Privacy Statement
At Dramagical Entertainment Ltd, we take your privacy very seriously. We aim to earn and keep your trust by not only providing an excellent service through the website for our visitors and Members, but also by making every effort to keep our website safe, maintain very high standards in respecting your privacy and explain in simple language how we operate.
Our Services
All visitors can browse www.dramagicalemtertainment.com without having to create an account or become a (paid) Member. However, to download our Member content, visitors must create an account and purchase a Membership. We also offer an optional newsletter, workshop Booking System and Contact Us form. Throughout this Privacy Statement we therefore outline our services as follows:
-
Browsing our website
-
Creating an account
-
Purchasing a Membership
-
Subscribing to the newsletter
-
Workshop Booking System
-
Contacting us
What information is collected and why
To provide our services, we may collect your personal information in various ways. We explain the ways below and provide, in square brackets, the lawful bases for each as obliged by the EU GDPR.
1. Browsing our website:
-
Log files: When you browse our website, our services automatically receive and store information from your browser such as your IP address and the pages you visit. This information is stored in log files for up to 2 days. We may use this information to defend our servers against abuse, troubleshoot technical problems and understand how our platform is used. [Legal obligation GDPR Article 6(1)(c)] [Legitimate interests GDPR Article 6(1)(f)]
-
Analytics: To improve the website for our visitors and Members, we collect information (such as pages viewed, length of visit, browser and device). The data is stored for up to 5 years. It helps us to know what you like, so we can provide more! [Consent GDPR Article 6(1)(a)] [Legitimate interests GDPR Article 6(1)(f)]
2. Creating an account:
-
The first step in becoming a Member is creating an account on the website by providing your name and email address. We store these on our servers. If you become a Member, we store your information as long as your Membership lasts and as long as we are legally required. If you don't become a Member, we delete your information automatically after 7 days. [Contract GDPR Article 6(1)(b)]
3. Purchasing a Membership:
-
When you become a paid Member, our shopping card provider stores necessary information such as your name, email address, country (self-certified) and IP Address. We do not store your credit card or bank details ourselves as we use payment processors for security, but we are legally required to keep a record of these transactions for at least 6 years after the end of the financial year that you joined up in and, for EU citizens, for 10 years (to comply with EU Digital VAT policy). You can find more details about our shopping card provider and payment processors below. [Contract GDPR Article 6(1)(b), [Legal Obligation GDPR Article 6(1)(c)]
-
All payments are processed via a third party integration called Stripe, completely secure, PCI compliant and SSL enabled. Stripe has certain data processing activities for which it acts as a data controller, and others for which it acts as a data processor. A good illustration of this dual role is when Stripe processes card transactions. Facilitating a transaction requires the processing of personal data, such as the cardholder’s name, card number, the card expiry date, and CVC code.
4. Subscribing to the newsletter:
-
When you sign up for our newsletter you give us your email address through one of our forms. We use a newsletter service (details below), which stores your email address and IP address as well as information such as whether you open a newsletter or click on a link, which helps us to provide a better newsletter service. [Consent GDPR Article 6(1)(a)] [Legitimate interests GDPR Article 6(1)(f)]
5. Workshop Booking System:
-
All transactions are through Stripe (our payment processor as used above for Purchasing a Membership) and subject to Stripe's Terms of Use and Privacy Policy
www.stripe.com/payment-terms/legal
Please see their relevant Privacy Policies, Terms of Service additionally to this statement.
6. Contacting us:
-
When you contact us via email, we will save your message and contact details in order to provide support. [Legitimate interests GDPR Article 6(1)(f)]
-
When you contact us via our Instant Chat Tab, our service provider stores your name (if provided), email address and IP address so that we can respond to you promptly and efficiently. [Legitimate interests GDPR Article 6(1)(f)]
How we share your information (our relationships with data processors)
To provide our services we need the help of other companies, who process some aspects of your personal information. We list them and for what purposes they use your information below.
1. Browsing our website
-
Wix. Hosting our servers. Improves website performance, speed and security.
-
Google Analytics. Provides statistics and analytics.
2. Creating an account
-
Wix. As above.
-
Google Mail / Mailchimp. Transactional emails.
3. Purchasing a Membership
-
Stripe. Payment processor.
-
Google Mail / Mailchimp. As above.
4. Subscribing to the newsletter
-
Mailchimp. Newsletter provider.
5. Workshop Booking System
-
Stripe. Payment processor.
6. Contacting us
-
Google Mail. Provides emails.
-
Wix. Provides our Contact form.
How we store and secure your information
1. Browsing our website.
-
Our log files are stored on secure servers in the US, hosted by Wix. Wix has state-of-the-art security processes in place, including
-
SSH Key Authentication, Intrusion Detection System, Advanced Policy Firewall, Monitoring System, User Activity Analysis
-
-
Our analytics are provided by Google Analytics, which operates data centres around the world. Google is committed to keeping the information stored on its computer systems safe and secure. A multi-layered security strategy is implemented throughout the organisation. You can read more about their strategy here. We ask Google Analytics to mask IP addresses to further protect your privacy.
2. Creating an account
-
Your account details are stored on our servers in the US, hosted by Wix. See above for more information about Wix’s security measures.
3. Purchasing a Membership
-
Your personal (but not financial) details will be stored on Wixs servers in the US. The financial details of your purchase will be stored by Stripe.
4. Subscribing to the newsletter
-
Your email address and a record of your interactions with the newsletter will be stored on Mailchimps servers in the US.
5. Workshop Booking System
-
Your account details are stored on our booking system Book My Class. The financial details of your purchase will be stored by Stripe.
6. Contacting us
-
Your emails to us will be stored on Google's servers while we are in correspondence with you and until it is appropriate for us to delete them.
-
Your communications through our contact form with us will be stored on Wixs servers in the US.
When we transfer any personal information to a third party processor in a country which is not a member state of the EU we endeavour to comply with the applicable legislation to ensure that your personal information is adequately protected. We will not knowingly transfer personal information to jurisdictions that do not provide adequate safety and security guarantees.
How you can access and control your information
If you would like to access your personal information, please contact us and give us as much detail as possible about what you require, and why.
If you would like to rectify your personal information, please contact us.
If you would like to remove your personal information, please contact us. If you have purchased a Membership we may need to store your information to comply with UK law.
Children
Children are welcome to browse our website with adult supervision, but we ask that anyone creating an account on the website is over 16. We have required confirmation via a check-box to this effect. Likewise we ask that anyone signing up for the newsletter is also over 16.
Other important privacy information
-
Links to other websites or services
-
Our website may contain links to other websites. Where possible we alert you that you will be leaving www.dramagicalentertainment.com if you click on one of these links, but some may have escaped! These third party websites and the way they process collected information are the sole responsibility of their owners.
-
-
Embedded videos or maps
-
We do occasionally link to Youtube or other video sharing sites. As above, we are not responsible for the way those third party websites collect and process your information.
-
-
Updates to our Privacy Policy
-
We may update this Privacy Policy from time to time, and we will post the changes on this page.
-
-
You may also be interested in
-
Our Term and Conditions
-
Our Terms of Use
-