Privacy Statement 

We are Witch of the West Tattoo Limited. This privacy statement is made by us. Our head office is at 7 – 9 Derby Street, Finnieston, Glasgow, G3 7TJ . References to “we”, “us”, “our” and “ours” in this privacy statement means Witch of the West Tattoo Limited. We are committed to protecting the privacy and security of your personal information. We take care to protect the privacy of our clients, website users and anyone we interact with. 

We have therefore developed this privacy policy to inform you of the data we collect, what we do with your information, what we do to keep it secure as well as the rights and choices you have over your personal information. This privacy policy is for individuals residing in the United Kingdom and the European Union. 

Throughout this document we refer to Data Protection Legislation means the Data Protection Act 2018 (DPA2018), United Kingdom General Data Protection Regulation (UK GDPR), the Privacy and Electronic Communications (EC Directive) Regulations 2003 and any legislation implemented in connection with the aforementioned legislation. Where data is processed by a controller or processor established in the European Union or comprises the data of people in the European Union, it also includes the EU General Data Protection Regulation (EU GDPR). This includes any replacement legislation coming into effect from time to time. 

Witch of the West Tattoo Limited is a controller for the personal information we process. 

Witch of the West Tattoo Limited is registered with the Information Commissioner’s Office (the ICO) with registration number ZB568306. 

The information we collect and when 

We only collect personal information that we know we will genuinely use and in accordance with the Data Protection Legislation. The type of personal information that we will collect on you, and you voluntarily provide to may include some or all of the following: 

Your name 

Address 

Telephone number(s) 

Email address 

Medical information 

Unless explicitly advised, you are under no statutory or contractual requirement or obligation to provide us with your personal information; however, we require at least the information above in order for us to deal with you as a client in an efficient and effective manner. 

We will not store, process, or transfer your data unless we have an appropriate lawful reason to do so, and these vary upon the circumstances of the use. 
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are: 

Your consent. You can remove your consent at any time using the contact information provided in this policy. 

We have a contractual obligation. 

We have a legal obligation. 

We have a legitimate interest (i.e., to respond to enquiries prospective clients raise, to identify what services may be suitable to you etc.). 

How we use your information 

To contact you, following your enquiry, reply to any questions, suggestions, issues, or complaints you have contacted us about. 

Make available our services to you. 

For statistical analysis and to get feedback from you about our services, websites, and other activities (for more information see our Cookie Policy). 

To power our security measures and services so you can safely access our website. 

Help us understand more about you as a prospect, client etc. and services you consume, so we can serve you better. 

Contact you about opportunities and services from us. 

Provide you with promotional material. 

Help answer your questions and solve any issues you have. 

To inform you of new services we will be providing. 

To send you requested information on our services. 

For research or marketing purposes. 

To administer our websites to help us improve our services. 

Who might we share your information with 

We may share your personal data with other organizations in the following circumstances: 

If the law or a public authority says we must share the personal data. 

If we need to share personal data in order to establish, exercise or defend our legal rights. 

We only collect personal information that we know we will genuinely use and in accordance with Data Protection legislation. 

We will not share your information with any third parties for the purposes of direct marketing. 

How we keep you update on our products and services 

We will send you business developments and news about our services in a number of ways including by email, but only if you have previously consented to receive these marketing communications. When you engage with us as a potential client, we will ask if you would like to receive marketing communications, and you can change your marketing choices online, over the phone or in writing at any time. 

If you wish to amend your marketing preferences, you can do so by emailing rubyslippers@witchofthewest.ink 

How long we keep your information for 

We retain a record of your personal information in order to provide you with a high quality and consistent service. We will always retain your personal information in accordance with the Data Protection Legislation and never retain your information for longer than is necessary. 

Security 

Data security is of great importance to Witch of the West Tattoo Limited and to protect your data we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure your collected data. 

We take security measures to protect your information including: 

Implementing access controls to our information technology. 

