As a writer (and actor) whose business deems it necessary to engage with, and therefore retain contact details of, customers, clients, colleagues, fans, and general members of the public, I have done my best to familiarise myself with the guidelines for compliance with the new General Data Protection Regulation (GDPR) rules. I’m still not sure I’m any the wiser. However, here is my statement which aims to make clear how I collect, store and process data.
Email addresses (and other contact information, if provided), of anyone who has emailed me. This is not done automatically by any software, but personally by me. I am therefore the only person who has access to it.
I am happy to delete any data held, upon request and within a reasonable timescale.
I will respond to all requests as soon as possible. If I am at home in my office, or out and about but still with good internet access, this will usually be within 24-48 hours. However, sometimes it may take longer, for example when big writing deadlines loom, or if Cranked Anvil is in the middle of a production/production week.
I have taken all possible steps to prevent this. All computers and devices I use to operate my business and store information are fully password-protected. Any information held is handled by me personally, and it is not to my knowledge stored on any kind of ‘cloud access’ program.
I hope this makes clear my position on GDPR. I aim to operate in a completely transparent and lawful way when it comes to holding an individual’s data, and I am happy to answer any questions or concerns – please don’t hesitate to get in touch.