PRIVACY POLICY

This privacy policy deals with how kristin@kristintenneyblackwell.org handles ‘Personal Data’ as it is defined in the GDPR (General Data Protection Regulation). Personal data, as described by the GDPR is data such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity.

Who Am I?

I am Kristin Tenney-Blackwell and owner of kristin@kristintenneyblackwell.org. I take a proactive approach to user privacy and ensure the necessary steps are taken to protect the privacy of you throughout your visiting experience.

What Type of Data Do I Collect and Why?

I may collect and process the following data about you:

Using my contact form

Your name and email address as well as other Information that you provide by filling in a contact form on this site. This is so that I am able to reply to your service enquiry or your general question.

Posting on a blog

Your name, email address and IP address by filling in a comment form on a blog post. This is stored for my security in the event the author enters unlawful content.

Buying a service

Your name, email address and IP address at checkout by purchasing one of my services. This is so that I can contact the new customer about their new service.

Mailing lists

Your email address when you request monthly connections in your inbox. I don’t sell, rent or trade email lists with any other organisation or business.

I use a third party provider, MailChimp, to deliver my updates. I gather statistics around email opening and clicks using industry standard technologies to help me monitor and improve my newsletter. For more information, please see MailChimp’s privacy notice. You can unsubscribe to general mailings at any time of the day or night by clicking the unsubscribe link at the bottom of any of my emails.

MailChimp have activated the EU-US Privacy Shield and are qualified and GDPR compliant in order to receive and process your information.

Who Is Collecting the Data?

I handle personal data for my own business.

How is the Data Collected?

Information on my website will be collected in association with your use of a contact form, updates signup form, blog comment or by purchasing a service or resource from my website.

If you contact me using either my online contact form or directly via email, I may keep a record of that correspondence.

When you sign up for my updates, only your email address is added to my mailing list database, which is handled by MailChimp.

When you submit a comment to my website’s blog, the IP address of the device used is stored for my security in the event the author enters unlawful content. Your name and email address are required to submit a comment and this information is stored in the WordPress database.

When purchasing a service or resource from my website, a user must supply their full name and email address so that I may be able to contact them if there is an issue with their order. The IP address of the device used for said purchase is stored in the PayPal database but not matched to any information that may be collected by other components of the website. Services purchased through the Acuity scheduler are also managed through PayPal.

How Easy Is it To Opt-Out?

All ways of collecting personal data on my website are opt-in, and you will always have the opportunity to opt-out. Meaning that in order for me to receive any personal data from you, you will choose to opt-in when filling out any of the forms on my website.

You will always have the opportunity to unsubscribe to my notifications and connections at any time.

If you believe that you have received information from me that you did not opt in to, you should contact me on the details below.

You are entitled to access the personal data that I hold.

How Secure is Your Personal Data?

Online orders and blog comments data is stored in my website database on a secure server that is password protected.

The payment gateway’s (PayPal) data is stored on their respective servers and is securely backed up and password protected and encrypted.

PayPal has activated EU-US Privacy Shield so is qualified and GDPR compliant in order to receive and process your information. You can access PayPal’s privacy policy here.

I am not responsible for the privacy or security practices of any third party. The collection and use of your Personal Data by such third parties may be subject to separate privacy and security policies. If you suspects any misuse or loss of, or unauthorised access to, your Personal Data, you should let me know immediately by contacting me at the email address below.

What Rights Do You Have?

Under GDPR, you have the right of access to the information stored about you. For clarity, kristin@kristintenneyblackwell.org only collects a name and or an email address from certain areas of the website such as a contact form, connection sign-up, blog post comment or through purchasing a service or resource. No details of credit cards are ever taken or stored on this website.

If you cannot update your own information, I will correct any errors in the personal data I hold about you within 7 days of receiving written notice from you about those errors.

It is your responsibility to provide me with accurate and truthful personal data. I cannot be liable for any information that is provided to me that is incorrect.

You may cancel any subscription or revoke your consent to the processing (including storage) of this data at any time with immediate effect. As a data subject (a real person) your individual rights include: right to be informed; right of access; right to rectification; right to erasure; right to restrict processing; right to data portability; right to object; right to not be subject to automated decision-making (including profiling).

When Can I Contact You?

From time to time, I may need to send you important notices, such as changes to my terms and conditions or policies. Because this information is important to your interaction with me, you may not opt-out of receiving these communications. This falls under Legitimate Interests of GDPR.

How Can You Contact Me?

All correspondence with regards to privacy should be addressed to: kristin@kristintenneyblackwell.org.

Changes to the Privacy Policy

I may update this privacy policy from time to time at my sole and absolute discretion. Please check this website regularly for changes.

Policy last updated January 26, 2019.