GDPR
The law relating to data protection changed on 25th May 2018 when the General Data Protection Regulation (GDPR) came into force. This new piece of EU legislation (Regulation (EU) 2016/679) replaced the Data Protection Act 1998 and will be in force in the UK until the UK leaves the EU. A new Data Protection Act (DPA), which received Royal Assent on May 23 2018, now applies although any business in the UK which collects and/or processes data belonging to any EU citizen will still be required to comply with the GDPR irrespective of the provisions of the DPA.
Under the GDPR, organisations are required to provide individuals with information about the use and processing of their personal data. Note 1: ‘Personal data’ means any information relating to an individual who can be identified from that data. This note is intended to help you understand how you can maintain control of your information. GDPR is about protecting individuals and their rights in respect of their personal information. It is designed to ensure that an individual can maintain control over their information. Under GDPR you can:
- Request access to, deletion of, or correction of your personal data.
- Request your personal data be transferred to another person.
- Complain to a supervisory body.
Who We Are
Our website address is: https://treeoflifepublishing.co.uk. The website is owned in partnership by Peter Dickinson and Rev. Maggy Whitehouse and is for the purpose of publicising books and ebooks by Maggy Whitehouse, Norah Lofts and others.
Your Personal Data: Collecting And Usage
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection. An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Contact forms
Data Used: If Akismet is enabled on the site, the contact form submission data — IP address, user agent, name, email address, website, and message — is submitted to the Akismet service (also owned by Automattic) for the sole purpose of spam checking. The actual submission data is stored in the database of the site on which it was submitted and is emailed directly to the owner of the form (i.e. the site author who published the page on which the contact form resides). This email will include the submitter’s IP address, timestamp, name, email address, website, and message.
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.
Analytics
We do not currently collect data for analytical purposes. Should we decide to do so at some future date, this Privacy Policy will be updated to reflect the updated situation.
Transaction and Billing Information
If you buy something from us—currently limited to downloadable products—you will provide additional personal and payment information that is required to process the transaction and your payment, such as your name, credit card information and contact information. Your personal data (in this case name, email address, IP address) is covered by this Policy; any financial information is collected, by PayPal (if you pay by credit/debit card) or by HSBC Bank (if you pay by BACS), on our behalf. We do not see, receive or store any financial information except in the unlikely circumstance of your providing it to us directly.
Sharing Your Data
Data Retention
If you leave a comment, the comment and its metadata are retained indefinitely. This is so that we can recognise and may approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except that they cannot change their username). Website administrators can also see and edit that information.
Your Data: Your Rights
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
If you are located in certain countries, including those that fall under the scope of the European General Data Protection Regulation (AKA the “GDPR”), data protection laws give you rights with respect to your personal data, subject to any exemptions provided by the law, including the rights to:
- Request access to your personal data;
- Request correction or deletion of your personal data;
- Object to our use and processing of your personal data;
- Request that we limit our use and processing of your personal data; and
- Request portability of your personal data.
You can usually access, correct, or delete your personal data using your account settings and the tools offered but if you aren’t able to do that, or you would like to contact us about one of the other rights, contact the Data Controller, Peter Dickinson, at pgd@treeoflifepublishing.co.uk. EU individuals also have the right to make a complaint to a government supervisory authority.
Where We Send Your Data
Visitor comments are checked through Akismet, an automated spam detection service.
Additional information
Data Protection
This website is secured behind the ‘Wordfence’ firewall which is a very effective measure of protection for this website and for any data of any kind which may be stored on it. In the unlikely event of website data being downloaded by the Data Controller, such data is downloaded to an encrypted computer situated behind a firewall. There is no long-term storage of personal data taken from this website.
Data Breach Procedures
See ‘Data Protection’ above.
Third Party Data
We do not receive data from third parties.
Automated User Data Decision Making and/or Profiling
None.
Appendix: Jetpack Plugin
Comment Likes
This feature is only accessible to users logged in to WordPress.com.
Data Used: In order to process a comment like, the following information is used: WordPress.com user ID/username (you must be logged in to use this feature), the local site-specific user ID (if the user is signed in to the site on which the like occurred) and a true/false data point that tells us if the user liked a specific comment. If you perform a like action from one of our mobile apps, some additional information is used to track the activity: IP address, user agent, timestamp of event, blog ID, browser language, country code, and device info.
