What is this Policy all about?

Welcome to our Privacy Policy. We are glad you want to know more about how we keep your information safe. This Policy explains how we look after your personal data when you visit our workshops, order from our shop, or use our online services. It also tells you about your privacy rights and how the law protects you. It covers both our online and our offline collection of data, including personal data gathered through our website, our studio events, our retail counters and our printed order forms.

This is our overall Privacy Policy. In some countries and states, additional local provisions apply on top of it. Follow the link above to be taken to the provisions written for your region.

In other words, if you are looking for information on how we collect, store, use and share your personal data, this is the place for you.

Who looks after your personal data?

Vellambry is made up of several legal entities spread across Europe and North America. You can read about how the group is put together on our company page.

This Policy is issued on behalf of every company in the group, with Vellambry Papers Ltd. acting as the data controller. In some places a local Vellambry entity is named as its own controller because processing happens in that country. Wherever this Policy says “we”, “us” or “our”, it means Vellambry Papers Ltd. unless a local notice says otherwise.

We have appointed a data protection officer who oversees any question raised about this Policy. If you have one, please write to our team. You can also send a letter to the data protection officer at:

Vellambry Papers Ltd.
14 Ormstill Row
Bristol BS1 4QF
United Kingdom
Att: Data Protection Officer

Please include your name and the country your enquiry relates to.

Your privacy rights

As a data subject, you have the following rights in respect of the personal data we hold about you:

• Request access to your personal data. You have a right to see the personal data we keep about you. In many cases this information is already shown to you inside your account. Your right of access may be limited by legislation, by the privacy of other people, or by our own trade secrets and internal records.
• Request correction of incomplete or inaccurate data. If what we hold about you is wrong or unfinished, you are entitled to have it corrected, subject to the limits that follow from legislation.
• Request erasure. You have the right to ask us to delete your data when:

1. the personal data are no longer necessary for the purposes they were collected or otherwise processed for;
2. you withdraw your consent to the processing and there is no other lawful reason for it;
3. you object to the processing and there is no overriding reason for us to continue; or
4. the processing is unlawful.

Please note that in certain circumstances we may be required to keep some of your personal data after you have asked us to delete it, in order to meet a legal or contractual obligation. We may also be permitted by applicable law to keep some of it to satisfy our own business needs.

• Limitation of processing of personal data. If you contest the accuracy of the data we have registered about you, or if you have objected to the processing of it in line with your right to object, you may ask us to restrict the processing of that data. Processing will then be limited to storage only, until the accuracy of the data can be established, or until it has been checked whether our legitimate interests override yours. Even when processing has been restricted, we may still use the data to establish, exercise or defend a legal claim, or to process data you have earlier given your consent for.
• Object to processing based on our legitimate interest. You can always object to processing of personal data about you which is based on legitimate interest. Where we are processing your data for direct marketing or for profiling connected with such marketing, your objection will always be upheld. For objections raised on other grounds, we will conduct a balancing test and consider whether to support your objection.
• Data portability. You have a right to receive personal data you have provided to us in a machine-readable format. This right applies to personal data processed by automated means, on the basis of consent or of fulfilling a contract.
• Other rights. You have the right to lodge a complaint with the data protection authority in your country if you are dissatisfied with the way we process your personal data. Contact details for the authority that supervises us are published on our contact page.

Further information: updates

If we change the way we handle your personal data, we will update this Policy. We reserve the right to make changes to our practices and to this Policy at any time, so please look back now and then to see any updates or changes we have made.