3rd Party Disclosure
3rd Party Links
Fair information Practices
Our Contact Information
What personal information do we collect from the people that visit our blog, website or app?
When ordering or registering on our site, as appropriate, you may be asked to enter your name, email address, credit card information or other details to help you with your experience, or to provide services.
The basis for the collection and processing of your information is to perform the contract with you, related to the services provided on our website. This processing is necessary for the legitimate interests of the business, and for providing the services offered on our website.
When do we collect information?
We collect information from you when you register on our site, place an order, subscribe to a newsletter or enter information on our site.
How do we use your information?
We may use the information we collect from you when you register, make a purchase, sign up for our newsletter, respond to a survey or marketing communication, surf the website, or use certain other site features in the following ways:
- To quickly process your transactions.
- To send periodic emails regarding your order, art-related updates or other products and offers.
- To follow up with them after correspondence (mainly via email)
How long do we keep your information?
We will keep hold of your information for no longer than necessary. The length of time we retain it will depend on any legal obligations we have (such as tax recording purposes), the nature of any contracts we have with you, the existence of your consent or our legitimate interests as a business.
How do we protect your information?
Our website is scanned on a regular basis for security holes and known vulnerabilities in order to make your visit to our site as safe as possible.
We do not use Malware Scanning.
We use an SSL certificate granted from our ClickFunnels-Cloudflare integration. We also use Paypal and Stripe to safely process orders.
Your rights as a data subject
You have rights as a data subject. These rights are:
The right of access – you have the right to access your personal data (e.g. data that is about you) that we hold. This is called a subject access request. We must respond to your request within one month. To request access to your data, please email email@example.com. It is very helpful if you tell us what of your personal data you are seeking.
The right to rectification – if you think the data we hold on you is incorrect, tell us so we can put it right. You can do this by emailing firstname.lastname@example.org.
The right to erasure – you have the right to request that we delete your data. We will do so, provided that we do not have a compelling reason for keeping it. To request this, please email email@example.com.
The right to restrict processing – you can change your communication preferences (therefore restricting how we communicate with you) by emailing firstname.lastname@example.org. To unsubscribe from communications, you may also click the "Unsubscribe" link at the bottom of every email that is sent,
The right to data portability – you can obtain and reuse your personal data for your own purposes across different services. To request this, please email email@example.com.
The right to object – you have the right to object to
a) Direct marketing from FreeWatercolor.com. You can opt out by clicking the "Unsubscribe" link at the bottom of every email sent, or by emailing us directly and asking to opt out.
b) Any processing where our lawful basis is legitimate interest (see above). If you would like to formally object to any of our legitimate interest processing, please email firstname.lastname@example.org.
Rights in relation to automated decision making and profiling – this is not something we do. If that ever changes, this policy will be updated accordingly.
At FreeWatercolor.com we are committed to upholding your rights as a data subject. If you think we have not done so, please contact email@example.com.
You may also complain to the Information Commissioner’s Office (ICO) if you believe your rights have not been upheld. The ICO is the data protection regulator and their website is: www.ico.org.uk.
Withdrawing your consent
We rely on your consent as the legal basis for processing your personal information. You may withdraw your consent at any time by contacting us at firstname.lastname@example.org.
If you would like to withdraw your consent or object to receiving any direct marketing to which you previously opted-in, you can do so using the unsubscribe link at the bottom of every email that is sent. If you withdraw your consent, our use of your personal information before you withdraw is still lawful.
If you have provided consent for your details to be shared with a third party, and wish to withdraw this consent, please also contact the relevant third party in order to amend your preferences.
Do we use 'cookies'?
- Help remember and process the items in the shopping cart.
- Understand and save user's preferences for future visits.
- Keep track of advertisements.
- Compile aggregate data about site traffic and site interactions in order to offer better site experiences and tools in the future.
We may also use trusted third-party services that track this information on our behalf.
You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. Since browser is a little different, look at your browser's Help Menu to learn the correct way to modify your cookies.
If users disable cookies in their browser:
If you turn cookies off, some features will be disabled. Some of the features that make your site experience more efficient and may not function properly.
However, you will still be able to place orders.
We do not sell, trade, or otherwise transfer to outside parties your Personally Identifiable Information unless we provide users with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users (such as Paypal, Aweber, Clickfunnels, Stripe), so long as those parties agree to keep this information confidential. We may also release information when it's release is appropriate to comply with the law, enforce our site policies, or protect ours or others' rights, property or safety.
However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.
We do not include or offer third-party products or services on our website.
Google's advertising requirements can be summed up by Google's Advertising Principles. They are put in place to provide a positive experience for users. https://support.google.com/adwordspolicy/answer/1316548?hl=en
We have not enabled Google AdSense on our site but we may do so in the future.
COPPA (Children Online Privacy Protection Act)
When it comes to the collection of personal information from children under the age of 13 years old, the Children's Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, United States' consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children's privacy and safety online.
We do not specifically market to children under the age of 13 years old.
Fair Information Practices
The Fair Information Practices Principles form the backbone of privacy law in the United States and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information.
In order to be in line with Fair Information Practices we will take the following responsive action, should a data breach occur:
We will notify you via email within 7 business days.
We also agree to the Individual Redress Principle which requires that individuals have the right to legally pursue enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or government agencies to investigate and/or prosecute non-compliance by data processors.
CAN SPAM Act
The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.
We collect your email address in order to:
- Send information, respond to inquiries, and/or other requests or questions
- Process orders and to send information and updates pertaining to orders.
- Send you additional information related to your product and/or service
- Market to our mailing list or continue to send emails to our clients after the original transaction has occurred.
To be in accordance with CANSPAM, we agree to:
- Not use false or misleading subjects or email addresses.
- Identify the message as an advertisement in some reasonable way.
- Include the physical address of our business or site headquarters.
- Monitor third-party email marketing services for compliance, if one is used.
- Honor opt-out/unsubscribe requests quickly.
- Allow users to unsubscribe by using the link at the bottom of each email.
If at any time you would like to unsubscribe from receiving future emails, you can follow the instructions at the bottom of each email.
And we will promptly remove you from the relevant email lists.
If you'd like use to completely remove your information from our autoresponder as well, you will need to email us and mention so, and we will promptly comply. However, we cannot guarantee complete removal of personal data, as this is a 3rd part service. Aweber, for example, reserves the right to save minimal data in regards to fraud prevention.
If you made a payment using one of the payment solutions we are using (Stripe or Paypal), or made use of any 3rd party service that is integrated on our website(s), we cannot remove or guarantee removal of personal information from these 3rd party services' databases.
Hapninim Street, 39
Yehud Monosson, 6019000