Who we are

Our website address is: https://shepherdandflock.ie.

At Shepherd & Flock Ltd., we are committed to protecting and respecting your privacy. This Privacy Statement outlines how we look after your personal data with regard to your use of this website. It also informs you as to our obligations and your rights under data protection law. For the purposes of data protection legislation, we are the data controller and we will process your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 and national laws, which relate to the processing of personal data.

The following information outlines our views and practices regarding your personal data and how we will treat it.

What personal data do we collect?

Personal data means any information relating to an identified or identifiable natural person. Personal data may be factual (e.g. a name, address or date of birth) or it can be an opinion about that person, their actions and behaviour.

We may collect and process personal data about you in the following circumstances:

1. Whenever you provide information to us when reporting a problem with our Site, making a complaint, making an inquiry or contacting us for any other reason. If you contact us, we may keep a record of that correspondence
2. Details of your visits to our Site including, but not limited to, traffic data, location data, weblogs and other communication data;
3. We may use your personal data for our legitimate interests in order to:
   • provide you with information, or services that you requested from us;
   • ensure that content from our Site is presented in the most effective manner for you and for your device
   • improve our Site and services;
   • process and deal with any complaints or inquiries made by you; and
   • contact you for marketing purposes where you have signed up for these.
4. Our Site may, from time to time, contain links to and from the websites of third parties. Please note that if you follow a link to any of these websites, such websites will apply different terms to the collection and privacy of your personal data and we do not accept any responsibility or liability for these policies. When you leave our Site, we encourage you to read the privacy notice/policy of every website you visit.

How do we collect your personal data?

We collect your personal data as follows:

1. We collect information from you when we are setting you up as a new client of the agency which can include identifying information and financial data.
2. We collect certain personal data through our website through use of contact forms, cookies etc. Our cookies policy can be found here
3. We collect personal data and other information from you during the course of providing you with branding, design, photography and any other creative services as described in any communication with clients.

Client data

1. We will collect details such as contact names, email addresses and telephone numbers when you instruct us. We will use this information to process your order and comply with our contractual obligations.
2. In order to perform our contract with you, we may also need to share personal data with third party providers in line with the agreed scope of work, including but not limited to food stylists ,photographers, illustrators, payment providers and postal service organisations to assist in the delivery of our services to you.
3. We may also advertise your feedback on our website and marketing materials (subject to obtaining your prior consent where necessary);
4. We will retain your information as long as we require it to provide our services to you and then for a period of six years from our last engagement.

Supplier data

1. We will collect details such as contact names, email addresses, postal address and telephone numbers in order to contact you about goods or services ordered with you, to place further orders and to pay you for the goods and/or services supplied.
2. We will keep the personal data for six years further to being provided with the goods/services.

If you fail to provide personal data

Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide the data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example to provide you with our goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.

Marketing

1. In addition to the uses described in sections 2-4 above, we may use your personal data for our legitimate interests in order to provide you with details about our services and events which we think may be of interest.
2. You have the right to opt-out of receiving the information detailed in point (i) at any time. To opt-out of receiving such information you can click the unsubscribe button contained in any such communication received; email us at [email protected], providing us with your name and contact details.

Automated processing

We do not undertake automated decision making with your personal data.

Legal basis for processing your personal data

We will only use your personal data where the law allows us to. Most commonly, we will use your personal data in the following circumstances:

1. for performance of a contract we enter into with you;
2. where necessary for compliance with a legal or regulatory obligation we are subject to;
3. for our legitimate interests (as described within this policy) where your interests and fundamental rights do not override these interests.

The Owner may process Personal Data relating to Users if one of the following applies:

• Users have given their consent for one or more specific purposes. Note: Under some legislations the Owner may be allowed to process Personal Data until the User objects to such processing (“opt-out”), without having to rely on consent or any other of the following legal bases. This, however, does not apply,
• whenever the processing of Personal Data is subject to European data protection law;
• provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations thereof;
• processing is necessary for compliance with a legal obligation to which the Owner is subject;
• processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Owner;
• processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.

In any case, the Owner will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

Place

The Data is processed at the Owner’s operating offices and in any other places where the parties involved in the processing are located.

Depending on the User’s location, data transfers may involve transferring the User’s Data to a country other than their own. To find out more about the place of processing of such transferred Data, Users can check the section containing details about the processing of Personal Data.
Users are also entitled to learn about the legal basis of Data transfers to a country outside the European Union or to any international organization governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by the Owner to safeguard their Data.

If any such transfer takes place, Users can find out more by checking the relevant sections of this document or inquire with the Owner using the information provided in the contact section.

