Privacy Policy
24 February 2025

This Privacy Policy explains how TennesseeJacksDesigns.com ("we," "us," or "our") collects, uses, stores, and protects your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018). You agree to the terms outlined in this policy by using our services.

TennesseeJacksDesigns.com is a private individual website in England and Wales. For the purposes of data protection law, we are the "data controller" of your personal data.

We may collect and process the following types of personal data:

• Personal Identifiers: Name, address, email address, phone number, date of birth.
• Financial Information: Payment details, billing address, and transaction history.
• Technical Data: IP address, browser type, device information, and cookies.
• Usage Data: How you use our website, products, or services.
• Marketing Preferences: Your preferences for receiving marketing communications.

At present, we do not collect any Personal Identifiers or Financial information.

We will only use your personal data for the purposes permitted by UK law, including:

• To fulfil contracts or provide services you have requested.
• To comply with legal obligations under UK law.
• For legitimate business interests, such as improving our services or marketing (where you have not opted out).
• With your explicit consent, where required.

Under the UK GDPR, we rely on the following legal bases to process your personal data:

• Consent: Where you have given clear consent for specific purposes.
• Contractual Necessity: To perform a contract with you or take steps at your request.
• Legal Obligation: To comply with UK laws and regulations.
• Legitimate Interests: For our legitimate business interests, provided your rights and freedoms do not override these interests.

We may share your personal data with:

• Service Providers: Third parties who assist us in delivering our services (e.g., payment processors, IT support).
• Legal Authorities: Where required by law or to protect our legal rights.
• Business Transfers: In the event of a merger, acquisition, or sale of assets.

We ensure all third parties comply with UK data protection laws and maintain the security of your data.

We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements under UK law.

Under the UK GDPR and DPA 2018, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data under certain circumstances.
• Restriction: Request restriction of processing in specific situations.
• Objection: Object to processing based on legitimate interests or direct marketing.
• Data Portability: Request transfer of your data to another party.

To exercise these rights, please contact us at [insert contact details].

If we transfer your data outside the UK, we will ensure adequate safeguards, such as UK-approved Standard Contractual Clauses (SCCs) or adequacy decisions, are in place.

We use cookies to enhance your experience on our website. You can manage your cookie preferences through your browser settings.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, in line with UK GDPR requirements.

We may update this Privacy Policy from time to time. Any changes will be posted on this page and, where appropriate, notified to you by email.

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:info@proton.me