Transfer Out. If you initiate a transfer out of a domain name away from us as the registrar of record, pursuant to our contract with ICANN, we may need to publish your registrant email address obtained from your Personal Information on the WHOIS Site for a period of approximately five (5) calendar days. After this period and assuming a valid transfer has occurred, you would cease to be our customer for that domain name and your WHOIS Information would be managed by the gaining registrar.
- Certain Registries. Registries are third party providers of TLDs that are independent of domain registrars. If required by contract with a particular Registry, we may be obligated, as a domain registrar of domains provided by the Registry, to provide Personal Information and Additional Personal Information to such Registry to successfully complete your domain name registration. If we provide your Personal Information and Additional Personal Information to a Registry, the Registry has its own obligation to comply with applicable data privacy laws.
- Data Escrow. Our contract with ICANN requires us to deposit the Personal Information collected with a secure third-party escrow provider who acts solely as a holder of the data.
- Permitted Disclosures. We may also disclose your Personal Information when required by the rules, regulations and policies of ICANN, including but not limited to the Uniform Domain-Name Dispute-Resolution Policy (UDRP).
- Sale of Business.
We reserve the right to transfer information (including your Personal Data) to a third party in the event of a sale, merger, liquidation, receivership or transfer of all or substantially all of the assets of our company provided that the third party agrees to adhere to the terms of the Privacy Policy and provided that the third party only uses your Personal Data for the purposes that you provided it to us. You will be notified in the event of any such transfer and you will be afforded an opportunity to opt-out. - Legal and Compliance Reasons.
We may access, preserve and share your information with companies, organizations, governmental entities or individuals outside of our Company if we believe, in good faith, that the law requires us to do so. This may include, but is not limited to, responding to court orders or other legal processes (such as law enforcement requests). We may also access, preserve and share your information as necessary to: (i) establish or exercise our legal rights or defend against any legal claim; (ii) investigate, prevent, or take action regarding suspected fraud or other illegal activities; (iii) prevent death or serious physical harm to any person; or (iv) investigate violations of our Terms & Conditions.
Our legal basis for disclosing your personal data under GDPR
- We are entitled to disclose your data as described in points (1), (2), (3) and (4), as the purposes stated are all within our legitimate interests.
- We are entitled to use your data as described in point (3) as we require to do this as part of our contractual obligations to provide our services.
- We are entitled to disclose your data as described in point (5), on the basis that we are legally required to do so.
(8) Use of Cookies
This website does not store any information that would, on its own, allow us to identify individual users of this service without their permission. Any cookies that may be used by this website are used either solely on a per session basis or to help improve and maintain the website. Cookies are not shared with any third parties. This website uses session cookies to count visits to each webpage and generate statistics. This information helps us improve and maintain our website.
Also known as browser cookies or tracking cookies, cookies are small, often encrypted text files, located in browser directories. They are used by web developers to help users navigate their websites efficiently and perform certain functions.
(9) What cookies are used on this Website?
The cookies we use on this website are broadly grouped into the following categories:
- Essential – Some of the cookies on our website are essential for us to be able to provide you with a service you have requested. An example of this would be a cookie used to enable you to log into your account on the website or which allows communication between your browser and the website. You may not be able to use our website without these cookies.
- Analytics – We use analytics cookies to helps us understand how users engage with our website. An example is counting the number of different people coming to our website or using a particular feature, rather than the total number of times the site or feature is used. Without this cookie, if you visited the website once each week for three weeks we would count you as three separate users. We would find it difficult to analyse how well our website was performing and improve it without these cookies.
- User Cookies – We use cookies to improve your experience by remembering your preferences so we know how you like to use our website. Examples of this would be remembering you so that you are served with the same content or to remember you when you come back to the site.
For more information on the cookies set by Google Analytics please go to: Google Analytics Cookie Usage on Websites
For more information about cookies and their uses visit All About Cookies.
(10) Controlling and Opting Out of Cookies
Your browser or device may offer settings that allow you to choose whether browser cookies are set and to delete them. For more information about these controls and to exercise your cookie preferences, visit your browser or device’s help material. If you choose to reject cookies, as noted above, you may not be able to use certain features of our websites and services.
(11) Links to external websites
This website may contain links to external websites. We are not responsible for the privacy policies or content of these sites. When you leave this website, make sure you read the privacy policies of each and every website that collects your personal data.
This privacy policy applies only to information that is collected by ADM Web Studios.
(12) Changes to the Website Privacy Policy
Any changes to this Website Privacy Policy will be posted on this website so you are always aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it.
If at any time we decide to use Personal Data in a manner significantly different from that stated in this Website Privacy Policy, or otherwise disclosed to you at the time it was collected, we will notify you by email, and you will have a choice as to whether or not we use your information in the new manner.
(13) Your Rights
You have the right to object to how we use your personal information. You also have the right to see what personal information we hold about you. In addition, you can ask us to correct inaccuracies, delete or restrict personal information or to ask for some of your personal information to be provided to someone else.
Right to Object
You can object to our processing of your personal information. Please contact our Data Controller, providing details of your objection.
Access to Your Personal Information
You can request access to a copy of your personal information that we hold, along with information on what personal information we use, why we use it, who we share it with, how long we keep it for and whether it has been used for any automated decision making.
You can make a request for access by contacting us at ‘ADM Web Studios, 3 Wilson Street, Workington, Cumbria, CA14 4AZ ‘. Please make all requests for access in writing and provide us with evidence of your identity.
Right to Withdraw Consent
If you have given us your consent to use personal information, you can withdraw your consent at any time and, update your marketing preferences by contacting our Data Controller.
Rectification
You can ask us to change or complete any inaccurate or incomplete personal information held about you.
Erasure
You can ask us to delete your personal information where it is no longer necessary for us to use it, you have withdrawn consent, or where we have no lawful basis for keeping it.
Portability
You can ask us to provide you or a third party with some of the personal information that we hold about you in a structured, commonly used, electronic form, so it can be easily transferred.
Restriction
You can ask us to restrict the personal information we use about you where you have asked for it to be erased or where you have objected to our use of it.
Personal Data Breach Notification
ADM Web Studios ensures best to our ability that our systems and servers are protected from hackers, viruses, intruders and other online and offline problems, however if we experience a data breach of any kind, where a customer’s data has been compromised, a notification will be sent to all those affected within 72 hours of becoming aware of the breach.
Make a Complaint
You can make a complaint about how we have used your personal information to us, by visiting your local branch, by contacting our Data Controller.
You also have the right to lodge a complaint with a supervisory body. The relevant authority in the UK is the Information Commissioner’s Office at ico.org.uk
We will not make any charge for responding to any request from you to exercise your privacy rights, and we will respond to your requests in accordance with our obligations under data protection law.