• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to footer

graphics.coop

Good Design for Good Causes

  • Home
  • Design
  • Print
  • Our work
  • About
  • Contact

How we process personal data on behalf of clients

graphics.coop is a design and website development company. We design, build and maintain websites for many of our client organisations. We also provide email services and handle mailing lists for a few of our them.

Our work entails processing data collected by our clients’ websites (eg via form submissions, cookies and analytics), and data provided to us directly by our clients (eg membership lists and mailing lists).

You may have been given a link to this page from one of our client organisations as part of their compliance with the General Data Protection Regulation (GDPR), which requires them to list who processes the data they control. This page provides information about how we process that data, which may include personal data about you. For the purposes of GDPR, we are a Data Processor for our clients, who are the Data Controllers.

Reason for processing

We process data on behalf of our clients in order to carry out the work they contract us to do (eg designing, building and maintaining their websites).

What personal data is collected, how it is processed, and where it is stored

Under GDPR, organisations are prohibited from transferring personal data outwith the UK, European Economic Area or Switzerland, to third countries and international organisations, except where the European Commission has determined that an adequate level of protections are afforded to individuals. The US government has a certification scheme called Privacy Shield, which provides assurance that such protections are in place.

We host our clients’ websites on servers in the UK managed by two companies: Electric Hosting, a UK company and; Flywheel, a US company which is registered with Privacy Shield. Backups of data from these websites are stored in encrypted form, both on servers within the EU owned by AWS Europe, and on our own computers. Flywheel operate their own backup system, which is covered by their Privacy Shield compliance.

A variety of third-party plugins and analytics services are in use on our clients websites. Some of these collect personal data (eg through cookies). We check the GDPR compliance of these companies and services, and make adjustments where necessary to ensure compliance. A full list of cookies set by each client’s website should be provided on their site.

Most of our clients websites include contact forms, where website users can submit data to contact our clients and use their services. Most of the data entered by users into these forms is personal data, and in a few cases is sensitive personal data.

Mailing and membership lists belonging to our clients may be administered directly from their websites, or may be collected by their websites and administered by third-party email companies, MailChimp (based in the USA) and Campaign Monitor (based in Australia). Both of these companies have declared their compliance with GDPR. Most of our clients using these companies manage their own lists, but we assist some of them directly with their mailings and list management.

Data supplied to us by clients exists on our own computers and on the online projects management systems we use. Primarily, this comprises email, which we host on a secure server on our own premises, and systems operated by Teamwork, a company based in the Republic of Ireland.

Data held on computers and storage devices on our own premises, and backups of the data held off-site elsewhere in Edinburgh (as part of our disaster-recovery planning) are all protected against theft by strong encryption.

For comparison, you can view the information about cookies and personal data collected by our own website

You can also view a list of the third-party sub-processors we may use on to process data on behalf of our client organisations. Please note that not all of these third party sub-processors are used for every client, just a subset will be in use.

Retention and deletion of personal data

We identify and delete personal data in our possession which is controlled by our client organisations, when it is no longer needed for the performance of our contract with the client organisation.

Personal data for use in a one-off short-term contract is deleted soon after completion of the contract (eg we delete a mailing list provided to us for a single mailing after it has been sent out).

Some of our contracts with client organisations last for many years, and some of these include personal data (eg membership lists administered from websites which we maintain). We encourage and assist our clients in implementing good practice with the personal data collected by, and administered by their websites. Data collected by their website forms should be deleted when it is no longer needed, the retention period depending on the purpose for which that particular data was collected by that particular organisation – this could be days, weeks, months or years – refer to the organisation’s website for its policy. Membership and mailing lists need to be kept up-to-date and data on unsubscribed individuals should not be retained, unless necessary for compliance (eg to prevent inadvertantly emailing somebody who has opted out).
When deleting personal data, we take steps to delete all copies beyond reasonable possibility of restoration, including copies on backups. Digital data is deleted securely by overwriting it, and data on paper physically destroyed.

Subject Access Requests

If you wish to make a Subject Access Request about data we process on behalf of one of our client organisations, the request should be addressed to that organisation (the Data Controller).

What would happen in the event of a personal data security breach

If we become aware of a personal data breach involving data we process for one of our client organisations, we will notify the client organisation without undue delay. As the Data Controller, our client organisation is then responsible for following its own data breach procedures, and informing the Information Commissioner Office and those affected by the breach where necessary. As a Data Processor, we have a role in assisting our client with the subsequent investigation and remedial work.

 

Primary Sidebar

Get in touch

E: info@graphics.coop
T: 0131 464 0067

Graphics Co-op Ltd
Regus Express
Fleming House
30 Kinnaird Park
Edinburgh
EH15 3RD
graphics.coop
Fleming House, Fort Kinnaird Retail Park, Edinburgh EH15 3RD

[ssba_hide]

Client feedback

Voluntary Health Scotland

Working with graphics.coop has been a really good decision for VHS and we have recommended them time and again to other organisations in the third sector.

Claire Stevens, Voluntary Health Scotland

graphics.coop
2016-02-10T17:16:19+00:00

Claire Stevens, Voluntary Health Scotland

Voluntary Health Scotland logo
Working with graphics.coop has been a really good decision for VHS and we have recommended them time and again to other organisations in the third sector.
https://graphics.coop/testimonials/voluntary-health-scotland/

Apex Scotland

graphics.coop more than met our expectations of service delivery and we would certainly recommend them as a company.

