INTRODUCTION TO OUR COOKIE POLICY & PRIVACY NOTICE
The General Data Protection Regulation (GDPR) which came into effect on 25th May 2018 replaces previous data privacy laws, giving more rights to you as an individual and more obligations to organisations holding your personal data.
One of the rights is a right to be informed, which means we are required to give you even more information than we do now, about the way in which we use, share and store your personal data.
Privacy Notice
This Privacy Notice has been created to provide information about how Hedley Studios Limited (which will be referred to as we or us in this document) processes the personal data that we collect in online and offline formats through our Services, and the increased rights you have in relation to the data we hold on you and the legal basis on which we are using it.
When we use the term “Services” we mean to refer collectively to:
- The provision of goods and services to our clients and prospective clients (“Client Services”);
- The websites and mobile applications owned and controlled by us that link to this Privacy Notice (“Sites”); and
- Our marketing and business development activities, including events we host, social media properties we create, and emails that we send (“Marketing Activities”).
This Privacy Notice covers the personal data that we collect through the provision of our Services.
Who are we?
We are Hedley Studios Limited, a world leading, UK-based company specialising in the design and manufacture of scale cars. .
When and What Data will we hold?
To operate effectively we need to hold the following types of personal data:
- Contact details provided when individuals are enquiring about our products and services
- Contact details when placing orders (delivery and invoicing address)
- Contact details when raising a complaint
- Contact details related to product recalls (data will be stored for the warranty period of the product)
- Details related to a Job Application
- Data you have given Third Parties your consent to share with us
- Data you provide if you chose to complete a survey
- Data related to viewing or using our website (e.g. cookies, e-mail and password)
- Data related to the use of social media platforms (e.g. Facebook, Twitter)
Consent will be sought as a matter of course. If you choose to not permit the use of personal data it may impact our ability to provide our products and services.
Our legal basis for processing personal data in connection with Client Services is:
- To comply with legal obligations and professional responsibilities;
- To perform contracts;
- To pursue our legitimate interests of:
- ensuring that we deliver the best possible service to our clients,
- business development and general marketing,
- providing you with information on our services and events, and
- ensuring we build and maintain a good working relationship with you
- Your consent, where we make it clear to you in advance that we are relying on you consent (for example, when you sign up to our mailing list).
For prospective clients, or an employee or representative of a prospective client, we will process personal data including your name and contact details as well as details of any interactions you may have with us.
We may obtain this information directly from you, from your employer or from publicly available sources like your employer’s website.
The legal bases we rely on to process your personal data is:
- To take steps requested by you prior to entering into a contract with you;
- To pursue our legitimate interests in building our business and developing a relationship with potential new clients
Data will only be shared if consent has been obtained or if there are legal obligations that require us to do so (e.g. fraud prevention).
Visitors to our sites
Certain visitors interact with our websites in ways that lead us to gather personal data. The amount and type of data that we gather depends on the nature of the interaction. For example, if you sign up to a mailing list we collect your name and contact details. Visitors can always refuse to supply personal data, with the caveat that it may prevent them from engaging in certain site-related activities.
In addition, we collect information automatically as disclosed in our Cookie Policy, above.
The legal bases we rely on to process this information is:
- To pursue our legitimate interests in developing and growing our business, operating and improving our website, and conducting Marketing Activities; and
- Your consent, where we make it clear to you in advance that we are relying on you consent (for example, when you sign up to our mailing list).
Additional uses of personal data
In addition to the uses described above, we may use your personal data for the following purposes. Some of these uses may, under certain circumstances, be based on your consent, may be necessary to fulfil our contractual commitments to you, or are necessary to serve our legitimate interests in the following business operations:
- Operating our business, administering the Services and managing your accounts, including but not limited to sharing your data (solely to the extent required legitimately to operate our business) with our affiliates (where for the purposes of this provision ‘affiliates’ shall be deemed to include our United States sales partner ICG Crimson Galleries LLC (d/b/a Hedley Galleries) , subject always to the other provisions of this policy relating to your rights to request deletion or removal of your data, which shall extend both to us and to ICG Crimson Galleries LLC (d/b/a Hedley Galleries);
- Contacting you to respond to your requests or inquiries;
- Processing and completing your transactions including, as applicable, order confirmation and delivering products or services;
- Providing you with newsletters, articles, alerts and announcements, event invitations, and other information that we believe may be of interest to you;
- Providing you with marketing information, and other information that is tailored to your interests;
- Conducting research, surveys, and similar inquiries to help us understand trends and client needs;
- Analysing your interactions with us, and improving our products, services, programs, and other offerings;
- Preventing, investigating, or providing notice of fraud, unlawful or criminal activity, or unauthorised access to or use of personal information, our website or data systems; or to meet legal obligations; and
- Enforcing our terms and conditions and other agreements.