Activity Tracked: Comment likes.
Contact Form
Data Used: If Akismet is enabled on the site, the contact form submission data — IP address, user agent, name, email address, website, and message — is submitted to the Akismet service (owned by Automattic) for the sole purpose of spam checking. The actual submission data is stored in the database of the site on which it was submitted and is emailed directly to the owner of the form (i.e. the site author who published the page on which the contact form resides). This email will include the submitter’s IP address, timestamp, name, email address, website, and message.
Data Synced: Post and post meta data associated with a user’s contact form submission. If Akismet is enabled on the site, the IP address and user agent originally submitted with the comment are also synced, as they are stored in post meta.
Infinite Scroll
Data Used: In order to record page views via WordPress.com Stats (which must be enabled for page view tracking here to work) with additional loads, the following information is used: IP address, WordPress.com user ID (if logged in), WordPress.com username (if logged in), user agent, visiting URL, referring URL, timestamp of event, browser language, country code.
Activity Tracked: Page views will be tracked with each additional load (i.e. when you scroll down to the bottom of the page and a new set of posts loads automatically). If the site owner has enabled Google Analytics to work with this feature, a page view event will also be sent to the appropriate Google Analytics account with each additional load.
Jetpack Comments
Data Used: Commenter’s name, email address, and site URL (if provided via the comment form), timestamp, and IP address. Additionally, a jetpack.wordpress.com IFrame receives the following data: WordPress.com blog ID attached to the site, ID of the post on which the comment is being submitted, commenter’s local user ID (if available), commenter’s local username (if available), commenter’s site URL (if available), MD5 hash of the commenter’s email address (if available), and the comment content. If Akismet (also owned by Automattic) is enabled on the site, the following information is sent to the service for the sole purpose of spam checking: commenter’s name, email address, site URL, IP address, and user agent.
Activity Tracked: The comment author’s name, email address, and site URL (if provided during the comment submission) are stored in cookies. Learn more about these cookies.
Data Synced: All data and metadata (see above) associated with comments. This includes the status of the comment and, if Akismet is enabled on the site, whether or not it was classified as spam by Akismet.
Likes
This feature is only accessible to users logged in to WordPress.com.
Data Used: In order to process a post like action, the following information is used: IP address, WordPress.com user ID, WordPress.com username, WordPress.com-connected site ID (on which the post was liked), post ID (of the post that was liked), user agent, timestamp of event, browser language, country code.
Activity Tracked: Post likes.
Mobile Theme
Data Used: A visitor’s preference on viewing the mobile version of a site.
Activity Tracked: A cookie (akm_mobile) is stored for 3.5 days to remember whether or not a visitor of the site wishes to view its mobile version. Learn more about this cookie.
Notifications
This feature is only accessible to registered users of the site who are logged in to WordPress.com.
Data Used: IP address, WordPress.com user ID, WordPress.com username, WordPress.com-connected site ID and URL, Jetpack version, user agent, visiting URL, referring URL, timestamp of event, browser language, country code. Some visitor-related information or activity may be sent to the site owner via this feature. This may include: email address, WordPress.com username, site URL, email address, comment content, follow actions, etc.
Activity Tracked: Sending notifications (i.e. when we send a notification to a particular user), opening notifications (i.e. when a user opens a notification that they receive), performing an action from within the notification panel (e.g. liking a comment or marking a comment as spam), and clicking on any link from within the notification panel/interface.
Protect
Data Used: In order to check login activity and potentially block fraudulent attempts, the following information is used: attempting user’s IP address, attempting user’s email address/username (i.e. according to the value they were attempting to use during the login process), and all IP-related HTTP headers attached to the attempting user.
Activity Tracked: Failed login attempts (these include IP address and user agent). We also set a cookie (jpp_math_pass) for 1 day to remember if/when a user has successfully completed a math captcha to prove that they’re a real human. Learn more about this cookie.
Data Synced: Failed login attempts, which contain the user’s IP address, attempted username or email address, and user agent information.
Sharing
Data Used: When sharing content via email (this option is only available if Akismet is active on the site), the following information is used: sharing party’s name and email address (if the user is logged in, this information will be pulled directly from their account), IP address (for spam checking), user agent (for spam checking), and email body/content. This content will be sent to Akismet (also owned by Automattic) so that a spam check can be performed. Additionally, if reCAPTCHA (by Google) is enabled by the site owner, the sharing party’s IP address will be shared with that service. You can find Google’s privacy policy here.
