Who are we?
The picturepath application (“app”) is brought to you by picturepath Ltd. picturepath is a limited company registered in England (Company number 10746396) with registered address 17 Boundary Street, Liverpool, England, L5 9UB. For the purposes of this policy, picturepath Ltd is the ‘Data Controller’ and assumes that role under UK and European Law and is registered with the Information Commissioner’s Office.
Information you provide through the application
If you fill in our contact form, you provide us with some details:
Organisation (not required)
Email address (required)
Where you heard about us (not required)
Your email address will be used to send you updates from picturepath only if you give us express permission to do so. This may include details of new features and updates to the application. Our processing basis for this communication is Consent, which you will be requested for at the time you submit the form.
We may retain a record of any contact you make with us.
How long do we hold data for?
We only hold your data for as long as you have an active account, after which we will remove it
Picturepath only retains data for as long as it is strictly required. This means data that you provide through the contact form is held for 12 months. After this time all stored data will be removed from our live systems. Prior to removal we will attempt to contact you to inform you.
In order to operate a reliable system and to avoid data loss we perform regular encrypted backups of the system. These backups are retained for up to 90 days, and after this time are removed. This means that a removed account will be completely removed from all backups 90 days after removal.
Who has access to your data?
We won’t share or sell your information or allow the use of your information for marketing, however we will share relevant information with our suppliers to help us deliver our services to you
Picture path will not sell or rent your information to third parties, and we do not share information for marketing purposes with any third parties
Picturepath may share data with 3rd party suppliers working on our behalf – this includes contractors, agents and other subcontractor who work for PicturePath to provide services and complete tasks for the delivery of our service. Where such a relationship is in place there are contractual safeguards in place to protect your information. Picturepath will only share data that is relevant to the tasks being completed and to the delivery of service to you, and where possible the data will be anonymised. None of these organisations and individuals are permitted to use the data for any other purpose.
At any time you will be free to remove consent by contacting us at firstname.lastname@example.org.
How will we keep your data secure?
Picturepath has been designed with a privacy first development methodology meaning that we follow a rigorous development process which places the security of personal information at its core. To that end we host our application and website using a GDPR compliant cloud data provider (Amazon Web Services) hosting the application and site in the UK. All of our services run over HTTPS using TLS ensuring data transmitted between the application/website and our servers is secure. Data you provide to us which is stored is encrypted when it is stored, and in any backups taken. We take lengths to ensure that the network environment in which the application/website is hosted is kept secure by following best practices and ensuring that security updates are applied in a timely fashion
How do we support your rights?
You have the right to request confirmation that your information is being processed, access to it (through us providing a copy) and other information about how we process your personal data.
We will not contact you for marketing purposes by email unless you have given your prior consent. You can change your marketing preferences at any time by contacting us by email: email@example.com.
The accuracy of your information is important to us. If you change email address, or any of the other information we hold is inaccurate, not complete or out of date and you cannot already change it in the app, please email us at firstname.lastname@example.org
You have the right to ask for a copy of the information PicturePath holds about you. We may, in some circumstances, charge £10 for information requests to cover our costs in providing you with details of the information we hold about you.
You have the right to ask us to erase or delete your information where there is no reason for us to continue to process it. This right would apply if we no longer need to use it, where you withdraw your consent for us to process special categories of your information, or where you object to the way we process your information.
You have the right to ask us to restrict or block the processing of your information. This right applies where you believe the information is not accurate, you would rather we block the processing of it rather than erase your information.
You have the right to port your information by obtaining it from us to reuse for your own purposes across different services. This allows you to move personal data easily to another organisation, or to request us to do this for you.
Right to remove consent
Where we rely upon your consent to perform data processing we allow you to revoke the previously granted consent by contacting us at email@example.com whereupon we will comply with your request.
It is possible to switch off cookies by setting your browser preferences. For more information on how to switch off cookies on your computer, visit our full cookies policy. Turning cookies off may result in a loss of functionality when using our app. For further information about cookies and how to disable them please to go www.aboutcookies.org or www.allaboutcookies.org
Review of Policy
We regularly review our policies – the last review of this policy was undertaken when first created in May 2018.