Retention time

Personal Data shall be processed and stored for as long as required by the purpose they have been collected for.
Therefore:

• Personal Data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until such contract has been fully performed.
• Personal Data collected for the purposes of the Owner’s legitimate interests shall be retained as long as needed to fulfill such purposes. Users may find specific information regarding the legitimate interests pursued by the Owner within the relevant sections of this document or by contacting the Owner.
• The Owner may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, the Owner may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.
• Once the retention period expires, Personal Data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.

The purposes of processing

The Data concerning the User is collected to allow the Owner to provide its Services, as well as for the following purposes: Traffic optimization and distribution, Hosting and backend infrastructure, Registration and authentication, Analytics, Displaying content from external platforms, User database management, Managing contacts and sending messages, Contacting the User, Managing support and contact requests, Content commenting, SPAM protection and Remarketing and behavioral targeting.
Users can find further detailed information about such purposes of processing and about the specific Personal Data used for each purpose in the respective sections of this document.

Detailed information on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Analytics

The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.

Google Analytics (Google Inc.)

Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google utilizes the Data collected to track and examine the use of this Application, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.

Personal Data collected: Cookies and Usage Data.
Place of processing: US – Privacy Policy – Opt Out.

Facebook Ads conversion tracking (Facebook, Inc.)

Facebook Ads conversion tracking is an analytics service provided by Facebook, Inc. that connects data from the Facebook advertising network with actions performed on this Application.

Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy.

Contacting the User

Mailing list or newsletter (this Application)

By registering on the mailing list or for the newsletter, the User’s email address will be added to the contact list of those who may receive email messages containing information of commercial or promotional nature concerning this Application. Your email address might also be added to this list as a result of signing up to this Application or after making a purchase.

Personal Data collected: email address.

Contact form (this Application)

By filling in the contact form with their Data, the User authorizes this Application to use these details to reply to requests for information, quotes or any other kind of request as indicated by the form’s header.

Personal Data collected: email address, first name and last name.

Content commenting

Content commenting services allow Users to make and publish their comments on the contents of this Application.
Depending on the settings chosen by the Owner, Users may also leave anonymous comments. If there is an email address among the Personal Data provided by the User, it may be used to send notifications of comments on the same content. Users are responsible for the content of their own comments.
If a content commenting service provided by third parties is installed, it may still collect web traffic data for the pages where the comment service is installed, even when Users do not use the content commenting service.

Comment system managed directly (this Application)

This Application has its own internal content comment system.

Personal Data collected: email address, username and website.

Displaying content from external platforms

This type of service allows you to view content hosted on external platforms directly from the pages of this Application and interact with them.
This type of service might still collect web traffic data for the pages where the service is installed, even when Users do not use it.

Google Fonts (Google Inc.)

Google Fonts is a typeface visualization service provided by Google Inc. that allows this Application to incorporate content of this kind on its pages.

Personal Data collected: Usage Data and various types of Data as specified in the privacy policy of the service.
Place of processing: US – Privacy Policy.

Google Maps widget (Google Inc.)

Google Maps is a maps visualization service provided by Google Inc. that allows this Application to incorporate content of this kind on its pages.

Personal Data collected: Cookies and Usage Data.
Place of processing: US – Privacy Policy.

Gravatar (Automattic Inc.)

Gravatar is an image visualization service provided by Automattic Inc. that allows this Application to incorporate content of this kind on its pages.
Please note that if Gravatar images are used for comment forms, the commenter’s email address or parts of it may be sent to Gravatar – even if the commenter has not signed up for that service.

Personal Data collected: email address and Usage Data.
Place of processing: US – Privacy Policy.

Instagram widget (Instagram, Inc.)

Instagram is an image visualization service provided by Instagram, Inc. that allows this Application to incorporate content of this kind on its pages.

Personal Data collected: Cookies and Usage Data.
Place of processing: US – Privacy Policy.

Spotify widget (Spotify AB)

Spotify is an audio content delivery service provided by Spotify AB that allows this Application to incorporate content of this kind on its pages.

Personal Data collected: Cookies and Usage Data.
Place of processing: Sweden – Privacy Policy.

Typekit (Adobe Systems Incorporated)

Typekit is a typeface visualization service provided by Adobe Systems Incorporated that allows this Application to incorporate content of this kind on its pages.

Personal Data collected: Usage Data and various types of Data as specified in the privacy policy of the service.
Place of processing: US – Privacy Policy.

Vimeo video (Vimeo, LLC)

Vimeo is a video content visualization service provided by Vimeo, LLC that allows this Application to incorporate content of this kind on its pages.

Personal Data collected: Cookies and Usage Data.
Place of processing: US – Privacy Policy.

YouTube video widget (Google Inc.)

YouTube is a video content visualization service provided by Google Inc. that allows this Application to incorporate content of this kind on its pages.

Personal Data collected: Cookies and Usage Data.
Place of processing: US – Privacy Policy.