WordPress.com Secure Sign On
This feature is only accessible to registered users of the site with WordPress.com accounts.
Data Used: User ID (local site and WordPress.com), role (e.g. administrator), email address, username and display name. Additionally, for activity tracking (see below): IP address, WordPress.com user ID, WordPress.com username, WordPress.com-connected site ID and URL, Jetpack version, user agent, visiting URL, referring URL, timestamp of event, browser language, country code.
Activity Tracked: The following usage events are recorded: starting the login process, completing the login process, failing the login process, successfully being redirected after login, and failing to be redirected after login. Several functionality cookies are also set, and these are detailed explicitly in our Cookie documentation.
Data Synced: The user ID and role of any user who successfully signed in via this feature.
WordPress.com Stats
Data Used: IP address, WordPress.com user ID (if logged in), WordPress.com username (if logged in), user agent, visiting URL, referring URL, timestamp of event, browser language, country code. Important: The site owner does not have access to any of this information via this feature. For example, a site owner can see that a specific post has 285 views, but he/she cannot see which specific users/accounts viewed that post. Stats logs — containing visitor IP addresses and WordPress.com usernames (if available) — are retained by Automattic for 28 days and are used for the sole purpose of powering this feature.
Activity Tracked: Post and page views, video plays (if videos are hosted by WordPress.com), outbound link clicks, referring URLs and search engine terms and country. When this module is enabled, Jetpack also tracks performance on each page load that includes the Javascript file used for tracking stats. This is exclusively for aggregate performance tracking across Jetpack sites in order to make sure that our plugin and code is not causing performance issues. This includes the tracking of page load times and resource loading duration (image files, Javascript files, CSS files, etc.). The site owner has the ability to force this feature to honour DNT settings of visitors. By default, DNT is currently not honoured.
WordPress.com Toolbar
This feature is only accessible to registered users of the site who are also logged in to WordPress.com.
Data Used: Gravatar image URL of the logged-in user in order to display it in the toolbar and the WordPress.com user ID of the logged-in user. Additionally, for activity tracking (detailed below): IP address, WordPress.com user ID, WordPress.com username, WordPress.com-connected site ID and URL, Jetpack version, user agent, visiting URL, referring URL, timestamp of event, browser language, country code.
Activity Tracked: Click actions within the toolbar.
Refund Policy
If you are in any way dissatisfied with any of our products or services, please contact us and let us know the details.
All of the products downloadable directly from this website are backed by a “no quibble” refund policy. If you are dissatisfied, please let us know and we will issue a refund of your payment, usually within 7 working days. If you are dissatisfied with a product purchased or downloaded from an external website (such as Amazon), please contact the website from which you made the purchase to obtain recompense.
Terms and Conditions
By accessing and using maggywhitehouse.com or treeofsapphires.com or treeoflifepublishing.co.uk (“these websites”) you agree to observe and be bound by the following terms. If you do not agree to these terms, you should exit immediately.
The contents of these websites, and all related information, do not constitute advice whether personal, medical or financial: visitors to this website are wholly and solely responsible for their own decisions, actions and all resulting outcomes.
By using these websites you are agreeing not to hold Maggy Whitehouse, Tree of Life Publishing or any directors or employees of either of these entities responsible, in any way whatsoever, for any outcome that may arise from using these websites and any associated materials (such as the courses and related audio).
The intellectual property rights (including but not limited to copyright, design rights, trademarks and patents) in the content posted on this website remain the property of Maggy Whitehouse and/or Tree of Life Publishing. All rights are reserved.
These websites and their contents are provided “as is” and without any representation, term, condition or warranty of any kind, either express or implied (and whether implied by law, custom or otherwise) in respect of these websites and/or their content.
To the extent permitted by law, Maggy Whitehouse, Tree of Life Publishing or any of their directors or employees, shall not be liable to any person or entity for any loss or damage which may arise from the use of any content on these websites or access to these websites.
Maggy Whitehouse and Tree of Life Publishing reserve the right at any time and without any notice to remove, amend or vary any of the content or services that appear on these websites.