Privacy policy

We are Graffic, a design business operated by Conor and James Rafferty. If you have any questions about this notice, or about how we use your personal data, please contact us at info@grafficbelfast.com or by post at 27 Glantane Dr, Belfast BT15 3FE.

We collect and use personal data about you, and about the people we deal with on your project, including:

• your name, and the names of your contacts;
• contact details, such as your email address, phone number and address;
• information about your project and the instructions you give us;
• billing and payment information; and
• our correspondence with you.

We use your personal data to:

• carry out the work and manage and track your project — to perform our contract with you;
• prepare and send invoices, and send payment reminders (which may be automated) — to perform our contract with you and for our legitimate interests in being paid and running our business;
• keep proper business and accounting records — to meet our legal obligations;
• respond to your enquiries, questions and any complaints — for our legitimate interests in managing our work and our relationship with you.

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights and have concluded that they are not.

We may send payment reminders automatically when an invoice is due or overdue. These reminders are routine administration and do not involve any automated decision that produces legal effects for you or similarly significantly affects you.

Your personal data is stored in a database on secure servers provided by our hosting provider, Hostinger, which stores the data on our behalf under terms that require it to keep the data secure. These servers are located in England, with backup servers in Germany. We take reasonable technical and organisational measures to protect your personal data. Where personal data is stored or processed outside the UK, we make sure that appropriate safeguards are in place as required by data protection law.

We do not sell your personal data. We only share it where necessary: with our hosting provider, which stores it for us; with our professional advisers, such as our accountant, where they need it; and where we are required to share it by law, or to establish, exercise or defend legal claims.

We keep your personal data for as long as we are working with you and for a reasonable period afterwards. We keep billing and accounting records for as long as the law requires (normally six years), and we may keep other information for longer where we need it to deal with queries or disputes.

Under data protection law you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your personal data;
• ask us to restrict how we use it;
• object to certain uses of it; and
• ask us to transfer certain data to you or to another provider.

Where we rely on your consent for anything, you can withdraw that consent at any time. To exercise any of these rights, please contact us using the details in section 1. We will respond within the time limits set by law.

If you are unhappy with how we have handled your personal data, please contact us first so that we can try to put things right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection, at ico.org.uk or by calling 0303 123 1113.

We may update this notice from time to time. The latest version will be available on this page, and we will show the date it was last updated.