Our Private Data Privacy Policy

We understand that your privacy and security of your personal data is very important. We have many different procedures and controls that we follow to help protect the data we collect about you.

This policy explains what we do with your information and the steps taken to secure it, the way in which we collect your personal data and the rights over your personal data that you possess.

Your Data & quirk + quill

Who we are?

When we say quirk + quill or “we” in this policy we are referring to;
quirk + quill
It will also include any other business that we add to this group in the future.

Why do we collect and keep your data?

As part of our service, quirk + quill provides information on our product offering and general creative market information in the form of a subscription-based newsletter.

When you subscribe to our newsletter quirk + quill collect your data with your explicit consent for the specific processes and purposes as outlined in this policy and any other specific and explicit purposes and processes as detailed to you at the time of consent.

quirk + quill collect and process your personal information for certain legitimate business purposes which include some or all of the following:

To enable us to update you on our services, our intentions with our services, new partnerships and market intel.

To update you on the events that quirk + quill are attending.

To inform you of regulations, market changes and insights from the creative market industry. quirk + quill understands that your interest in the creative market industry may change over time. Therefore, we provide an ‘unsubscribe’ option in every newsletter that we send you, so you can update us of your change in interest at any time.

What data do we keep?

When it comes to your Personal Identifiable Information, the data we keep can involve some or all of the following:

First and last names
Contact details:
Registered Email Address

How do we use your data?

We use your data through both manual and automated processes to perform actions such as some or all of the following:

Direct marketing for quirk + quill.
‍
Direct marketing in the form of a newsletter and new blog content notification.

How long do we keep your data?

As a responsible data handler, Impact Working takes maintaining up to date and accurate records of your data as a priority. Therefore, we ask that you register with your most up to date contact details and we will follow the following data retention procedure.

Every 3 years, we will send a detailed confirmation email that we ask you to reply with an update of your contact details and re-submission of your consent to keep and process your details under the processes and terms outlined in this statement.

Any bad returns or negative responses we receive shall have all data and details removed from our database.

How do we collect your data?

quirk + quill only collects your data via our newsletter subscription and contact form on our website.

How do we protect your data?

quirk + quill uses the latest and most secure mail listing technologies and third parties to protect your data and the information we hold. All quirk + quill's systems are provided by reputable trusted providers such as Mailchimp using cloud technologies providing tested secure environments with multi-layer security and authentication.

Our web systems and networks are certified and secured with the latest trusted technologies including SSL and TLS and hosted on dedicated servers and networks to protect your data and reduce risks of data breaches and cyber-attacks.

Our consultants are trained on GDPR practices, our policies and procedures that promote being responsible and vigilant in protecting our customers data. These policies include hardware protection and best practices to restrict and prevent access to personal data particularly in high risk areas, anonymisation where applicable and response to data threats and breaches.

Who do we share your data with?

quirk + quill does not share your data with third parties, except for the purpose of storage in our third- party mail list management software, Mailchimp.

You & quirk + quill

As a data controller, the data quirk + quill holds is owned by you, the data subject. Therefore, you have a number of rights and obligations beyond this statement of what data we hold, your access, consent and obligations around it, we have outlined these below. If you have any questions on how we use your data or would like to take action under your rights below, including Subject Access Requests then please refer to our SAR process at the bottom of this document.

Your data consent to quirk + quill

By entering your details and clicking submit/subscribe on the quirk + quill email subscription/contact form on our website you are providing your consent for quirk + quill to keep and process your data under the processes and terms outlined within this document.

Your declaration to quirk + quill

For Impact Working to provide an efficient and effective service that benefits you in the best way possible we need to ensure the data we control is relevant and as up to date as reasonably possible. Therefore, when subscribing to our newsletter via the website, you are making a declaration that the information you provide for the uses and processes listed within this document are to the best of your knowledge correct, accurate and true. In doing so you also acknowledge that deliberately given false or misleading information you are liable not only to be withdrawn or dismissed by Impact Lending but also may be liable to legal proceedings against damages caused to Impact Lending's business.

Your right to Access and to be informed

As a reasonable data controller, quirk + quill provides you with the right to be informed of whether we hold or process your data, that we do so in a fair and transparent way and to have access to the data we hold on you as an individual.

If you would like to raise a Subject Access Request (SAR) then please see our procedure at the bottom of this document.

Your right to rectification, erasure, portability or object.

As the data subject and owner, you also have rights to port the personal information we hold on you, to object to quirk + quill holding your data or processing it and to rectify inaccurate and incorrect data we control. You also hold the right to request for the data we hold to be erased however, this does not provide an absolute ‘right to be forgotten’, as there may be some instances where we are required to maintain basic details and data on you as a subject that will enable us to protect you and provide an efficient service. Examples of such legitimate interest can include some or all the following:

The need to maintain data records to comply with your marketing preferences to prevent spam and contact by our business to you as an individual.

quirk + quill will provide erasure when it meets some or all the following criteria:

Where the personal data is no longer necessary in relation to the purpose for which it was originally collected/processed.

When the individual withdraws consent.

When the individual objects to the processing and there is no overriding legitimate interest for continuing the processing.

The personal data was unlawfully processed. The personal data must be erased in order to comply with a legal obligation.

If you wish to see further information around your data rights then please look on the information available on the ICO website: https://ico.org.uk/If you wish to make a request under any of these rights please see the Subject Access Request procedure provided at the end of this document.

Your right to restrict processing and in automated decision making and profiling.

quirk + quill only processes your data for sending the mail newsletter, no profiling or automated decision making takes place when we process your data. Any future profiling of decision making would be made at your own discretion and profile selection of what news you wish to receive.

quirk + quill's Subject Access Request Procedure

As a responsible data controller quirk + quill provides you with the rights to request information on the data we hold and how we use it in accordance with the rights and purposes outlined in this document.

In addition, quirk + quill takes protecting your data that we hold as a priority and to protect you against fraudulent access to your data we have created and outlined our Subject Access Request procedure here within to handle all request procedures you may have regarding your data.

Although quirk + quill will still respond to requests made outside this procedure, such as those made on social media, verbally or via other methods, in most cases those responses will refer you to this procedure below.

All Subject Access Requests and requests to the data we hold on you as an individual under any of the rights outlined in this document must be made to one of the following addresses:

Email Address: justyna@quirk-quill .co.uk

The subject line must include SAR followed by your full name and the body to clearly outline your request, under which rights you wish to make the request and under what grounds you believe the request should be granted.

In order to protect your data, quirk + quill will only grant requests where we have been provided with evidence that you are the data owner we have on record in the form of a photographic identity document such as passport or driving license.

When sending us proof of identity, we recommend that you protect your documents by emailing in a password protected zip file.

The reason we request proof of identity is to allow us to verify that the request is a legitimate request made by the data owner.

All Subject Access Requests will receive a response from quirk + quill within 72 hours acknowledging the request and the necessary actions we will take to grant or respond to the request.

If you have any further questions around our privacy statement, then please feel free to contact us to discuss further.