We use appropriate procedures and technical security measures (including strict encryption, anonymization and archiving techniques) to safeguard your information across all our computer systems, 

Advising you never to enter your account number or password into an email or after following a link from an email. 

All our employees and agents who have access to or are involved in the processing of personal information respect the confidentiality of personal information. 

However, the Internet is an open system and Witch of the West Tattoo Limited cannot guarantee that the personal information you submit will not be intercepted by others. 

Our websites may include links to external websites operated by other organisations. They may collect personal information from visitors to their site. Witch of the West Tattoo Limited cannot guarantee the content or privacy practices of any external websites and does not accept responsibility for those websites. 

Your rights over your information 

The right to be informed about our collection and use of personal data 
You have the right to be informed about the collection and use of your personal data. We ensure we do this with our Privacy Policies (such as this one). These are regularly reviewed and updated to ensure these are accurate and reflect our data processing activities. 

Right to access your personal information 
You have the right to access the personal information that we hold about you in many circumstances, by making a request. This is sometimes termed ‘Subject Access Request’. If we agree that we are obliged to provide personal information to you (or someone else on your behalf), we will provide it to you or them free of charge and aim to do so within 1 month from when your identity has been confirmed. 

We would ask for proof of identity and sufficient information about your interactions with us that we can locate your personal information. 

If you would like to exercise this right, please contact us as set out below. 

Right to correct your personal information 
If any of the personal information we hold about you is inaccurate, incomplete, or out of date, you may ask us to correct it. 

If you would like to exercise this right, please contact us as set out below. 

Right to restrict processing 
You have the right to ask us to restrict the processing of your personal data. For example, this may be because you have issues with the accuracy of the data we hold or the way we have processed your data. The right is not absolute and only applies in certain circumstances. 

You have the right to object to us processing your personal information for particular purposes, to have your information deleted if we are keeping it too long or have its processing restricted in certain circumstances. 

If you would like to exercise this right, please contact us as set out below. 

Right to erasure 
You have the right to have personal data erased. This is also known as the ‘right to be forgotten’. The right is not absolute and only applies in certain circumstances. 

If you would like to exercise this right, please contact us as set out below. 

Right to portability 
The right to portability gives you the right to receive personal data you have provided to us in a structured, commonly used, and machine-readable format. It also gives them you the right to request that a controller transmits this data directly to another controller. 

If you would like to exercise this right, please contact us as set out below. 

Right to object 
You have the right to object to our processing of some or all of the personal data that we hold about you. This is an absolute right when we use your data for direct marketing but may not apply in other circumstances where we have a compelling reason to do so, e.g., a legal obligation. 

If you would like to exercise this right, please contact us as set out below. 

For more information about your privacy rights 
The Information Commissioner’s Office (ICO) regulates data protection and privacy matters in the UK. They make a lot of information accessible to consumers on their website and they ensure that the registered details of all data controllers such as ourselves are available publicly. You can access them here https://ico.org.uk/for-the-public. 

You can make a complaint to the ICO at any time about the way we use your information. However, we hope that you would consider raising any issue or complaint you have with us first at rubyslippers@witchofthewest.ink. Your satisfaction is extremely important to us, and we will always do our very best to solve any problems you may have. 

What happens if our business changes hands? 
Any personal data that you have provided will, where it is relevant to any part of our business that is being transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this Privacy Policy, be permitted to use that data only for the purposes for which it was originally collected by us. We only collect personal information that we know we will genuinely use and in accordance with 

Changes to our Privacy Policy 
We may change this Privacy Policy from time to time (for example, if the law changes). We recommend that you check this policy regularly to keep up to date. 

How to contact us 
If you would like to exercise one of your rights as set out above, or you have a question or a complaint about this policy, the way your personal information is processed, please contact the Data Protection Officer by one of the following means: 

Post: 
Witch of the West Tattoo Limited 
7 – 9 Derby Street 
Finnieston 
Glasgow 
G3 7TJ 

Phone: 
+44 141 286 0296 

Email: 
rubyslippers@witchofthewest.ink