Transfers outside the UK, including to the USA
We may share your personal data with ICG Crimson Galleries LLC (d/b/a Hedley Galleries), a U.S. entity which serves as a distributor for Hedley Studios Limited. This will involve transferring your data outside the UK, including to the United States. Whenever we transfer your personal data out of the UK to countries whose laws may not provide the same level of data protection as UK law, we ensure a similar degree of protection is in place by implementing one or more of the following safeguards:
- We will only transfer your personal data to countries deemed to provide an adequate level of protection for personal data.
- We may use specific standard contractual terms approved for use in the UK that give transferred personal data the same protection it has in the UK, namely the International Data Transfer Agreement or The International Data Transfer Addendum to the European Commission’s standard contractual clauses for international data transfers, to obtain a copy of these safeguards, please contact us at contact@hedleystudios.com
- We may transfer personal data to service providers outside the UK. Where we do, we ensure appropriate safeguard are in place, such as adequacy decisions or standard contractual clauses, to protect your data.
Managing Your Personal Data
At any time you can request further information or perform any of the following:
- Request access to the personal data we hold about you (this may be subject to a charge)
- Request that your personal data is updated or corrected
- Stop the use of your personal data
- Change your consent related to your personal data
- Change web-site information (unsubscribe)
For any of the above, please contact us by email using the following address:
Note: We will only undertake a request when we have confirmed your identity.
Links to other websites
Our website may contain links to other websites of interest; however, you should note that we do not have any control over these and, therefore, cannot be responsible for the protection and privacy of any information which you provide whilst visiting those sites. Such sites are not governed by this privacy policy and you should exercise caution, and look at the privacy policy applicable to the website in question.
Data Concerns
If you have any concerns related to the way we use your personal data, you can contact the Information Commissioners Office (ICO):
Phone: 0303 123 1113
Online: www.ico.org.uk/concerns
Privacy Rights for California Residents
If you are a resident of California, you are granted additional rights regarding your personal information under the California Consumer Privacy Act of 2018 ("CCPA"), as amended by the California Privacy Rights Act of 2020 ("CPRA"). These rights supplement the information contained in this Privacy Policy and apply solely to individuals residing in the State of California.
Your Rights Under California Law:
Right to Know: You have the right to request that we disclose to you the categories and specific pieces of personal information we have collected about you, the categories of sources from which your information is collected, the purpose for collecting or selling your information, and the categories of third parties with whom we share your information.
- Right to Delete: You have the right to request the deletion of your personal information that we collect and maintain, subject to certain exceptions.
- Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
- Right to Opt-Out of Sale or Sharing: We do not sell personal information for monetary value; however, we may share certain personal information with third parties to improve our services. You have the right to opt-out of the sale or sharing of your personal information.
- Right to Limit Use of Sensitive Personal Information: If we collect sensitive personal information (as defined by California law), you may request that we limit its use to that which is necessary to perform our services.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your rights under the CCPA/CPRA.
How to Exercise Your Rights:
To exercise any of these rights, please email us at contact@hedleystudios.com.
When you make a request, we will take steps to verify your identity before responding. You may also designate an authorized agent to make a request on your behalf.
Data Collection and Disclosure:
In the preceding 12 months, we may have collected, used, or disclosed the following categories of personal information as defined by California law:
- Identifiers (e.g., name, contact details)
- Commercial information (e.g., purchase history)
- Internet or other electronic network activity information (e.g., website usage data)
- Professional or employment-related information (e.g., job application details)
Updates to this Privacy Notice
Although most changes are likely to be minor, we may change the Privacy Notice from time to time and at our sole discretion. We encourage visitors to check this page frequently for changes to the Privacy Notice.