Hosting and backend infrastructure

This type of service has the purpose of hosting Data and files that enable this Application to run and be distributed as well as to provide a ready-made infrastructure to run specific features or parts of this Application. Some of these services work through geographically distributed servers, making it difficult to determine the actual location where the Personal Data are stored.

InMotion Hosting

InMotionHosting is a hosting service provided by InMotion Hosting Inc.

Personal Data collected: various types of Data as specified in the privacy policy of the service.
Place of processing: US – Privacy Policy.

Managing contacts and sending messages

This type of service makes it possible to manage a database of email contacts, phone contacts or any other contact information to communicate with the User.
These services may also collect data concerning the date and time when the message was viewed by the User, as well as when the User interacted with it, such as by clicking on links included in the message.

MailChimp (The Rocket Science Group, LLC.)

MailChimp is an email address management and message sending service provided by The Rocket Science Group, LLC.

Personal Data collected: email address.
Place of processing: US – Privacy Policy.

SPAM protection

This type of service analyzes the traffic of this Application, potentially containing Users’ Personal Data, with the purpose of filtering it from parts of traffic, messages and content that are recognized as SPAM.

Akismet (Automattic Inc.)

Akismet is a SPAM protection service provided by Automattic Inc.

Personal Data collected: various types of Data as specified in the privacy policy of the service.
Place of processing: US – Privacy Policy.

Details about the right to object to processing

Where Personal Data is processed for a public interest, in the exercise of an official authority vested in the Owner or for the purposes of the legitimate interests pursued by the Owner, Users may object to such processing by providing a ground related to their particular situation to justify the objection.
Users must know that, however, should their Personal Data be processed for direct marketing purposes, they can object to that processing at any time without providing any justification. To learn, whether the Owner is processing Personal Data for direct marketing purposes, Users may refer to the relevant sections of this document.

Disclosure of personal data to third parties

In addition to the third parties mentioned above, we may disclose your information to third parties for our legitimate interests as follows:

1. to staff members in order to facilitate the provision of goods or services to you;
2. to our affiliated entities to support internal administration;
   providers, freelance and agency staff; professional advisers including accountants, consultants, lawyers, bankers and insurers who provide us with consultancy, banking, legal, insurance and accounting services; regulators and other authorities who require reporting of processing activities in certain circumstances. We may disclose personal data to the police, regulatory bodies, legal advisors or similar third parties where we are under a legal duty to disclose or share personal data in order to comply with any legal obligation, or in order to enforce or apply our website terms and conditions and other agreements; or to protect our rights, property, or safety of our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction. We will not sell or distribute personal data to other organisations without your approval.

Cross-border data transfers

Where permitted by applicable law, we may transfer your personal data to the United States and other jurisdictions outside the European Economic Area (‘EEA’) for the purposes set out in this privacy policy.

Data security

The transmission of information via the internet is not completely secure. Whilst we will do our best to protect your personal data, we cannot guarantee the security of your information transmitted to our Site; any transmission is at your own risk.

Access to, updating, deleting and restricting use of personal data

1. It is important that the personal data we hold about you is accurate and current. Please keep us informed if the personal data we hold about you changes. Data protection legislation gives you the right to object to the processing of your personal data in certain circumstances or withdraw your consent to the processing of your personal data where this has been provided. You also have the right to access information held about you and for this to be provided in an intelligible form. If you would like a copy of some or all of your personal information, please send an email to [email protected]. In certain circumstances we reserve the right to charge a reasonable fee to comply with your request.
2. You can also ask us to undertake the following: update or amend your personal data if you feel this is inaccurate; remove your personal data from our database entirely; send you copies of your personal data in a commonly used format and transfer your information to another entity; or restrict the use of your personal data.
3. We may request specific information from you to help us confirm your identity and your right to access, and to provide you with the personal data that we hold about you or make your requested changes. Data protection legislation may allow or require us to refuse to provide you with access to some or all the personal data that we hold about you or to comply with any requests made in accordance with your rights referred to above. If we cannot provide you with access to your personal data, or process any other request we receive, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

Right to withdraw consent

Where you have provided your consent to the collection, processing and transfer of your personal data, you have the legal right to withdraw your consent under certain circumstances. To withdraw your consent, please contact us at [email protected]

Changes to our data policy

The Owner reserves the right to make changes to this privacy policy at any time by giving notice to its Users on this page and possibly within this Application and/or – as far as technically and legally feasible – sending a notice to Users via any contact information available to the Owner. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom. If a User objects to any of the changes to the Policy, the User must cease using this Application and can request that the Owner remove the Personal Data. Unless stated otherwise, the then-current privacy policy applies to all Personal Data the Owner has about Users.

Owner and Data Controller

You can contact us with any queries, complaints or requests to exercise your data protection rights using the details below:

Shepherd & Flock Ltd.
c/o 18A Redleaf Business Park, Turvey, Co. Dublin.
Owner contact: Contact

Last updated 4th June 2020.