​

Introduction

Le Nouveau Départ is committed to protecting the privacy of personal data under the new General Data Protection Regulation (GDPR) (May 2018)

 

Contact Details:

The business owner: Luna Duric

Address:  Le Nouveau Départ, Unit 95048, PO Box 6945, London, W1A 6US

 Email: info@lenouveaudepart.co.uk

 

​

Personal Data

This is any personal data you share with us, and could include: your name, your postal address, your email address, Instagram handle and your telephone number. Credit card information used to take payment may be handled through wix.com and adhered to PCI-DSS as managed by the PCI security standards council.

(See confidentiality and data protection)

​

This may be used for the following purposes:

to respond to your queries;

to provide services where requested;

​

You have the right to request to see, amend or remove any personal information we hold about you.

See section 2: Your Rights below.

 

​

Confidentiality and Data Protection

Data will be stored up to completion of service unless requested otherwise. If further services are required your explicit consent will be required before being actioned.  

​

Our company is hosted on wix.com platform. Wix.com provides us with the online platform that allows us to sell our services to you. Therefore, your data may be stored through wix.com data storage. This is stored on secure servers behind a firewall.

​

All direct payment gateways offered by Wix.com and used by our company adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

​

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect.

 

​

Legal Basis (or bases)

 

The legal bases on which we process your data are as follows:

 

Consent

We require your consent to store and utilise your data. Each form you complete, whether on the website or on paper, will have a consent agreement statement. We may use this data to inform you of other services which may be of interest to you.

 

Contract

By entering into an agreement with Le Nouveau Départ you understand that we will store and process such data as you provide on application.

 

What we Collect

Name

Contact information including email address

Other information relevant to customer enquiries

Other information pertaining to surveys and/or offers and your orders

​

Collecting this information helps us to understand what you are looking from the company enabling us to provide you with a better service and in particular for the following reasons:

For our own internal records.

 

Le Nouveau Départ will not store or process special category data. Some special category data, such as ethnicity, may become known to us during any photo shoot, but we will not store or process this information.

 

​

Links to other Websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

 

​

Breach Notification

A personal data breach may mean that someone other than the data controller gains unauthorised access to personal data. However, a personal data breach can also occur if there is unauthorised access within an organisation, or if a data controller’s own employee accidentally alters or deletes personal data.

 

All breaches of the GDPR are to be reported without undue delay to the Information Commissioners Office (ICO) within 72 hours, unless the breach is unlikely to result in any risk to the rights and freedoms of data subjects, and to the data subjects without undue delay unless a specified exemption applies.

 

Notifications to the data subjects will provide name and contact details of the data controller where more information can be obtained, the likely consequences of the personal data breach and the measures taken or proposed to be taken by the controller to address the personal data breach, including, where appropriate, measures to mitigate its possible adverse effects.

 

​

Your Rights

Data Subject Rights and Subject Access Requests

 

Le Nouveau Départ is fully committed to respecting individuals’ rights to access personal information held about them in accordance with Article 17 of the GDPR.

 

​

Subject access rights

Your data protection rights

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at info@lenouveaudepart.co.uk if you wish to make a request.

 

 

 

Exempt information

Le Nouveau Départ may not be able to release some information. Information which is exempt from a subject access request includes:

personal data where disclosure could prejudice the prevention or detection of crime; and,

personal data identifying another person (a third party) whose details cannot be disclosed without their permission.

How to make a request

 

In order to make a valid subject access request the following must be provided:

a clear written request by letter or email.

Proof of identification may be requested to ensure that the personal information requested is provided to the right person.

 

Le Nouveau Départ will comply with requests for access to personal information within one month, as required by the Act. All subject access requests should be addressed to:

​​

The Data Controller

Le Nouveau Départ
Unit 95048, PO Box 6945
London, W1A 6US

 

Email: info@lenouveaudepart.co.uk

​​​

Changes to this Policy

Le Nouveau Départ reserves the right to make any changes to this Privacy and Data Protection Policy, and other aspects of this site at any time. Please check this page regularly for any changes.

 

Policy updated: 17/03/2022

 

Policy review date: 17/03/2023

​