Lynn Hannah

graphics.coop
2015-10-20T18:47:46+01:00

Lynn Hannah

Apex logo
graphics.coop more than met our expectations of service delivery and we would certainly recommend them as a company.
https://graphics.coop/testimonials/apex-scotland/

Low Energy Apartment Futures project, Changeworks

graphics.coop were brilliant to work with — we are really pleased with the end result. Definitely recommend!

Tessa Clark

graphics.coop
2015-10-20T18:51:35+01:00

Tessa Clark

Low Energy Apratment Futures Logo
graphics.coop were brilliant to work with — we are really pleased with the end result. Definitely recommend!
https://graphics.coop/testimonials/low-energy-apartment-futures-project-changeworks/

Nourish Scotland

Working with graphics.coop is stress free — I highly recommend them to anyone.

Matilda Scharsach, Communications Manager

graphics.coop
2015-10-20T18:37:37+01:00

Matilda Scharsach, Communications Manager

Nourish Scotland Logo
Working with graphics.coop is stress free — I highly recommend them to anyone.
https://graphics.coop/testimonials/nourish-scotland/

Cedar Project

graphics.coop staff are helpful, efficient and incredibly good at what they do.

Orlaith McAree, National Development Worker

graphics.coop
2015-11-16T10:38:11+00:00

Orlaith McAree, National Development Worker

Cedar Network Logo
graphics.coop staff are helpful, efficient and incredibly good at what they do.
https://graphics.coop/testimonials/cedar/

Social Research Association

We use @graphicscoop for most of our design work, but realised we've never thanked them, for being reliable, quick and sensibly priced!

via Twitter @TheSRAOrg

graphics.coop
2015-10-20T18:39:55+01:00

via Twitter @TheSRAOrg

Social Research Association Logo
We use @graphicscoop for most of our design work, but realised we've never thanked them, for being reliable, quick and sensibly priced!
https://graphics.coop/testimonials/social-research-association/

Scottish Rural Action

graphics.coop's work has always been of the highest quality, turned round quickly, and with a clear understanding of the brief and real creative flair. They're lovely people to work with!

Norman MacAskill, Director

graphics.coop
2015-10-20T18:41:56+01:00

Norman MacAskill, Director

graphics.coop's work has always been of the highest quality, turned round quickly, and with a clear understanding of the brief and real creative flair. They're lovely people to work with!
https://graphics.coop/testimonials/scottish-rural-action-and-care-farming-scotland/
0
0
graphics.coop

Footer Widget Header

  • Scottish Human Rights Commission annual report 2014-15
    Scottish Human Rights Commission
  • Scottish Child Law Centre print
    Scottish Child Law Centre
  • One Parent Families Scotland Annual Report 2012
    One Parent Families Scotland
  • MND Scotland
    MND Scotland
  • CEDAR design
    CEDAR
  • Newbattle Abbey College Prospectus 2013-2014
    Newbattle Abbey College
  • Jubilee Scotland
    Jubilee Scotland
  • Scottish Fair Trade Forum Annual Review 2013-14
    Scottish Fair Trade Forum
  • Edinburgh Community Food flyers
    Edinburgh Community Food

Footer

Contact us

E: info@graphics.coop T: 0131 464 0067

Unit 30, 1st Floor, Fleming House Fort Kinnaird Retail Park Edinburgh EH15 3RD
graphics.coop Fleming House, Fort Kinnaird Retail Park, Edinburgh EH15 3RD

@graphicscoop

  • We diverted the phone, turned off the screens, and switched off the lights last week. We're all set up to work from… https://t.co/aPFDhX4mj8 27th March 2020 8:28 am
  • 30 years ago today - Alison, Steve & Mitch arrived for work to open The Graphics Company for our first day's trading. 18th September 2019 2:15 pm
  • Our email is running again, having been down for 36 hours. Don't worry if you emailed us during the outage, we're j… https://t.co/vsbvF2qcin 1st May 2019 2:27 pm
  • Major announcement time - we've branched into two new companies! After months of planning, our web and print teams… https://t.co/KlDWm6DsNC 1st May 2019 7:15 am
  • Follow us on Twitter

Major announcement time – we’ve branched into two new companies!

After months of planning, our web and print teams have set up afresh so that each can concentrate on what it does best.

Our web team, Laura, Chris and Robert, are now Form & Function Digital Co-op based in Leith:

Form & Function Digital Co-op
Davidson House
57 Queen Charlotte Street
Edinburgh EH6 7EY
0131 510 8735

general email: hello@formandfunction.coop

twitter: @FaF_Digital

Design and print continues under the graphics.coop brand with Ross and Steve from our new office at Fort Kinnaird:

Graphics Co-op Ltd
Regus Express
Fleming House
30 Kinnaird Park
Edinburgh EH15 3RD
0131 464 0067

email: info@graphics.coop

twitter: @graphicscoop

  • Sitemap
  • Accessibility
  • Legal information
  • Privacy Information Notice
  • Terms of trade

Powered by WordPress · © 2019 Graphics Co-op Ltd (trading as graphics.coop) · Company number SC625959 registered in Scotland